Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: sT//3HGhi5S6a5gOpG9AXYS1inB1Mrp7ucPkRFk8tZU=
Subject key identifier: 49:92:2E:48:98:80:F1:D1:99:B2:66:89:27:88:B7:B2:ED:EB:9E:23
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 0196C502B79C4CF8064CAB7BE9F106EF9558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 15:00:11 +0000
Manifest this update: Mon 12 May 2025 15:00:11 +0000
Manifest next update: Tue 13 May 2025 15:00:11 +0000
Files and hashes: 1: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: 6Vvs9s8lwLD3P7+FQKYCMtkaeKjzGtDDO+nsMQxdHqI=)
2: zwiEAg55TtHyIaM_PRVFnX4DSAo.roa (hash: ylKaMThBpY1ZvZheIftHUUCXqnEHukLo3wFRWG0DpZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:02:b7:9c:4c:f8:06:4c:ab:7b:e9:f1:06:ef:95:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: May 12 15:00:11 2025 GMT
Not After : May 13 15:00:11 2025 GMT
Subject: CN=49922e489880f1d199b266892788b7b2edeb9e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:da:b8:90:41:10:da:14:47:e8:e0:ce:eb:
37:15:bc:30:75:52:2a:ab:c8:37:c9:1e:cf:0c:59:
eb:6c:5e:ff:94:f4:c4:ba:00:a0:a0:87:bd:b7:c6:
2c:b1:6d:df:2f:e1:f9:f6:aa:08:13:a7:56:c9:29:
97:ec:0d:c9:7b:a7:93:17:db:4a:9f:33:be:a0:ce:
7d:b2:f7:4e:bf:03:af:0c:c3:8d:7a:fe:f3:2d:1d:
6a:5c:69:70:63:47:b3:95:e1:c3:e2:66:a3:37:f0:
f4:99:a0:75:27:5a:19:c2:97:9c:e9:3b:bf:f7:6a:
5a:51:1e:06:f9:01:55:8a:f2:df:cf:4c:d6:d9:42:
27:3e:0a:1c:a9:f0:71:7a:12:34:8d:98:61:c9:df:
0a:69:23:fc:18:6f:8e:84:01:a0:d9:6d:17:2e:69:
90:5c:ed:bc:a2:a6:c3:0e:f2:c6:13:e6:71:cd:c4:
09:66:b4:a9:b7:ad:30:78:96:29:1b:49:e4:a0:50:
bd:db:10:ab:e6:dd:52:f2:33:21:10:25:33:72:16:
b6:8f:0c:df:f0:a1:7e:0c:c3:e0:d1:31:15:e6:65:
10:4e:7d:81:17:de:89:6f:1c:2d:46:12:3a:db:b4:
2f:df:3b:e4:19:3a:1a:76:e9:2b:29:03:b5:13:8f:
c7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:92:2E:48:98:80:F1:D1:99:B2:66:89:27:88:B7:B2:ED:EB:9E:23
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:19:db:7e:1b:75:1b:36:d8:2b:25:98:66:62:1f:c9:ce:d9:
a4:12:72:44:1f:69:62:9b:ca:25:84:97:5d:59:5f:2b:cd:be:
b4:a2:6b:0d:46:57:e4:f1:c3:d7:45:10:3e:f5:0e:31:c8:2c:
93:7e:d0:d4:e3:ef:a6:92:bb:a5:33:8e:ae:08:0d:f7:36:04:
4a:b1:ca:28:d4:bb:d2:66:f8:fc:14:bf:32:44:01:2e:33:de:
68:64:62:52:92:e0:81:5d:77:63:a6:94:06:99:89:43:27:ba:
53:84:b6:26:f2:a4:ce:a8:76:1e:82:ba:cc:69:6c:74:a5:83:
f2:08:97:35:bc:fe:ed:8d:88:ea:dc:36:0d:3a:ac:53:a6:29:
0e:9e:47:39:d4:f7:22:4e:a7:50:0a:97:45:f6:cf:51:47:45:
ba:15:9c:f6:ad:cb:ce:40:11:51:ec:f0:5b:59:21:87:0f:e1:
99:67:8b:0a:84:c2:bc:30:5a:4c:50:43:5b:4a:5f:aa:2c:76:
99:27:5c:e1:99:dd:12:62:a0:29:e9:dc:99:57:18:da:4e:12:
f7:d9:58:f7:2d:df:be:9a:ad:6b:9d:39:be:92:29:aa:a0:14:
7d:98:8d:ef:5f:d8:21:47:dc:f0:1e:f4:e8:cf:bb:a3:1a:67:
8b:05:84:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:05:57 2025 by rpki-client