Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: zAosnLfPlIrHWFXQ114hiPqUYvADO3C9IIOmK/vCnIk=
Subject key identifier: 42:70:2C:3A:ED:54:E6:51:18:EE:BF:E9:AB:98:19:1A:3F:6B:D1:0C
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 0196C04B151BC1746544BF1C61C3EB92B837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 17:01:08 +0000
Manifest this update: Sun 11 May 2025 17:01:08 +0000
Manifest next update: Mon 12 May 2025 17:01:08 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: Kqs2UPasb7xygxxWwP50yhjidCFKFqT27SOtie0Y8Lk=)
2: sHHovkPcLVWIMQ_tboQIdcTBHy0.roa (hash: fYwK2GNfLuzV598M+4d1qnmBbMriSVB83QSoeu+hALg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4b:15:1b:c1:74:65:44:bf:1c:61:c3:eb:92:b8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: May 11 17:01:08 2025 GMT
Not After : May 12 17:01:08 2025 GMT
Subject: CN=42702c3aed54e65118eebfe9ab98191a3f6bd10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d9:3f:00:87:40:7c:20:f9:0c:36:cb:c1:1a:
b3:6c:2c:c5:21:f6:7a:f6:b5:b9:d6:0f:c2:1b:c9:
29:d8:87:9b:44:42:3a:39:15:4c:28:36:35:90:09:
d4:cd:ab:87:59:ca:fa:bb:76:7f:17:de:3c:79:de:
09:ce:54:54:e3:b2:5c:fc:4b:e2:14:dd:c6:a1:d9:
f8:4b:41:02:a3:36:bc:83:41:03:bd:93:f7:01:8d:
23:38:b4:3f:6d:1c:af:59:b6:bc:4c:8b:0c:04:16:
8d:af:d5:ff:13:82:4d:1b:fb:67:5c:68:9a:36:fc:
23:e1:85:39:94:52:03:b5:b3:a3:ae:19:c2:1f:0a:
3d:ae:dd:b2:bd:39:f2:91:f5:e0:bb:62:ad:db:a4:
6c:76:71:60:46:d6:94:b5:b8:9b:26:76:00:10:54:
24:4c:e4:0f:bb:18:95:ff:80:b0:76:e8:c0:7e:0b:
09:3f:60:05:d8:bd:d2:2c:d4:a1:7d:89:fc:1e:be:
52:f0:7e:1c:5a:4a:02:6e:80:cf:94:41:7b:88:b9:
97:39:25:a7:e3:ca:32:0a:7e:09:12:c8:29:48:53:
da:e4:b9:82:52:51:90:74:a9:77:47:63:d4:6a:b6:
26:9e:f2:8a:32:ee:ba:b6:87:c1:23:b0:e6:bb:2f:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:70:2C:3A:ED:54:E6:51:18:EE:BF:E9:AB:98:19:1A:3F:6B:D1:0C
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:08:11:bd:bb:db:4d:3d:a5:8d:01:1f:ac:eb:2c:30:67:8d:
8c:34:d8:1b:02:1c:3c:f6:2b:32:a7:a9:8d:40:75:ed:e5:61:
03:6a:fd:d1:01:78:79:22:35:14:86:d1:ba:0f:1b:77:5d:be:
da:91:1a:1c:60:10:6c:ba:65:7f:a5:ed:5d:01:76:b1:31:50:
94:68:ed:c9:cc:60:90:e2:93:18:b8:c3:48:28:e7:62:ef:b1:
50:71:45:1e:2e:40:b4:b7:8f:2f:be:de:2b:0f:24:43:71:2b:
3e:cf:c3:a7:27:f8:a0:97:6c:ba:1c:50:eb:ba:0e:83:aa:cc:
1b:a5:e3:b1:6f:2f:93:0c:73:cd:90:56:ad:ca:a9:d3:83:cb:
80:fc:8e:15:87:6e:ed:ae:6c:6f:f0:ca:45:16:9d:eb:67:42:
ce:18:62:f3:a2:5c:98:57:ab:35:64:20:67:ed:23:43:61:56:
50:3c:84:c1:9f:56:78:53:4c:13:5d:df:7f:15:02:a2:1a:c1:
51:68:00:5a:0a:ea:fb:28:ea:ca:1d:79:05:90:3f:4b:e7:03:
5b:7a:1a:11:a2:c5:aa:57:da:e1:7f:12:0f:ad:bf:7f:53:0d:
90:12:20:12:04:63:d9:4b:54:f4:ae:dd:2c:b9:56:de:2f:af:
a8:4a:e7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:06:00 2025 by rpki-client