Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier: 6kJ2hKR1tXLyhlF2/BLeXudgCep7wFSOtkncRhQLjAA=
Subject key identifier: 61:F1:33:DC:24:CB:3D:8E:32:14:4C:F5:27:DF:83:66:5B:9D:3C:61
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 01967454AADA6346607C263B09B34A4E367F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 23:00:27 +0000
Manifest this update: Sat 26 Apr 2025 23:00:27 +0000
Manifest next update: Sun 27 Apr 2025 23:00:27 +0000
Files and hashes: 1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: XbmXyRx84X4uz9SFSl6Hp04qPwjdgNh9M6nkY3uhFhk=)
2: GQRsCJTR5eyMxFAsEzKdn1EA608.roa (hash: HAXZ0MI6t/VbluxA0NO0jceUtQ5vVV4JGD/6H3yxEPg=)
3: lqRpbscM182PANHFGsqMxFenQsU.roa (hash: KSrFDxAg8q5YynrUWiOm6jdQGqkWKL+PdBqVLGCQ1I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:aa:da:63:46:60:7c:26:3b:09:b3:4a:4e:36:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: Apr 26 23:00:27 2025 GMT
Not After : Apr 27 23:00:27 2025 GMT
Subject: CN=61f133dc24cb3d8e32144cf527df83665b9d3c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:84:11:63:7b:71:74:c1:e2:de:8d:69:3d:
6a:ce:94:ef:4f:47:4c:dc:ff:01:de:13:8a:40:9b:
60:41:27:7c:bc:0f:fc:32:3a:71:3b:fb:ff:fb:b1:
db:5f:37:cc:09:8d:58:2e:17:c7:c0:ef:93:2d:f2:
d2:fe:c4:76:9a:cf:83:be:5b:fe:a1:1e:04:fc:ef:
cf:a8:45:85:34:f2:7b:00:e8:a6:65:e1:35:41:90:
82:0c:db:57:20:0c:39:91:23:b2:68:92:02:58:f0:
70:6f:e0:d7:5d:e6:ca:57:bc:0e:8f:37:2f:31:3f:
0b:99:64:28:99:2a:90:0b:54:33:95:bb:c3:22:9f:
da:f1:29:45:28:ad:56:20:ce:c3:68:88:af:dc:43:
3e:b3:6b:f3:d4:50:22:de:02:cc:70:5f:1e:71:01:
e7:26:91:0a:32:ba:c5:af:5e:f2:5f:76:e0:1b:39:
bd:a6:aa:52:7a:02:1d:12:1e:3c:95:fa:b6:22:f2:
5b:3f:92:bf:46:f9:a7:4a:e2:a8:86:84:61:67:9f:
20:6c:93:f2:17:2a:45:ef:7d:f0:48:02:16:18:71:
6b:f7:b6:6e:98:f4:7e:33:33:ba:14:1f:44:86:bf:
6b:64:40:3e:88:31:1d:ca:57:c6:c3:33:1f:b9:83:
7e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F1:33:DC:24:CB:3D:8E:32:14:4C:F5:27:DF:83:66:5B:9D:3C:61
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:17:3d:ae:d7:b2:4c:d9:4f:61:22:24:65:db:43:02:6d:05:
ad:4b:35:fd:f3:bc:2f:14:5b:54:f2:f6:7c:89:36:1b:33:b8:
79:3b:a3:44:3a:a0:00:e8:1e:7b:43:d6:4c:ba:54:2c:87:4c:
9d:1c:2f:5d:cb:ac:2f:c4:3e:37:bb:01:7a:08:41:b1:65:ce:
11:48:ff:e8:a6:bd:6f:cb:b7:4d:0a:97:f6:f0:5a:d0:59:e9:
33:89:90:dd:44:6b:ba:77:08:cd:a1:33:d4:62:27:10:65:81:
d3:01:61:7f:09:bc:47:92:c3:b0:10:eb:aa:ed:b5:03:76:7d:
25:6f:6e:38:b3:bf:dc:2c:19:b3:0d:b2:a7:75:6f:d0:b2:de:
2b:b3:0e:09:aa:d9:49:ba:6b:0c:ff:1b:d1:50:1e:f9:bd:68:
8d:21:8c:85:0d:54:3f:52:d0:04:f1:5d:53:51:80:78:01:59:
66:54:56:3c:2f:eb:cd:a9:68:ff:5f:42:f6:2c:2b:a1:d0:88:
c9:e8:3a:9e:4c:1d:3b:ef:7b:01:64:52:0c:02:8a:b9:d5:d6:
3f:d5:cd:7d:ae:d7:14:ee:23:8e:9c:43:1b:8a:8f:96:b0:d1:
11:36:49:b7:44:be:b1:85:c0:b1:17:be:3b:15:5a:bc:f2:e9:
f1:8f:17:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:44:21 2025 by rpki-client