Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json)
Hash identifier: 2zRguYVonEAbqxWNS8lu/6LQAup9efwjTZlMxGHnpoQ=
Subject key identifier: E2:D4:88:38:91:9C:08:61:D3:54:17:05:9F:B8:A2:33:43:8C:1B:25
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial: 019686C8F20EF26BC900E8D6DA3D16B00189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
Manifest number: 0895
Signing time: Wed 30 Apr 2025 13:00:38 +0000
Manifest this update: Wed 30 Apr 2025 13:00:38 +0000
Manifest next update: Thu 01 May 2025 13:00:38 +0000
Files and hashes: 1: 05EOtNo-Yw22y8nOEhjh34kR-xs.roa (hash: bx1cLzgI6GeSkKgZhlF0GUx8NZh0BLXhkqY0eigb2zc=)
2: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: nomCLzYg0medgD64BbF4eoV9QEIl5fDYPxIvJ1AEekY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c8:f2:0e:f2:6b:c9:00:e8:d6:da:3d:16:b0:01:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Validity
Not Before: Apr 30 13:00:38 2025 GMT
Not After : May 1 13:00:38 2025 GMT
Subject: CN=e2d48838919c0861d35417059fb8a233438c1b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:03:a6:8b:6b:6d:e2:7b:d1:0c:54:e4:32:
70:49:93:ac:c4:95:a0:6d:7f:7d:90:57:64:25:4c:
34:81:4a:52:60:f1:53:f8:60:59:ec:10:c5:b9:b2:
fc:b9:99:df:86:4e:7b:7a:6e:0a:6d:9d:24:0d:da:
1f:41:a4:bb:b2:05:19:c7:cf:27:89:33:9f:4c:0b:
ab:ac:df:65:b6:d1:5c:29:7d:a0:27:6c:1e:a2:39:
b8:1b:6f:3b:c1:ce:3b:51:75:c3:a0:f9:c2:2c:7a:
40:45:5d:08:60:64:be:86:ae:6e:04:22:0f:31:61:
49:4e:2c:a2:4b:99:96:81:ef:14:64:f1:0d:fd:48:
92:e2:3d:c2:5a:b1:b4:16:73:43:a6:8e:2f:18:2e:
a1:81:0b:ee:46:b7:de:4d:f8:5a:1c:d0:d1:b3:7a:
84:11:5f:c1:97:9a:8f:3a:c8:a7:0d:0a:24:11:f9:
64:70:0e:2a:e0:2d:38:ad:fc:0c:a0:bc:35:f6:aa:
29:cf:5a:9b:74:ca:28:d5:e7:72:b2:52:ea:42:65:
47:ee:bc:10:96:a9:9a:63:f1:ee:90:90:20:8a:0e:
60:f6:07:ad:6f:c1:95:15:4a:91:3a:db:7d:bc:c0:
a9:7a:dc:f3:cb:10:0d:05:12:8f:7c:ce:e6:93:e0:
3f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D4:88:38:91:9C:08:61:D3:54:17:05:9F:B8:A2:33:43:8C:1B:25
X509v3 Authority Key Identifier:
keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e3:f7:c5:d9:b0:04:1d:98:9e:ae:2a:05:f0:e8:e8:83:01:
e4:61:e3:ec:77:63:31:2e:96:02:4a:12:6c:f6:08:43:9d:d2:
77:cc:8e:48:aa:34:72:b0:ee:e3:5a:ff:14:c0:b1:94:22:04:
7c:ec:bd:f5:07:09:67:df:c7:6d:ec:ae:bc:14:18:4f:7e:e8:
7b:0f:74:b6:e1:c1:44:43:9a:9e:0e:18:7a:16:f2:15:c8:6f:
40:cf:e8:a8:9c:a9:0d:8f:15:aa:0c:e0:61:e7:9f:4a:47:e1:
c9:8d:ae:52:53:07:54:ef:77:aa:3b:da:4a:af:c4:3b:14:25:
bd:08:ce:b4:10:3e:fb:1e:e8:01:a9:02:f5:04:cb:03:c2:7b:
cd:5d:87:ac:45:f8:dd:3e:50:e8:36:c9:eb:93:6c:d3:dc:45:
47:29:3f:08:c5:84:c8:71:72:a1:40:57:15:94:9d:29:36:9f:
e3:5b:43:c9:3d:3a:88:87:a4:b8:aa:e6:be:6b:48:2e:c1:e4:
d7:db:67:5b:da:f0:50:d1:3d:ef:b0:35:00:e5:d3:d2:ff:69:
88:7c:09:41:d6:f0:bf:08:da:bf:98:3a:ff:16:f2:38:d9:36:
4f:ce:43:f2:44:37:b4:40:11:4a:77:fc:64:8b:6a:5e:e1:46:
85:2c:82:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:33 2025 by rpki-client