Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
File: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json)
Hash identifier: gOQTEe/YvVUjMiZfINRoJJB7G5Zk2NxVVOdfwXCY/Hk=
Subject key identifier: 28:99:61:F4:0A:2C:BF:60:4B:50:E5:E9:CC:21:41:1E:6C:90:58:E2
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial: 019684DAB0AAD45D158FE3DEC92376D1C612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
Manifest number: 1395
Signing time: Wed 30 Apr 2025 04:00:46 +0000
Manifest this update: Wed 30 Apr 2025 04:00:46 +0000
Manifest next update: Thu 01 May 2025 04:00:46 +0000
Files and hashes: 1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: 13GiRbsSKGzOnmI5OsVwLIuG4DW62WoQ2UyQ96+s7Fc=)
2: jzen_y9MjkJUaSD6dgV7vhjezg8.roa (hash: D4rABI9YVwiue3KhIMfk5XfCTjj00ChB0kZlnVkANPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:b0:aa:d4:5d:15:8f:e3:de:c9:23:76:d1:c6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
Validity
Not Before: Apr 30 04:00:46 2025 GMT
Not After : May 1 04:00:46 2025 GMT
Subject: CN=289961f40a2cbf604b50e5e9cc21411e6c9058e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:dd:ca:b1:d5:f8:e8:da:08:e9:f3:7c:8a:af:
b0:a4:0e:8b:e8:41:1b:fe:37:12:6c:c9:43:87:71:
61:7e:92:cb:1b:28:5b:fc:9a:98:aa:12:16:d6:62:
9f:c4:05:c9:2c:5b:05:f5:02:28:99:e4:2a:53:e6:
f3:0f:97:b9:f5:53:fc:c7:8e:c6:1c:ff:2a:5b:df:
6f:8f:7b:2c:8e:52:c7:cc:8c:37:9a:c1:2a:69:13:
1d:bf:fc:92:ee:ed:bd:28:a1:da:6f:46:07:38:23:
50:fa:e2:5f:39:07:c2:e4:5b:da:82:8e:42:77:69:
86:76:14:5d:57:97:d6:65:fb:c3:5f:11:3b:e3:6f:
65:57:80:76:49:72:eb:f4:c9:46:30:3c:c4:5f:11:
b1:50:ab:50:99:52:54:b6:c6:44:30:6a:42:f0:f0:
5a:95:85:10:14:8f:b4:08:d4:e0:56:b6:31:e1:d7:
1f:c4:ad:ef:51:94:7a:60:6e:f6:5a:27:16:dd:f8:
11:55:8a:e9:6d:d6:c9:e9:0d:8c:81:c9:20:3f:1e:
95:c1:8f:54:b4:18:a5:ba:7a:d9:50:64:98:64:81:
d6:23:78:63:9e:9c:de:9b:f5:38:84:19:4c:3c:8f:
0c:d4:7f:a8:10:c2:96:54:59:83:4a:7a:a9:f4:f9:
e3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:99:61:F4:0A:2C:BF:60:4B:50:E5:E9:CC:21:41:1E:6C:90:58:E2
X509v3 Authority Key Identifier:
keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:92:94:ee:68:a3:21:53:fb:10:20:4d:5d:3a:fb:a9:07:d1:
b5:52:ea:d9:0b:05:ec:0e:30:99:47:df:9b:10:92:64:9c:ed:
e9:64:e9:4b:42:7f:45:e2:18:90:a7:97:52:33:6c:96:d1:12:
c4:46:a0:a2:aa:c3:23:76:de:2d:ae:a3:36:a1:6d:9e:e0:67:
94:98:81:c3:79:d9:1b:a3:a2:a6:01:83:ae:32:33:46:8a:e0:
e2:48:f2:2a:29:a5:f0:63:3a:fd:31:5d:d0:56:88:7d:54:1a:
d7:2c:bf:b1:5c:f8:7b:ad:c5:5d:dd:f8:30:b5:06:2c:d4:47:
5b:e2:97:bf:05:10:b8:5f:16:65:fe:cd:09:b0:61:df:1a:70:
64:52:45:39:c9:22:0f:db:a9:86:18:59:fe:e1:16:ed:36:fa:
b1:85:c6:9e:4f:69:9c:1d:c1:a2:52:31:f7:2b:53:4e:ad:48:
29:b4:4b:c4:80:ce:74:d7:74:82:86:27:a8:bd:52:ba:89:5f:
f8:50:fa:ba:17:65:92:f6:5c:4d:49:5c:09:54:37:a2:f0:13:
79:80:0c:79:63:f4:c2:b1:fa:0f:38:af:c0:6c:1b:04:4f:e4:
fb:6d:7f:d9:bf:3d:95:e2:1c:fa:24:cd:31:c4:a2:fc:56:d2:
60:aa:0a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:35:15 2025 by rpki-client