Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
File: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft (raw, json)
Hash identifier: 6G/VfyJCQyhtOjo3NyJ14Sjj1MmgwHel+GEXLliBbnc=
Subject key identifier: AA:C5:E2:25:A4:60:13:F7:69:60:4C:69:6C:E2:A6:7C:59:7A:FD:33
Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8
Certificate serial: 0196BC00055761298087E65605BFD550CE91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
Manifest number: 0B33
Signing time: Sat 10 May 2025 21:00:40 +0000
Manifest this update: Sat 10 May 2025 21:00:40 +0000
Manifest next update: Sun 11 May 2025 21:00:40 +0000
Files and hashes: 1: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl (hash: abwPF4f6oBiQtAZO5GKpwqt6kNkVcO9pHMuB+i0d4LQ=)
2: hfSj4Acr0ZdBdVZF-bmfhSWxDR0.roa (hash: qMvzKdtsac1CrAS5/GB10mnE0HZEb+d2b/OglfbpJc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:05:57:61:29:80:87:e6:56:05:bf:d5:50:ce:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8
Validity
Not Before: May 10 21:00:40 2025 GMT
Not After : May 11 21:00:40 2025 GMT
Subject: CN=aac5e225a46013f769604c696ce2a67c597afd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:51:1e:b4:84:80:44:e4:09:3f:4c:83:d6:
2a:49:83:76:d3:3b:22:f4:64:f1:b8:3c:c8:3e:f8:
65:e0:e7:72:a5:5c:46:8a:39:cb:c4:9a:da:5b:aa:
dd:bc:b3:8c:70:6a:b8:b3:2b:ab:c8:cb:e2:61:1f:
46:a5:69:24:ed:03:dd:7d:92:c3:b9:74:cc:7f:d1:
16:64:26:06:ec:d6:13:d0:84:ab:c4:53:bb:b1:8c:
cd:72:f7:39:1e:b5:25:85:1c:ed:b6:ee:f6:f1:af:
4d:3f:a8:01:f8:95:84:27:7c:6a:95:4d:f9:e8:e9:
f2:15:b2:b2:88:67:42:60:03:fb:31:ca:a2:da:a3:
7d:ef:62:77:c9:b3:67:5a:15:b9:97:d2:f5:06:06:
ee:63:9f:9a:2a:f2:bf:64:a6:6a:e6:b2:0f:7e:23:
31:f0:28:e3:c3:9f:3d:30:15:c0:aa:73:c3:f7:b1:
02:67:b8:86:0e:5d:52:8f:2f:c5:dc:5f:20:98:f6:
75:2b:76:03:2f:4c:20:6f:19:48:f9:4c:f8:0d:9f:
8d:5b:a0:9b:56:d2:be:70:78:42:28:09:73:cf:b9:
12:c5:6d:2a:6f:71:6d:1b:f9:3f:fa:e7:09:71:ca:
0a:d9:8c:11:d4:71:7a:ba:ed:5e:6c:2a:71:67:c4:
af:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C5:E2:25:A4:60:13:F7:69:60:4C:69:6C:E2:A6:7C:59:7A:FD:33
X509v3 Authority Key Identifier:
keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9f:22:b1:ae:a1:72:b4:69:3b:f2:15:99:a6:3d:77:c6:2f:
4c:28:dd:ef:e6:37:13:5a:16:2e:fd:fe:8d:1a:03:fa:bb:f3:
03:de:36:c1:c9:24:0f:7a:9c:53:a8:31:2a:f1:87:69:a1:eb:
99:b9:15:91:05:af:86:ef:c1:ce:f1:e6:4a:06:fa:a5:9f:21:
2c:5f:fa:c8:3f:ad:bb:1e:e3:ad:fb:b6:5a:90:10:28:6b:4b:
88:05:c1:68:2e:f0:49:77:0e:53:2a:b0:63:00:8f:0f:11:7c:
26:c7:ff:77:c6:70:0e:bb:9f:2e:05:60:eb:88:c7:b0:32:c2:
3c:c6:5d:0a:a9:0f:b8:98:6f:54:6c:1a:50:46:fd:42:2e:2c:
a4:cb:78:ca:df:e5:ea:9d:71:fb:e4:e2:75:bf:4f:ab:db:36:
49:d4:f2:70:50:be:6c:1f:85:0e:fe:47:18:77:08:af:44:f8:
1e:df:eb:85:7f:82:ef:12:dc:42:62:19:96:1e:7a:b8:6a:3e:
bc:cd:66:ae:0e:3b:37:ab:21:7f:a5:4f:ce:da:1d:f5:52:0a:
ef:d5:a0:da:82:08:89:50:e9:36:de:31:55:47:5a:3b:67:17:
dd:f9:9b:24:73:61:da:15:11:22:be:9a:da:94:9b:7a:2f:14:
a9:51:df:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:49:16 2025 by rpki-client