Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier: a43WLNEuvYYv5e7988DdtPVDfPuO0uOQxgTcYM8Ov6o=
Subject key identifier: 18:86:AA:15:E0:0A:82:D8:55:DC:41:6E:53:E4:4F:80:F4:F0:C5:08
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 019674546734D9E53355B11C9D977EEE35FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 23:00:10 +0000
Manifest this update: Sat 26 Apr 2025 23:00:10 +0000
Manifest next update: Sun 27 Apr 2025 23:00:10 +0000
Files and hashes: 1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: QRCrdu299ipaye2gGuTwlkVk0g2Dzz+HeqiHQsAhImE=)
2: aUaxmc4yn8DWQgssucohLW2GTOs.roa (hash: SOdn4BM+lJeHsX2EdSBfNJjI/S1sYp7gdR+GcCunEpg=)
3: v8c3Ww_Eihi-LvyDOVvXBJwo9F8.roa (hash: 0sTmm1OvDNHW8cfRGw9gOppSFK5VfYqSrXVw8T0yJBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:67:34:d9:e5:33:55:b1:1c:9d:97:7e:ee:35:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Apr 26 23:00:10 2025 GMT
Not After : Apr 27 23:00:10 2025 GMT
Subject: CN=1886aa15e00a82d855dc416e53e44f80f4f0c508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2b:3f:5d:55:1c:ce:92:b0:28:d3:47:7e:6f:
a5:22:49:f6:42:57:af:74:15:97:1a:0d:b2:46:0d:
9c:cf:ac:0e:be:c9:1a:83:ee:c3:f2:9a:e0:46:a1:
5a:89:f4:1f:3f:e6:23:a5:22:af:dc:4d:3b:15:53:
ed:56:76:55:61:46:a5:db:78:b8:47:fa:b3:44:10:
e9:f6:ee:47:0d:4f:96:5a:16:83:f2:d7:b7:dc:08:
22:73:e1:9a:63:29:39:49:fc:61:d0:31:be:7b:eb:
a2:7e:70:3a:dd:0f:e8:b0:9e:aa:f4:53:49:ac:d2:
e8:57:ea:5c:aa:3b:94:e8:8b:5b:f6:e9:5a:c4:43:
a8:20:c1:bb:6f:ba:04:42:cd:6d:0b:5b:c7:10:5e:
2f:84:6f:70:53:d1:11:7c:3c:98:b2:cc:6f:5c:6b:
cd:3e:d4:b2:c5:21:c3:ec:30:97:46:3f:aa:03:89:
8b:59:af:e2:3d:00:d6:8d:37:95:db:65:fd:23:2e:
89:49:41:fe:da:a5:ae:44:7f:d5:d7:62:8e:1a:53:
8c:2c:30:12:f6:cd:af:1c:49:98:cc:19:c1:a0:cf:
c0:14:67:0a:1d:79:6e:d3:9a:52:f3:aa:5e:99:9b:
5a:8f:fe:c1:49:9b:8b:30:a5:5d:a7:88:e1:a7:dc:
22:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:86:AA:15:E0:0A:82:D8:55:DC:41:6E:53:E4:4F:80:F4:F0:C5:08
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:58:bc:2b:e7:37:aa:20:f3:a6:ba:a0:cb:33:6a:1a:fa:0d:
96:96:df:a6:0a:43:61:6d:6c:e0:47:1d:e5:6a:3b:32:c2:94:
b9:6a:9d:c7:7d:bc:1a:86:50:69:df:69:f8:a3:35:90:f1:4f:
7d:bb:bb:80:d5:8a:26:00:ab:6a:08:2f:04:09:09:f9:3c:ce:
a3:97:48:5e:ce:4e:c6:84:68:2c:25:dc:bd:de:57:a8:b5:88:
3a:26:f2:6e:61:e2:6a:55:db:d8:55:42:d4:80:1d:3d:fc:6e:
13:ac:cc:12:c6:cd:f5:8e:1e:e4:8c:e5:45:a4:87:0c:df:3c:
33:3f:1f:3a:cb:46:00:24:3a:0e:b0:6f:65:49:a3:5c:8d:28:
17:43:e6:ec:68:dd:c9:83:b8:b8:64:95:96:b6:5e:65:5d:9c:
15:28:1f:97:f5:68:71:46:a4:52:b6:88:cc:1d:8b:b2:19:02:
f3:56:be:b4:b3:2c:92:43:5d:08:2e:a9:c6:6b:f5:97:72:81:
9b:c0:86:7c:bd:a6:09:2d:81:f0:ab:86:58:7c:2b:ab:2a:ad:
6f:03:6a:b7:1e:3a:0e:8b:c4:2a:66:19:c9:c4:c0:f0:97:24:
d0:cc:a1:70:9a:a0:c1:f6:1f:72:a2:f3:92:fe:0d:11:56:c3:
53:16:b0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:13:58 2025 by rpki-client