Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: Rtyn3ApEoMbAMVAp2RTrOQWL20JvmDADg64sHLPunqE=
Subject key identifier: 39:3D:DD:DB:3B:39:50:B0:CB:C3:08:F3:18:43:F3:70:BB:6B:0C:F0
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 019684A3825E16D4B0A2234EEC72730AD2FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 151E
Signing time: Wed 30 Apr 2025 03:00:30 +0000
Manifest this update: Wed 30 Apr 2025 03:00:30 +0000
Manifest next update: Thu 01 May 2025 03:00:30 +0000
Files and hashes: 1: F0xtYGfQ_s_LJkUkk89IHcL9J5M.roa (hash: JVjlGGRIJlPuTdOW/N8SfdRvr3fAH3HHybxJ5aP4RD0=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: Qxv0NJKq1oJT7Jk31m3iAt2wN7VSok1/hQCGyL9SDPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:82:5e:16:d4:b0:a2:23:4e:ec:72:73:0a:d2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Apr 30 03:00:30 2025 GMT
Not After : May 1 03:00:30 2025 GMT
Subject: CN=393ddddb3b3950b0cbc308f31843f370bb6b0cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:7c:2a:79:3e:a5:47:2b:d6:32:f5:cc:8f:
f4:93:0b:d5:42:a0:ac:44:2c:b9:e8:14:7f:1d:81:
b7:b6:f4:16:3f:51:85:93:28:ae:e7:99:94:3a:a3:
01:a5:ca:b4:fc:4e:25:8f:e6:4b:55:1f:76:d5:2f:
84:a3:12:bc:27:80:5b:47:24:2e:aa:ae:d4:eb:5b:
f1:97:d6:cc:6f:af:8f:94:54:6b:99:ef:9d:64:c4:
cd:bf:c3:f0:e3:dd:bd:c5:1f:b5:6e:e7:d7:70:c6:
3e:1e:37:83:7d:c5:c3:cf:1b:72:a0:49:f8:a7:1a:
c7:b7:df:b0:04:fb:c4:bc:10:ed:73:6f:f2:48:00:
b7:87:e7:e1:97:a0:1f:e5:8b:0b:e4:1e:06:53:6e:
ab:d9:21:4e:08:ce:5e:72:17:87:4f:82:3d:fc:f7:
6e:a2:81:88:69:3b:ec:60:d4:c0:37:9f:4e:e8:1a:
7b:af:53:24:94:be:b0:59:ff:05:15:2e:b4:e3:ed:
04:fb:c0:01:a2:81:07:de:90:09:f7:46:c1:e9:60:
a8:1d:3c:04:6d:60:1c:fb:c6:7f:71:c7:f3:10:52:
8f:8d:2a:cb:c9:9d:c7:c1:2a:32:81:90:ca:b2:4c:
53:bb:62:cd:c3:bb:2f:c4:53:3b:49:bb:d5:3c:eb:
7e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3D:DD:DB:3B:39:50:B0:CB:C3:08:F3:18:43:F3:70:BB:6B:0C:F0
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4a:db:7f:3e:aa:f9:ae:08:00:94:fa:00:41:d5:3f:71:63:
28:b8:51:60:3e:8e:a8:1f:bb:d2:b9:a9:2b:f3:78:1b:1d:ef:
c7:10:ee:4e:d5:b3:20:97:c7:6c:0b:af:8e:98:82:bf:51:e2:
e5:77:71:70:cd:33:94:f1:00:69:7c:8c:0e:c2:12:1d:8d:c4:
82:17:a6:e8:4f:06:66:1e:4e:db:21:aa:9f:17:eb:9d:42:2f:
60:74:10:3d:78:74:6d:f1:ee:c5:b7:4f:11:28:95:e4:47:75:
39:72:fc:a8:64:c5:d2:19:78:14:97:04:c2:91:fd:fa:14:60:
db:c1:30:da:18:f7:77:39:57:53:ff:3a:e8:de:d4:e9:8a:37:
27:cf:f8:f4:b3:14:5a:5a:63:d1:15:d8:1f:a8:f6:e6:7b:6f:
48:19:f2:86:cd:aa:93:f4:cc:12:15:45:43:5a:27:38:81:cd:
a3:41:dc:e3:36:b7:18:bd:54:86:ba:ad:0b:20:84:83:df:ac:
42:25:d3:7f:a2:ba:19:e4:d6:78:ab:3b:00:c4:13:1e:9d:62:
63:cc:8f:0c:20:5b:82:8d:26:ce:5a:d5:80:3d:f4:47:d7:52:
80:e1:57:e3:1d:1a:42:ab:a9:f8:a2:15:79:11:63:68:a5:fc:
52:7d:88:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:28:00 2025 by rpki-client