Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: yTKG4MacGKZZs49cBadZfEMUn3fuPH22NT5RETNDwhc=
Subject key identifier: 3A:06:BC:87:8D:B1:E2:5D:ED:79:92:39:12:B5:8D:4A:46:B4:ED:2B
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 0196835A2F4CAE56E496225A93E95D435369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 21:00:47 +0000
Manifest this update: Tue 29 Apr 2025 21:00:47 +0000
Manifest next update: Wed 30 Apr 2025 21:00:47 +0000
Files and hashes: 1: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: Nbjuu2oCfBVN3cq5foGKT9fGmprV2iNyZ93HUld/vl8=)
2: KW800OmJGIdT7uikc0QcQ975IG4.roa (hash: dwHKNqVSICACPiCia+yUDPbsR26gug+E9f0Pra0zV6s=)
3: cEC9bPBmfz9Z43qJKU1IUGSC0lI.roa (hash: 4mEdeYIHzDK/DCJ4cVdrdS7DkgcRn2OeioiYgUbofOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:5a:2f:4c:ae:56:e4:96:22:5a:93:e9:5d:43:53:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Apr 29 21:00:47 2025 GMT
Not After : Apr 30 21:00:47 2025 GMT
Subject: CN=3a06bc878db1e25ded79923912b58d4a46b4ed2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:d3:1f:30:a2:c8:22:65:a6:66:a6:b3:fe:
59:5c:d7:d2:fd:8d:27:b0:e6:14:56:16:45:af:61:
19:fe:e4:49:8b:a1:72:59:8d:14:2b:7a:a7:95:f2:
99:e1:56:de:5e:63:3d:6f:7e:d5:bd:48:dd:8c:05:
05:25:b2:a9:cc:04:73:86:01:79:79:0d:3a:e6:33:
ad:b4:95:62:81:f0:b0:0e:1e:38:8d:a1:f5:94:be:
23:13:a0:81:29:2d:10:4b:54:1d:4d:0a:02:94:e9:
10:83:04:82:66:dd:3a:3f:71:9e:ad:10:c0:7e:ec:
45:44:94:b0:92:a2:ef:fa:ce:9d:86:af:73:ad:e1:
87:09:8b:4e:dd:18:9c:b7:6f:c1:1d:85:f2:f9:ae:
d8:af:f4:fb:f9:80:bc:da:74:a5:52:63:21:a3:b6:
a9:c2:a2:b5:d3:39:d8:e5:91:3f:02:70:d9:2f:69:
8e:6c:fb:53:7d:79:19:49:6f:71:f6:e3:0c:08:2d:
4a:d0:13:eb:6a:12:4f:52:d3:2c:10:4c:02:39:67:
2a:01:48:23:a0:4d:2f:06:eb:90:aa:48:73:d5:7d:
70:66:09:84:04:26:e2:1a:be:99:00:85:1d:70:ec:
da:dc:ef:59:d7:b6:70:81:94:a3:bb:65:41:01:86:
b2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:06:BC:87:8D:B1:E2:5D:ED:79:92:39:12:B5:8D:4A:46:B4:ED:2B
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:df:42:e3:3d:0a:5c:7c:37:cf:36:78:3a:57:e6:fd:7d:09:
df:08:6a:3f:b7:87:e7:93:a6:f8:94:e2:08:f6:b2:9a:4c:b6:
2d:5a:7e:7d:c1:76:b3:29:5e:de:2c:2d:58:e6:c5:de:0a:57:
7f:f7:2f:e4:d6:34:83:1d:01:a6:34:03:c4:7b:7c:00:0c:9b:
05:fc:41:b1:3b:70:1c:54:20:6e:96:56:74:cb:b5:ff:e3:1d:
90:79:2c:e7:21:a3:6d:d7:b4:1e:4a:4a:97:27:18:de:5f:82:
a6:a8:32:13:68:3e:d3:6f:ed:5f:80:64:0c:4a:b8:d3:db:01:
b8:1e:60:46:49:2e:fd:f8:98:88:b7:4d:e6:2d:7f:9d:c3:96:
94:0d:5c:1c:09:5a:2e:d4:ee:03:14:52:5a:4d:1e:37:d9:f2:
7c:11:dd:c5:97:a1:c0:e4:27:32:9b:7b:ba:6f:9a:e4:33:8d:
e3:c0:7f:70:86:40:db:b1:31:57:c6:50:00:70:37:7d:86:75:
2f:38:fe:65:08:e0:fc:83:97:67:41:35:e0:d1:22:5a:89:fa:
82:6c:0a:d4:23:4a:1c:b1:92:89:33:1b:9f:13:10:28:c6:29:
65:89:b6:6c:51:82:02:1c:8e:79:cf:74:1c:40:b6:44:9d:2e:
42:1a:46:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:05:11 2025 by rpki-client