Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier: vfzbQEbcLqSaB6tRb7fjdaK3X04szqQWKj68X/Txkgo=
Subject key identifier: 23:3D:04:85:1E:B2:80:97:87:17:A1:6C:E9:71:71:39:53:08:42:F7
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 0196851120FA4A2B3561780B733F7F626E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number: 151C
Signing time: Wed 30 Apr 2025 05:00:14 +0000
Manifest this update: Wed 30 Apr 2025 05:00:14 +0000
Manifest next update: Thu 01 May 2025 05:00:14 +0000
Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: X1DeGmspuApZmTiXg4eDfmpkqUFXZM0ldNd0XvyP7Ng=)
2: ZJCu1yU9m3Cq5WWLkeWOotibU-k.roa (hash: km1a7hNobV+/Bq/2l3UQLOxoqTuuQQAxWKpbP+WCwQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:20:fa:4a:2b:35:61:78:0b:73:3f:7f:62:6e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Apr 30 05:00:14 2025 GMT
Not After : May 1 05:00:14 2025 GMT
Subject: CN=233d04851eb280978717a16ce9717139530842f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:b2:43:f1:d6:09:b9:89:3f:0f:ab:de:85:
cc:55:f5:f8:46:0d:b8:60:d6:f5:f5:9d:e6:71:eb:
e2:b4:b6:f6:53:d0:39:f6:71:da:e9:54:9e:80:50:
9b:6f:a4:57:19:b1:82:4c:8c:b3:cd:31:94:76:35:
a2:e2:4e:6e:09:07:2c:cc:f7:c5:bf:24:6b:da:62:
d0:cb:0c:18:4b:a4:7a:04:c4:5f:28:fc:aa:1b:a3:
7a:37:15:4c:3e:84:d2:30:78:b1:49:41:d7:14:ed:
20:af:2b:25:a1:83:4b:31:7c:6e:cc:4b:d4:47:31:
59:b2:5d:ab:28:40:62:37:11:c4:43:46:cc:fe:57:
65:31:41:bf:9a:25:f3:d3:a9:f9:96:cd:88:08:fe:
13:5f:b8:82:cd:ae:9a:19:81:4b:e3:a7:8f:14:4b:
46:ea:a2:46:b2:24:eb:2f:1e:0a:e8:b4:49:8b:c8:
ad:6c:6b:e3:08:93:51:a9:fd:f4:0a:76:66:d1:e5:
2b:44:6c:55:7a:39:e5:73:ff:83:8c:f9:8c:69:29:
2f:3e:eb:ab:7d:7a:47:aa:16:50:7c:a3:ef:71:bb:
4a:18:12:a1:0f:e7:57:61:ae:dd:2d:66:40:9b:14:
39:43:8d:fa:3b:af:2a:4e:3c:61:e7:37:dd:b9:ee:
42:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3D:04:85:1E:B2:80:97:87:17:A1:6C:E9:71:71:39:53:08:42:F7
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cc:fa:5d:51:24:a0:10:b5:dd:18:71:f2:d9:39:4d:a1:cb:
14:e2:a1:32:53:36:b5:78:d7:b4:a4:5a:f9:28:02:ac:ab:90:
22:95:c8:95:ce:4a:3e:a7:0d:f1:c6:4e:2e:8a:a4:57:19:29:
fb:21:5f:d8:87:47:65:d6:eb:db:13:3b:c3:81:c8:8c:d0:3b:
f3:4c:9c:9e:ce:82:b6:90:a5:cf:28:ed:df:61:e8:91:3f:2c:
c0:f8:1b:b3:2c:2e:bf:66:8a:f3:bb:20:e9:dd:db:54:f5:3f:
e3:e8:00:72:a6:c3:ef:2b:da:fe:fb:ca:c9:45:80:27:f6:7a:
d9:df:73:e9:c0:fe:de:5f:3c:90:6d:e4:ed:ad:ea:f1:6d:de:
1a:03:ec:82:e1:b5:cc:1f:e1:6f:f3:46:91:dc:ad:e7:b1:d6:
b4:71:bf:f7:2a:49:c6:00:53:17:8d:63:7a:87:21:57:8e:69:
f6:aa:c5:7a:c7:cf:07:2e:a9:01:51:31:a0:0b:6b:91:1e:3b:
fc:e5:99:70:e4:e8:4f:3e:dc:6d:bb:1d:0d:80:fa:a4:cc:1c:
cd:3c:df:e8:4d:6d:bc:18:c8:1a:00:9b:56:01:d8:e5:95:23:
8b:24:8a:30:7d:89:2f:ef:15:fa:e5:fd:dc:48:18:6b:44:bb:
55:16:c7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:49:01 2025 by rpki-client