Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
File: 3MstX7JThS8YI8ZUNOjydtBOTgw.mft (raw, json)
Hash identifier: ajYH9vdSfaMvstBcqCkQ4qduVgJ7xvwnr57tZC24/RY=
Subject key identifier: EA:3E:16:1E:49:14:EF:66:86:E6:C7:0E:E7:F9:7F:83:C5:5E:DE:72
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial: 0196C0B82B7A680EB3BFFCF5827D218CA22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
Manifest number: 153F
Signing time: Sun 11 May 2025 19:00:17 +0000
Manifest this update: Sun 11 May 2025 19:00:17 +0000
Manifest next update: Mon 12 May 2025 19:00:17 +0000
Files and hashes: 1: 3MstX7JThS8YI8ZUNOjydtBOTgw.crl (hash: foE0wz6onM85UH6X3gzBssDJvfbR4f9RSslWFHSM05s=)
2: 4iSMhBF2xZj26lycKx2j1fhAtX8.roa (hash: 5NzSosDSsdztn+kQLtfES98hJSpuF/nYSnJEW3vMqlE=)
3: MCaozM05EgQpOj9KWtfk_EMYWf0.roa (hash: I6Y0DISsiTz+oGPxMCPt4OQoH1zQxzx22/aiFTgMNtU=)
4: qMfArzwkX8G0WDNHJN4uX2h7ong.roa (hash: J4HIUTvl0CZ/07KSIMq+Jwo8Hxn+rCK5OIiJhW9OzqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:2b:7a:68:0e:b3:bf:fc:f5:82:7d:21:8c:a2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Validity
Not Before: May 11 19:00:17 2025 GMT
Not After : May 12 19:00:17 2025 GMT
Subject: CN=ea3e161e4914ef6686e6c70ee7f97f83c55ede72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:82:bb:30:15:1f:da:e3:39:da:05:97:2a:
72:24:f3:3a:7d:df:7c:ca:e7:1b:68:80:ef:a9:7b:
e5:74:72:d3:c2:17:45:fd:a7:8c:80:0f:e8:2d:ea:
18:95:f2:a6:3d:72:50:7f:c2:0f:0d:ce:7b:39:89:
50:72:b2:f0:26:88:25:8e:be:15:bb:de:6a:8f:79:
a1:b4:fc:27:34:c6:19:40:cf:36:74:e1:dd:05:b8:
f9:d0:83:9d:a4:9a:08:af:f3:fb:e5:2d:1e:cb:74:
3d:43:4e:e9:6d:66:42:9b:da:7d:6c:fc:17:04:d0:
69:ee:46:8a:9b:7a:e6:6d:1c:2c:ef:01:18:ac:e4:
8c:27:00:08:7f:b6:38:50:c4:8c:97:22:d9:b6:69:
09:54:80:f9:f9:08:ee:07:fc:cb:0d:70:01:aa:f4:
f5:ce:94:a7:64:4e:a7:ce:63:87:8d:d1:da:05:95:
34:c4:8f:5e:70:60:16:bc:7b:84:67:f7:56:46:b7:
45:2e:62:23:3a:5d:17:67:a9:18:f9:b0:07:44:eb:
af:8e:8d:e3:d9:b0:ff:c6:e8:20:10:b9:03:58:81:
ee:c1:78:c7:48:7f:b4:bc:e3:77:34:a8:f9:1a:05:
9a:4f:ad:5d:8a:4d:e2:7c:a1:4b:c5:8e:52:a9:97:
0e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3E:16:1E:49:14:EF:66:86:E6:C7:0E:E7:F9:7F:83:C5:5E:DE:72
X509v3 Authority Key Identifier:
keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:aa:bf:ed:e2:4c:79:a5:3c:84:96:c5:cc:40:30:52:62:20:
bb:00:02:86:12:1a:46:3b:63:36:eb:76:2d:b1:1b:98:69:b9:
79:ee:79:a6:b4:14:a7:1d:2b:2b:6b:3b:61:02:59:ff:7a:94:
8d:b9:88:a8:19:ef:f4:a4:c9:d7:4e:2a:5c:c1:e2:b9:ad:86:
2b:0e:97:f1:6e:b3:0b:c5:78:14:60:70:4a:c7:fe:b2:70:d1:
67:5a:c3:d7:fb:e9:67:78:59:c1:b9:07:b9:4a:bf:27:54:4b:
58:6a:3e:a5:8e:7e:e0:d3:c8:84:36:97:8d:c3:63:33:38:b1:
25:22:e0:43:14:39:f1:aa:33:96:87:88:d8:02:6f:97:0e:28:
73:20:d8:51:bf:b6:55:95:6b:68:db:5d:da:fc:b3:71:11:1d:
0c:8e:a9:3b:1d:68:0c:04:98:ee:40:58:af:60:40:5a:0c:55:
40:15:9e:f3:68:35:97:d1:7e:e5:c2:e7:d7:c1:4b:48:97:7d:
7c:7a:cc:c9:1b:65:c7:b1:67:33:18:89:1d:fe:7b:01:a1:bd:
f5:33:dd:1f:48:d7:ea:11:14:5c:85:66:ab:a1:9b:ce:b1:a4:
06:15:c1:ef:77:a3:08:7c:41:85:07:df:01:80:df:52:ca:11:
13:a8:f9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:04:11 2025 by rpki-client