Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
File: 3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json)
Hash identifier: v9Uhk+0OJT8bDHYtlXsrJTtfEqdUpk6oWS1q2UxCGik=
Subject key identifier: 78:18:B9:8F:0D:CF:24:A7:B4:F9:3B:D6:CE:83:DC:DF:E8:C5:CD:34
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial: 0196895CF7C543AD0C9A8A85B7B923EAE3CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
Manifest number: 0C4F
Signing time: Thu 01 May 2025 01:01:33 +0000
Manifest this update: Thu 01 May 2025 01:01:33 +0000
Manifest next update: Fri 02 May 2025 01:01:33 +0000
Files and hashes: 1: 3f1U8HcG3gg1d7c-AMV0OeLqnk4.roa (hash: 6g/YiGFM7SXH1avma+AWhdPQYeSM8xFquer6wIrnMrw=)
2: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: 10gRT2NEfTXMrPeuY3SqhU66kTgU3q5wA2iL4QZr7L0=)
3: LKSIMzg2qS8EWL02SO5YPjrz_I0.roa (hash: ZtwqDuK6zfdHnP5iApdAnlCr/naZTEL8mOtuOOiHgUY=)
4: uKO3HquanWKUmJ90M8YK1DIe1PA.roa (hash: XUrZ548wn+DveWLDDAs++NbjxnozKfTkNs4dRtLEX4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:f7:c5:43:ad:0c:9a:8a:85:b7:b9:23:ea:e3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
Validity
Not Before: May 1 01:01:33 2025 GMT
Not After : May 2 01:01:33 2025 GMT
Subject: CN=7818b98f0dcf24a7b4f93bd6ce83dcdfe8c5cd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0a:30:e2:09:fa:2c:d1:9f:a1:ce:84:55:6b:
14:0c:2a:3e:c8:ee:50:da:ef:33:56:f6:01:79:e4:
d3:85:76:67:a2:54:01:3c:4a:60:c3:f0:9a:58:72:
05:39:ac:f6:b6:cc:f6:b5:07:7f:20:68:70:26:98:
0d:e9:cd:96:3b:ae:aa:78:98:5a:3c:6c:b3:14:4e:
1f:f3:c5:ec:4d:3f:6c:8b:ed:60:be:11:29:73:b5:
01:e6:c3:91:11:01:2b:2e:65:af:76:53:3c:ad:fe:
9b:43:01:22:05:28:51:88:36:e1:7b:98:b6:b4:f0:
e6:29:01:dd:41:17:63:e9:b2:4b:9f:c3:dd:7e:59:
d8:ba:28:50:12:4a:1d:ce:24:f0:01:61:ea:5e:bf:
66:a4:78:fc:52:1b:6f:7c:20:1f:69:64:74:35:9c:
7f:2d:fe:ba:e3:6b:aa:25:84:c6:3b:d8:ab:95:fa:
dc:b2:51:de:f6:56:7c:56:53:27:99:5a:10:0b:c2:
4c:70:99:2e:c9:a8:89:da:d3:81:0c:42:10:77:0b:
ca:e8:f5:e0:45:5b:b2:d2:93:85:45:5c:7b:23:4f:
b1:f1:97:23:1a:3d:62:e6:a3:ca:80:43:cc:c2:d9:
85:1c:09:f2:40:91:bf:f6:a0:20:42:12:91:df:3b:
41:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:18:B9:8F:0D:CF:24:A7:B4:F9:3B:D6:CE:83:DC:DF:E8:C5:CD:34
X509v3 Authority Key Identifier:
keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:36:f6:52:9d:f7:66:8a:55:d4:a8:bf:06:fd:39:46:07:a5:
8c:5c:69:db:4e:75:a3:09:58:cc:ef:d7:f3:56:b6:59:50:b8:
69:44:f0:51:2d:16:8d:e7:c9:ed:f0:8a:4e:4f:d4:2d:c2:74:
62:cf:a6:72:89:9b:fa:41:25:3a:f1:8c:d0:dd:4b:3a:98:3c:
b1:c2:46:82:79:56:0a:3e:ae:26:b3:34:33:2e:4e:12:da:71:
8c:2c:c9:62:7c:a5:3a:50:bf:e2:8c:de:34:89:32:80:27:28:
96:1b:b4:a4:80:c7:dd:5c:39:8e:32:85:76:fa:1e:d9:2c:65:
48:1e:b3:17:94:79:e8:59:b1:dd:62:95:9d:48:e7:90:5d:90:
3c:20:cb:a7:56:16:a7:b4:06:a4:75:65:da:e2:6f:7d:17:19:
98:ef:0d:62:8a:2c:d3:03:d0:77:f4:df:80:80:99:4c:d1:1d:
bf:41:d3:40:61:ec:31:04:81:10:82:bd:48:f9:10:0c:59:d9:
7f:a6:f1:01:9f:7b:e2:c4:c5:9c:27:36:b7:0a:2f:64:e0:4f:
16:86:4c:b0:7c:4e:30:8e:2f:3a:d8:bd:bb:4f:8d:e2:c8:4f:
de:af:d0:14:3f:de:68:a6:e8:90:1a:b2:36:0b:2e:f6:c6:e6:
d1:3c:7c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:18:47 2025 by rpki-client