Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
File: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft (raw, json)
Hash identifier: 4M3DYMEaa2kvu6Hxr3SUP2ItREYHy6OZn+2iXSQ2X90=
Subject key identifier: B3:F3:BB:6B:72:CC:75:26:13:34:AD:1D:3A:F1:00:B0:FB:DA:01:E7
Authority key identifier: DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
Certificate issuer: /CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Certificate serial: 0196B6D97FE9037E593568C08454BA668570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 21:00:29 +0000
Manifest this update: Fri 09 May 2025 21:00:29 +0000
Manifest next update: Sat 10 May 2025 21:00:29 +0000
Files and hashes: 1: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl (hash: STh2cb9rqa79HdhUZ6O4JJF00BRd9e2X//ZwImdw+6w=)
2: fl1IqJ22OZD_5WNed1aOqRFU-dQ.roa (hash: Kuo9lPYONUc1nk6pXtWGALeHz/jfanabaBDCbZ+GeWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:7f:e9:03:7e:59:35:68:c0:84:54:ba:66:85:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Validity
Not Before: May 9 21:00:29 2025 GMT
Not After : May 10 21:00:29 2025 GMT
Subject: CN=b3f3bb6b72cc75261334ad1d3af100b0fbda01e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:84:bf:65:2a:1f:49:cc:b9:91:76:44:4d:72:
e0:a6:7c:50:75:df:85:1d:fc:35:6b:05:cf:7d:cd:
fd:14:79:cc:c7:04:36:a6:72:cd:01:b2:f9:1a:c4:
7d:ab:5c:ca:40:f2:20:de:2a:48:da:d8:65:4f:f1:
12:a0:0a:74:ef:9e:47:9b:27:eb:b4:60:e8:e5:9f:
30:c4:ec:bf:4d:92:70:a0:50:c6:99:2c:d8:c0:13:
79:76:e7:63:17:67:69:33:ef:b9:59:9e:d1:09:59:
60:8d:70:57:31:c1:b0:94:92:5e:4b:4c:6b:fb:44:
30:ff:ce:c9:3f:ae:24:70:02:d0:1c:2d:86:f9:d0:
a7:3e:ef:58:e3:68:21:a8:b5:17:dc:d3:bc:53:7e:
d2:8c:9a:d7:ef:31:77:9e:ab:09:c1:08:2d:7f:a7:
20:ca:7e:83:e2:c6:5e:6a:de:28:82:d0:8d:fb:df:
e7:84:28:69:1f:a8:87:7d:7c:ad:2c:35:ec:07:31:
16:bb:e6:1e:51:69:41:f9:66:82:7d:21:cd:5d:a2:
3a:40:ba:93:31:cb:7d:87:4c:2b:55:d4:53:9e:ab:
80:30:48:16:27:3d:17:0f:c1:5b:df:37:56:0d:b3:
a0:3b:dc:07:7b:96:5e:f5:24:80:71:e9:bb:3e:c5:
50:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F3:BB:6B:72:CC:75:26:13:34:AD:1D:3A:F1:00:B0:FB:DA:01:E7
X509v3 Authority Key Identifier:
keyid:DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8f:f4:a4:37:f7:b1:4f:af:c0:69:3f:b0:1c:9f:8c:9f:73:
6f:c3:ab:0c:84:bc:5d:12:a0:c9:d2:a6:e8:10:7e:7f:ef:9f:
00:47:28:9b:56:7d:39:e0:2a:b8:56:d9:e9:4d:19:2e:7c:50:
1d:e2:1e:d2:cf:ae:5f:10:68:df:e7:cd:a3:78:e1:b9:ee:e7:
e0:09:4f:6d:89:40:f1:c2:26:7b:07:ed:0a:12:cc:83:9f:e3:
6b:71:11:22:b8:d8:f2:49:28:92:a4:0f:c4:ff:bd:19:0a:02:
7c:31:fa:e7:cb:12:35:5a:2d:28:11:ad:3c:66:83:54:ce:26:
aa:bd:c3:01:67:16:2e:0c:c3:a9:f5:63:a6:14:99:47:e7:01:
3a:fa:7c:7d:a8:59:98:1c:82:5b:35:c1:07:76:fb:27:7f:4b:
c9:53:43:75:b7:c7:dd:f9:5c:56:a9:75:e8:98:61:d0:f7:77:
11:f5:a0:36:64:e1:04:1b:42:e0:62:75:32:82:0d:73:b3:09:
c0:9b:70:87:e5:53:cc:48:35:86:8b:5a:79:a2:8d:91:53:d8:
25:0f:b8:85:ba:4e:1b:f7:77:dc:19:c2:85:58:c1:b3:cc:f3:
51:bb:fa:e7:9d:23:03:fa:60:b7:58:2c:4b:ff:ff:ec:c3:02:
a1:10:ef:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:32:11 2025 by rpki-client