Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier: gEP8zqyUq+dQ19cgNTd+dk5/O+ihszdbRKrAC9FPg6E=
Subject key identifier: 2B:36:9B:E6:FC:E5:5A:C4:0B:2A:A1:A2:5F:68:3D:A3:EC:A9:9B:5C
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 0196BFA59AAC147624AC3B7287DEE5F81CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number: 0F1B
Signing time: Sun 11 May 2025 14:00:23 +0000
Manifest this update: Sun 11 May 2025 14:00:23 +0000
Manifest next update: Mon 12 May 2025 14:00:23 +0000
Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: JQhf1/HddGhu0E3+I/cyLS4+VsEXOJipxhA7Ea8T1x8=)
2: HbrG3H8i4MVchy7ux-rBNewfgN4.roa (hash: ZEnkqludW6ORRLo4vaUnR4azLQNvPJWfXdiBq5telHQ=)
3: eqT6wyPQANegQWczS_E8NsRIGH0.roa (hash: uVTDWyi87OupvvigMLyo7l17Ar6OD8Dv20/y/RB28lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:9a:ac:14:76:24:ac:3b:72:87:de:e5:f8:1c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: May 11 14:00:23 2025 GMT
Not After : May 12 14:00:23 2025 GMT
Subject: CN=2b369be6fce55ac40b2aa1a25f683da3eca99b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:0f:3b:07:16:31:ac:19:48:92:54:8e:80:
1c:70:d2:45:43:b2:81:cc:a2:1b:86:c4:32:aa:e3:
18:83:8d:09:91:1e:4a:27:e5:92:53:62:50:fe:dd:
7f:4a:41:91:a6:f4:6f:2a:c8:5b:7f:1c:25:10:58:
ac:06:01:8d:f0:6f:f4:54:61:b2:3a:6f:78:57:61:
3e:bd:08:9a:f2:89:d5:bc:d9:a1:20:3c:ff:cf:de:
e2:d0:08:b7:82:f8:22:2d:88:6d:43:42:d0:0a:8f:
40:ab:b7:f3:82:e1:d7:ee:a5:cb:51:d9:ee:e4:94:
6d:5e:ed:02:27:e1:c1:a4:03:25:4f:83:e5:96:4b:
58:f5:26:9b:ff:47:80:1e:25:f3:ed:76:bb:69:dd:
62:d1:d8:74:cb:84:b2:91:6c:84:11:ad:77:08:c2:
f6:f5:0c:c9:13:4a:77:81:f8:f2:28:8e:09:33:8c:
7c:ed:f2:3b:56:6b:84:71:bb:7f:3f:7b:ac:a4:c1:
71:30:5a:2c:bb:eb:aa:ca:0f:8d:77:34:13:b3:35:
9b:dc:cc:43:b9:da:c7:ca:e0:6c:28:29:49:fb:db:
5c:20:9f:9d:dc:02:4a:3c:98:52:d0:14:66:1f:c4:
d8:fe:22:aa:49:31:57:00:54:e7:c1:30:ff:07:b8:
64:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:36:9B:E6:FC:E5:5A:C4:0B:2A:A1:A2:5F:68:3D:A3:EC:A9:9B:5C
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c2:5a:d3:cc:8b:1b:9d:02:e5:3f:51:32:a4:92:b7:4e:2a:
61:aa:51:90:07:6b:36:79:df:a3:02:02:11:7c:6e:eb:82:21:
1b:e1:02:9c:41:df:87:71:94:e5:fa:a8:e9:8a:30:c1:8c:a9:
3e:e8:24:b0:89:e6:a1:b6:38:1a:e7:6e:4f:a1:79:39:37:7a:
10:d7:7a:04:71:fd:85:d7:b5:56:f9:e0:fc:6c:04:82:c2:a3:
84:cd:e2:4b:2c:27:e9:d2:a6:9f:35:25:23:f9:31:21:5e:7f:
41:47:ac:8c:e8:08:88:db:9a:ca:1f:1b:52:7c:8f:94:71:e4:
e5:39:d0:9d:98:95:a0:3c:4b:f4:08:0e:6f:60:94:2c:43:c7:
25:c2:d1:20:28:22:72:fe:1e:32:3a:f0:85:85:55:54:4f:8d:
37:ea:1e:5c:c6:1a:c8:14:72:1e:0d:12:d8:7c:20:36:e1:43:
6a:f8:86:c8:1c:3d:29:63:b0:f1:c6:c2:b5:91:60:87:c9:70:
d5:32:2f:1c:bd:65:9a:cb:f2:17:42:0e:15:34:3a:f1:19:1d:
ef:7c:ba:a8:26:ff:09:02:87:40:8b:e6:13:b0:78:2f:fd:ee:
f3:6b:a1:ae:e3:8b:02:b8:39:ab:31:d9:1d:ac:af:52:44:e7:
dd:70:45:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:31:54 2025 by rpki-client