Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
File: 3SppXEEiHdjt3PxcS1zAt4nLlTs.mft (raw, json)
Hash identifier: kY+pDy4hMvTCEosWVDiHlxbN+Z0bA3M+JY3IxZWIhps=
Subject key identifier: 6C:3D:E8:D7:44:A0:4B:37:E7:D9:59:BD:6B:0E:40:27:E6:7D:42:FE
Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
Certificate issuer: /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Certificate serial: 01969FACCE6D856CF009BF7163086523E919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 09:00:24 +0000
Manifest this update: Mon 05 May 2025 09:00:24 +0000
Manifest next update: Tue 06 May 2025 09:00:24 +0000
Files and hashes: 1: 3SppXEEiHdjt3PxcS1zAt4nLlTs.crl (hash: P0bKLOF50om9dmPHARmHw2AnStm+k8yBv4qDcVM2RDQ=)
2: ZxKbEdzKxauu7o-Y7eoipbP5kS0.roa (hash: bVgUBiwiMttSarotQ+bYBGzvg0m/rWkM8yb5LV2CZwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:ce:6d:85:6c:f0:09:bf:71:63:08:65:23:e9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Validity
Not Before: May 5 09:00:24 2025 GMT
Not After : May 6 09:00:24 2025 GMT
Subject: CN=6c3de8d744a04b37e7d959bd6b0e4027e67d42fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:f5:2c:cd:cb:55:0a:7e:75:db:76:62:33:
58:6b:7d:fa:2d:c6:b2:d3:eb:d6:d9:be:7d:4e:a5:
d0:73:af:f8:05:cd:8c:88:62:ce:d7:20:68:3a:f5:
3c:ff:66:af:48:76:08:bd:e5:82:96:d4:77:36:c5:
80:e4:5f:99:98:2d:63:2a:e6:a1:14:5d:97:2a:9b:
66:38:16:8a:4e:f9:87:b0:c7:73:ba:ed:67:18:58:
d7:73:0d:d3:f2:fd:f5:fd:dc:95:12:a2:d3:2f:a1:
bf:a9:99:5f:07:be:77:6b:1c:84:e6:51:25:08:d2:
db:6a:e7:9f:1c:eb:67:0a:1e:cc:ea:05:d9:15:bc:
6d:3b:c3:bd:f6:0d:6b:9d:30:8d:43:df:86:52:93:
0a:cb:18:14:fb:c1:86:7f:17:d7:28:2d:5d:c7:71:
1d:fb:3b:42:af:71:7c:6a:e4:3e:d5:02:aa:00:47:
fe:20:97:e5:9f:ee:e0:37:c0:e8:c7:7f:50:0c:ea:
e5:4c:73:f0:07:7b:80:8e:51:6d:9c:5e:04:75:93:
6e:75:88:47:f0:be:b9:62:8c:c2:1b:70:17:5f:0c:
b7:f2:52:e1:00:f4:82:40:f5:40:26:e9:5f:88:26:
be:28:10:ca:83:99:e6:c4:e0:b3:9e:4d:7c:51:a8:
4f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3D:E8:D7:44:A0:4B:37:E7:D9:59:BD:6B:0E:40:27:E6:7D:42:FE
X509v3 Authority Key Identifier:
keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:24:bf:3e:36:ec:66:d1:39:06:9b:80:73:e1:4b:a4:ed:4f:
49:82:90:75:4e:1c:12:14:3e:73:11:e6:23:9f:34:e8:4b:2d:
9f:0d:de:d6:4a:1b:1c:47:c7:78:1b:53:e5:cd:cf:d2:b2:ad:
0b:fe:9b:15:85:c9:1a:bb:05:e3:21:ba:8f:fb:23:9a:50:a4:
52:98:fe:9a:f5:ec:2e:29:57:bf:5b:06:f3:1f:4b:7f:26:84:
dc:7a:4e:e2:53:20:e8:24:be:9f:fc:ac:cc:86:df:16:72:f4:
f0:7c:c3:29:47:01:2b:88:57:79:36:cf:e1:6b:49:1a:04:5a:
ea:a6:ef:5f:27:54:9b:cf:16:11:3c:c9:99:13:fd:e9:13:42:
74:d8:b7:60:23:d0:b7:e4:d3:ad:6e:3f:20:37:2c:2c:8b:f4:
d6:27:f7:ae:08:fc:1f:67:7e:fe:83:24:f5:ae:49:f8:1a:6f:
bd:ef:10:1e:e0:3b:01:85:70:3b:82:e0:4d:a8:ed:d9:02:c3:
63:98:aa:71:4e:eb:68:c8:3b:4d:2f:d1:e7:25:fc:c9:09:fe:
a9:33:7f:16:2e:d0:3d:2d:65:ac:08:41:2a:d8:4f:d0:1f:43:
32:e4:85:83:7b:93:a6:4f:7d:24:02:5d:a8:86:c1:71:60:3a:
33:2b:b6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:27 2025 by rpki-client