Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
File: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft (raw, json)
Hash identifier: on29KtiIsbWVLLq7MZCYWjLxmHmFGDkfrC20r5QUqjg=
Subject key identifier: 72:17:0E:AC:2B:13:53:C6:22:56:34:FA:F6:6C:B4:64:40:02:CC:DB
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 01968021D923B1B2D7B7BB42767957073034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
Manifest number: 146F
Signing time: Tue 29 Apr 2025 06:00:23 +0000
Manifest this update: Tue 29 Apr 2025 06:00:23 +0000
Manifest next update: Wed 30 Apr 2025 06:00:23 +0000
Files and hashes: 1: 1-7jWzqH7wT1n-L8XkfK1kEabKfA.roa (hash: qrQpcX8LTv3WT8M/1yXwPjm8/udCR9jmZNcZtjA7oMg=)
2: 1ciAIP4p2-wqjGWDrjgweJTl63I.roa (hash: RB/2tnRmdGmG5VvdVWN1ncpG5RZ12mQa5BkOl0WIoTA=)
3: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl (hash: nx2kJl4bGEsI0Ll9nryC+rtqW/jGCnFKhMq/d5vdTY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:21:d9:23:b1:b2:d7:b7:bb:42:76:79:57:07:30:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Apr 29 06:00:23 2025 GMT
Not After : Apr 30 06:00:23 2025 GMT
Subject: CN=72170eac2b1353c6225634faf66cb4644002ccdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:45:7e:7c:34:14:9e:26:7a:1c:27:1f:33:
8c:7d:0f:7d:fe:60:a2:18:12:2e:90:eb:1b:e8:6e:
a5:22:96:70:9d:02:39:4e:75:6e:ac:35:15:65:1d:
19:61:63:ad:78:c5:17:70:6e:21:23:e6:12:d6:9b:
3d:e0:64:2f:09:a7:13:5a:75:1e:1e:60:ae:53:7b:
8f:31:25:ef:07:f4:5f:40:12:ae:e0:e4:00:d4:1f:
22:ff:58:36:98:84:12:62:86:9f:fc:bb:0a:89:a0:
95:08:a2:87:bc:37:22:e8:79:b5:f4:a9:67:54:ea:
ba:e5:10:32:52:79:4a:00:f1:92:6f:2c:57:a4:27:
d7:85:52:ce:4a:01:b1:e0:01:50:51:da:18:74:27:
39:d5:31:71:3b:dd:34:b4:63:b4:9d:2c:76:76:20:
f0:ec:cc:31:51:d2:6e:92:23:a9:0f:50:9a:1a:60:
bc:42:82:bc:1c:fe:52:5e:9e:8e:fd:b7:bb:8e:e6:
5a:ae:1b:41:8c:cf:30:3e:6f:8c:f7:ed:35:48:bc:
f9:41:f8:ba:53:e0:b4:c4:9d:96:6d:8d:75:fe:7c:
4a:9c:7a:bf:26:cf:ce:dc:6c:7e:2d:71:a0:b2:31:
dd:7e:05:d9:6d:2c:ee:9e:62:ed:88:61:62:9a:4c:
0e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:17:0E:AC:2B:13:53:C6:22:56:34:FA:F6:6C:B4:64:40:02:CC:DB
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e5:3b:35:26:a0:2c:e6:ad:37:49:a4:0b:1c:da:ce:b0:02:
38:6c:08:7f:65:f3:ff:f0:96:6f:f6:c3:62:f7:ad:67:d4:57:
96:14:23:2b:ff:47:0f:3b:46:ec:02:c4:8d:f8:ad:62:5a:e1:
a5:6a:04:8b:83:95:b2:08:80:b7:35:c2:a0:63:e8:2b:97:0b:
d6:1c:37:55:25:7e:ff:58:a7:c3:ca:79:9a:c0:07:b1:0a:05:
68:4b:90:5c:5b:dc:61:03:9a:bd:55:d7:b3:f8:09:e5:72:9c:
6d:0b:5c:08:8c:2e:78:3e:4c:77:2e:35:35:bb:d8:4a:8e:3f:
5a:44:0f:e3:01:1d:ed:9a:c4:70:2f:c4:dc:c8:72:f9:82:fe:
ec:19:47:63:ca:ab:60:2b:01:69:b7:1f:22:55:37:cd:a1:d0:
27:e8:01:73:77:be:9a:9e:09:39:f3:c4:8e:4b:ab:22:30:ec:
e4:07:2a:59:a4:8d:5f:b0:39:20:9e:f0:19:02:92:3e:c3:e4:
21:17:41:ed:47:36:9d:24:79:47:d1:c5:6d:7b:7f:8f:72:82:
e7:18:29:9e:93:78:12:0d:6d:64:a1:57:7d:b9:8f:bb:16:81:
49:5c:58:e5:93:e1:97:90:8d:18:cc:55:eb:d5:9b:a5:54:ad:
20:9d:e5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:49:25 2025 by rpki-client