Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: R59zsObk5XRS3ZG65Qkv5/v5631PnoRptAtGsTiUX+Y=
Subject key identifier: 28:C8:CF:2B:FF:65:22:A7:7A:4B:F6:8B:CB:34:81:77:44:12:D2:C7
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 0196BAED1422AC7CFDC2EF75580940D9A53C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 16:00:21 +0000
Manifest this update: Sat 10 May 2025 16:00:21 +0000
Manifest next update: Sun 11 May 2025 16:00:21 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: 5FTLhq6dGk0bujefcH+i/sWwTWDiw8zXMak+sTBk6Kw=)
2: 9euEZiQBZa0KQy87mhddaAGMyJs.roa (hash: SlkEYhw31htGhY3rwyORB+KNW056wx1mf03bV0slrXo=)
3: PbQAq4tBfBzJf67NNR29Pj0FkmA.roa (hash: 68zQoRFiAUVZyRagTzVHGcIdd/jEkcY9EEgWfXz5qFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:14:22:ac:7c:fd:c2:ef:75:58:09:40:d9:a5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: May 10 16:00:21 2025 GMT
Not After : May 11 16:00:21 2025 GMT
Subject: CN=28c8cf2bff6522a77a4bf68bcb3481774412d2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:1d:f6:94:b1:52:2f:d8:6d:07:39:3c:90:
cd:4e:4a:3d:f9:e7:8f:49:67:49:c4:b1:8f:7e:20:
f6:e7:68:89:a4:c3:e2:ff:d7:0a:4d:ae:fc:f8:5a:
00:cc:f5:da:c3:44:a4:95:fe:9d:8b:de:9b:26:d3:
a7:58:fe:a2:2a:b3:12:f3:d4:cd:d0:d4:84:44:ad:
d0:de:b3:54:2b:49:2b:50:35:78:c3:d6:6e:e2:05:
5d:7f:e6:58:f2:30:b6:56:7b:62:94:42:28:39:46:
71:a2:fd:29:94:89:6c:c5:57:c4:2a:3b:75:dd:22:
1c:de:9d:1c:b3:56:08:9c:e1:52:36:02:17:72:33:
55:10:1c:27:05:b5:86:7a:ba:aa:15:50:44:11:a0:
44:b9:c9:03:b5:7d:5c:8f:2a:b3:5a:1c:5e:d1:7f:
29:d4:1d:5b:64:81:54:87:8e:c7:ec:32:3c:9a:97:
92:f5:21:db:b0:aa:af:76:23:6f:a8:cc:e8:6e:cc:
c4:70:59:cd:f8:b4:7e:bb:f1:99:26:cf:e9:1d:42:
43:8a:7f:9b:39:c9:3b:d1:3c:21:72:80:ce:76:9d:
fd:64:6c:02:e5:b1:0a:a4:e6:e1:4e:c7:19:28:9a:
13:e6:28:c1:eb:b4:62:72:29:55:6b:9e:9e:29:bd:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C8:CF:2B:FF:65:22:A7:7A:4B:F6:8B:CB:34:81:77:44:12:D2:C7
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:74:22:9f:a7:73:ef:b0:04:28:a7:99:4a:f1:6c:a2:5a:3e:
91:09:71:45:08:a7:80:32:92:77:7e:74:69:96:22:75:32:1d:
2e:85:2c:01:70:fd:68:b9:05:a0:e7:99:f9:ee:23:50:6b:71:
a7:f1:26:f6:22:1c:75:e7:6e:93:d0:f1:17:31:32:73:26:c4:
4e:46:de:8b:39:a8:c0:35:2c:cb:c5:fd:9c:d7:bf:7f:7e:33:
88:28:75:e5:1c:67:33:74:5e:3a:69:eb:a3:54:a4:e6:ef:63:
e6:d7:18:39:22:dd:a3:86:42:8f:4e:16:20:10:61:0b:71:1f:
41:c0:93:ca:a4:ab:41:fa:c9:64:16:cc:74:02:3e:93:04:65:
af:d4:9e:75:43:80:64:6d:f1:75:9a:bb:4d:7b:3a:55:d7:4b:
eb:ac:58:51:ae:78:89:3f:d0:1f:c4:ae:52:10:d9:59:46:05:
4f:1e:d0:6d:02:d7:58:f5:c5:a1:37:48:7a:db:af:ce:22:21:
d2:cf:b8:eb:77:15:77:8a:e2:50:52:31:60:23:bc:c5:00:55:
84:21:0a:6a:ab:12:30:50:b4:1e:d2:52:6a:2c:e7:f6:f5:7e:
1a:f2:3f:51:d7:49:95:d8:c7:d9:a3:bf:5d:d0:d5:80:ae:69:
df:ca:eb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:26:52 2025 by rpki-client