Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
File: 3OVg8OyFDainwPjW84JRAtTeSs4.mft (raw, json)
Hash identifier: qJX4RQ1QZ90MWJQ2KXVcrXhGdJew8H5lNsSPan5FYf8=
Subject key identifier: AE:D7:46:1E:85:5E:7E:0F:7C:96:91:85:13:AB:82:8D:11:16:BE:3B
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Certificate issuer: /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial: 019681A31D11C786F898B457BB0DB3DF4899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 13:01:12 +0000
Manifest this update: Tue 29 Apr 2025 13:01:12 +0000
Manifest next update: Wed 30 Apr 2025 13:01:12 +0000
Files and hashes: 1: 3OVg8OyFDainwPjW84JRAtTeSs4.crl (hash: TXzm/X7HGve8L/6vgalaLGREDCS7APV+65zhCsD+VTM=)
2: cvAMZ-azozJjAwqBJfc2rmmZkME.roa (hash: Gewk40CVQw5q21r2SfPnFc/pGMGpE0T4SZt3vyzVUaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a3:1d:11:c7:86:f8:98:b4:57:bb:0d:b3:df:48:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Validity
Not Before: Apr 29 13:01:12 2025 GMT
Not After : Apr 30 13:01:12 2025 GMT
Subject: CN=aed7461e855e7e0f7c96918513ab828d1116be3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:f6:54:a2:76:5b:18:61:c9:5b:51:7c:f8:
6f:9c:e6:11:17:c4:95:c4:f2:3b:d5:92:a8:6c:75:
5e:89:e0:6a:24:9a:9f:43:a5:6f:37:2f:33:06:5f:
af:54:2c:cd:aa:51:a4:84:e7:5e:a0:49:ae:39:8a:
3f:89:48:76:aa:43:3d:43:76:39:2b:f4:2b:0a:03:
9b:24:1e:d8:33:58:76:12:6f:8a:90:b4:8b:a7:b8:
70:82:9e:f7:c3:b0:b9:9a:2c:92:6e:43:36:24:01:
17:b1:5d:ac:31:28:74:8d:7e:5f:a2:9a:2a:1c:15:
80:0d:2c:bd:8e:39:54:f8:dc:11:f3:35:21:a4:64:
bd:1a:dc:43:ee:54:39:17:ca:56:3c:49:58:41:a1:
4f:77:52:88:3a:aa:6b:e2:23:21:62:be:ca:68:b4:
49:24:c1:0e:43:bf:21:7b:f2:bc:da:83:d9:84:7e:
11:88:54:bf:e2:a6:f1:66:44:f2:e4:7c:08:7a:f5:
69:5a:bf:99:d5:3f:d8:9f:d3:13:04:b5:57:dc:fb:
2d:84:28:d9:61:64:d4:db:ba:ef:7a:ea:a7:44:b7:
22:44:2e:6f:c5:83:41:a3:2e:15:91:6e:d4:d0:06:
d8:1e:6d:62:2d:60:76:6b:a0:2d:ec:24:58:86:1c:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D7:46:1E:85:5E:7E:0F:7C:96:91:85:13:AB:82:8D:11:16:BE:3B
X509v3 Authority Key Identifier:
keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:10:47:a6:9f:0c:b3:ac:99:35:7e:d4:b5:10:e1:db:54:41:
a4:a5:24:39:fa:f6:ee:8a:ef:81:eb:a0:fa:99:3b:6f:69:9e:
f7:19:f8:37:3f:e5:5e:18:9e:2d:19:4e:08:26:2e:ac:ca:bb:
98:2f:30:3b:8d:6f:9d:34:14:e1:82:a0:bb:3f:c5:7c:96:48:
22:04:27:3f:8f:bb:76:ae:32:bf:0f:30:5a:d8:e9:b8:ed:f5:
4f:92:a8:b0:ae:fc:0a:d1:37:9f:e5:4f:5d:4e:29:cf:d4:33:
90:45:41:13:01:96:5b:51:00:c2:7b:28:a1:aa:11:68:7b:da:
39:32:1f:c0:8f:ae:d2:51:06:cd:1d:73:a2:d0:28:23:33:9e:
75:e0:c7:db:95:dd:0b:15:57:55:5c:68:a8:a3:9a:6a:aa:17:
b2:f7:35:6f:37:3d:4c:4b:6b:e2:e6:7c:d3:1d:bd:6b:f4:2d:
4a:34:d3:d6:05:3b:14:a5:93:3b:3f:87:2c:97:63:9f:c2:e4:
b6:07:fa:bf:9e:9d:b4:c0:02:7f:bb:c2:c8:f3:42:f7:15:53:
8f:a7:a9:60:f2:b2:a4:ae:15:55:ac:48:54:07:cd:25:56:28:
be:1f:3b:53:b1:0d:e2:02:64:b9:c3:da:71:ac:eb:7b:a8:d0:
d0:3c:8d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:59:26 2025 by rpki-client