Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json)
Hash identifier: gu45A1V1rsq+dLLLSLEfIcVXRhn1XMO6O8mDxMpJnCk=
Subject key identifier: 7B:B8:20:79:93:87:5C:D5:DF:69:0E:4C:01:B1:4F:3D:26:30:2E:EB
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial: 0196D1AC1A063F353D7DDF31C9AA1F33678B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
Manifest number: 14D1
Signing time: Thu 15 May 2025 02:00:39 +0000
Manifest this update: Thu 15 May 2025 02:00:39 +0000
Manifest next update: Fri 16 May 2025 02:00:39 +0000
Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: LJmzVLqWrnX9vbsXVtZ7RwOq8HZMgzUgJ7BNFTA75VY=)
2: 8weSLoMuWV3usouK6kCYa4DYS08.roa (hash: 7ICkBxIDMmpq8Ld9uPPV7RzwfZWRVUlPiTj2akXnPTs=)
3: g0yMZ7il9emhd1JLy44dXjFFySY.roa (hash: upEcQV7OguWVHmW7d8FqJOmDo+LgE3TCsH4ZkA5EIG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:ac:1a:06:3f:35:3d:7d:df:31:c9:aa:1f:33:67:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
Validity
Not Before: May 15 02:00:39 2025 GMT
Not After : May 16 02:00:39 2025 GMT
Subject: CN=7bb8207993875cd5df690e4c01b14f3d26302eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:b5:99:c2:be:bb:3f:77:0e:09:fd:cb:e9:
fe:48:05:6f:b4:be:39:2d:18:e6:e2:c9:b2:ad:31:
8f:76:8f:5a:b2:8f:e9:76:6e:13:48:d1:90:d4:75:
80:2c:51:95:f9:65:67:31:3f:ec:ab:d3:37:29:51:
3a:e8:3e:d4:33:ed:8e:1d:5a:60:02:ca:66:52:b4:
5d:a9:e8:51:f0:79:b8:81:69:dd:41:47:04:24:5b:
a1:03:b2:97:e4:f6:cb:53:9e:17:c7:13:d3:7e:1e:
09:43:93:15:c2:73:af:69:12:e8:2d:49:6a:e6:68:
76:0f:08:4f:0e:7e:0a:c3:e7:4d:3d:db:2c:ae:22:
75:e5:85:a0:62:27:51:63:fd:32:44:60:a1:7d:b9:
e6:b1:41:4e:fb:83:b3:9e:d9:9c:de:65:e5:3f:2f:
de:19:5d:fb:04:28:fd:31:17:5c:75:8b:ba:91:25:
90:c2:11:3d:80:04:f3:3f:01:83:4a:4b:45:b5:1f:
49:eb:3e:c2:d0:e1:c3:2e:8b:1b:14:ec:a6:50:02:
04:62:a7:a9:2d:2c:f4:e0:56:3e:a6:f4:90:dc:0a:
9e:a7:20:91:69:f8:19:a3:6f:1e:2c:b0:87:5f:8a:
76:47:7a:2c:31:3c:8c:a9:db:5c:82:cb:54:2f:3b:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B8:20:79:93:87:5C:D5:DF:69:0E:4C:01:B1:4F:3D:26:30:2E:EB
X509v3 Authority Key Identifier:
keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:13:50:00:9d:16:ca:2a:eb:99:7e:40:1a:71:0c:17:78:24:
2b:11:86:a5:58:80:5d:e1:85:49:16:a9:e1:6c:c0:73:aa:23:
62:3b:eb:c5:2f:90:a1:b0:da:39:cb:bb:60:6d:a7:db:9d:b9:
e4:cd:59:d8:11:02:d2:6a:87:c5:c1:66:68:eb:8c:0f:a0:c9:
8f:07:fc:06:3b:cc:e9:6e:75:f2:34:b6:10:69:af:b9:42:38:
c7:09:53:85:af:00:6d:08:5f:49:af:91:fc:72:a5:1d:f1:57:
31:2b:81:15:07:43:60:5f:62:f0:58:6a:b3:81:05:82:17:30:
fd:02:e9:65:fb:73:13:7c:8b:c4:57:3f:fd:59:91:74:bc:71:
29:6f:73:22:a8:08:81:ad:29:6a:c7:7d:58:18:af:e5:74:7b:
d3:58:08:22:36:ab:9b:4e:e4:da:71:22:ae:64:81:32:7b:db:
01:de:f3:f6:f2:c7:d9:1b:13:08:80:40:83:6e:b7:ac:4d:75:
5b:d1:b5:6b:02:a3:48:7d:33:7e:64:50:fc:57:a0:a8:20:55:
28:9e:cf:c5:47:5e:d6:34:c9:45:ac:9a:b9:34:66:f0:0f:bc:
b4:aa:48:7a:1a:a7:20:ba:8d:ec:f6:ea:ed:b9:21:1e:cb:36:
fc:2b:d3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 09:56:49 2025 by rpki-client