Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
File: 3r5RfnR14XwGlkORD9b3ezF7hTg.mft (raw, json)
Hash identifier: s6pUxU5IX5bnMdQHkCEvNu0VfbTHzaYMWYKUl0p3aeo=
Subject key identifier: CE:52:88:C8:6E:5A:4D:83:31:BE:FE:C6:48:A3:B6:BF:76:3C:77:25
Authority key identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
Certificate issuer: /CN=debe517e7475e17c069643910fd6f77b317b8538
Certificate serial: 0196CC17719421CC005019B6D1889882DC18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
Manifest number: 07CF
Signing time: Wed 14 May 2025 00:00:10 +0000
Manifest this update: Wed 14 May 2025 00:00:10 +0000
Manifest next update: Thu 15 May 2025 00:00:10 +0000
Files and hashes: 1: 3r5RfnR14XwGlkORD9b3ezF7hTg.crl (hash: 48N6X7iK76miNg3ryxNBLi0TBNQIbEP2iNQXqTARkRc=)
2: ij43C7xr8xTz-pjXAc9irjAaFXA.roa (hash: TchsYLXYDpTrG6rR/zLX/7ji8qJkl2gfrI50UG67KC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:17:71:94:21:cc:00:50:19:b6:d1:88:98:82:dc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debe517e7475e17c069643910fd6f77b317b8538
Validity
Not Before: May 14 00:00:10 2025 GMT
Not After : May 15 00:00:10 2025 GMT
Subject: CN=ce5288c86e5a4d8331befec648a3b6bf763c7725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:bf:83:48:7d:08:81:3c:11:b1:47:36:d7:
e2:a0:59:fa:b6:d6:47:52:47:3b:4a:46:09:65:f6:
8c:ca:d8:d3:dc:a9:b8:d0:f2:7f:d4:49:7b:f3:f7:
bb:b2:7f:49:d5:43:a9:b0:9e:b3:52:4f:63:72:de:
36:3d:06:0d:75:a8:9e:7f:36:c0:d5:bf:3f:ea:26:
97:38:f0:bd:4f:7f:24:32:df:2a:e6:5b:da:22:55:
91:75:d8:4c:4b:cd:ec:c6:23:58:dc:38:b2:7d:68:
7e:73:a0:24:bd:32:fa:5e:e0:e2:17:22:f3:38:7d:
de:30:03:87:19:cd:e3:9f:e2:b1:59:2b:f4:88:a9:
51:9c:0a:e2:79:69:b4:9b:5b:6e:19:44:cf:2a:0c:
6e:82:09:bd:dc:d7:f4:22:0b:2a:31:3d:92:72:1e:
61:24:8d:05:3a:8e:34:db:db:aa:f8:9d:6e:2a:28:
ba:80:10:dc:3e:27:ff:22:80:84:1a:f6:32:84:e8:
10:82:e7:da:68:6e:0b:82:52:28:21:44:47:72:1d:
7d:89:45:f9:ee:3b:9c:27:a6:ce:23:55:7e:b0:db:
d2:d1:15:1c:92:20:b5:3d:29:ea:17:e7:cd:51:bb:
7d:f0:50:55:bd:2f:f2:01:ce:56:bd:9c:7f:4a:fa:
ee:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:52:88:C8:6E:5A:4D:83:31:BE:FE:C6:48:A3:B6:BF:76:3C:77:25
X509v3 Authority Key Identifier:
keyid:DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:1b:f2:ca:c5:6a:28:3b:fc:ff:5e:f7:52:f5:ff:55:35:95:
aa:78:3a:1c:63:0c:14:0d:e0:ce:8e:c7:eb:f4:bc:27:37:c2:
db:f6:d8:a1:aa:2c:a1:c3:62:c5:58:15:78:e9:d4:18:7c:8a:
b4:e5:20:76:04:04:c8:b3:8d:4c:8a:02:57:42:0c:d2:3a:40:
36:06:d6:95:07:d6:3d:05:0e:d0:f2:27:23:17:8d:0a:7c:d9:
3a:57:3d:fa:1c:54:b3:78:6f:58:a3:c2:18:e9:63:8b:a6:55:
d7:f3:65:f4:e3:c7:ab:ae:9c:47:51:a1:38:55:9e:d3:5e:76:
60:89:51:c8:9d:14:16:84:4a:d5:b9:c8:b8:f0:94:ab:81:4e:
53:ae:15:4c:51:a9:bf:51:0f:03:08:25:a1:3a:4c:ed:d2:db:
d5:8b:0a:57:39:90:9a:ca:e9:c3:5f:f4:dd:91:0e:c0:f6:d9:
1b:b2:2a:6f:ce:88:2e:10:7a:af:1f:99:c9:cf:c4:b3:17:59:
81:6a:e8:29:53:e7:ed:1b:52:9d:7d:38:58:5d:fa:8d:62:5c:
e3:2f:8d:af:2c:47:42:05:8a:d9:d7:bf:fc:e7:3e:dd:88:7e:
68:b1:27:b1:12:23:19:81:e5:c7:d9:db:fe:8a:6b:51:14:c6:
c0:08:3a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:37:33 2025 by rpki-client