Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
File: 3YqroPRrqhRP2wk46RwU-UxhZQw.mft (raw, json)
Hash identifier: PUa3vyK9JeGy8qrMytRpjoOq1fugNlq/9WlG38dDsiI=
Subject key identifier: 5C:60:7E:71:D6:92:1B:BC:6E:A1:60:35:4A:BC:8F:EA:CD:C1:39:D7
Authority key identifier: DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
Certificate issuer: /CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Certificate serial: 0196D9D37F4C9C277ED3459BFE13A33CDBB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
Manifest number: 0CA3
Signing time: Fri 16 May 2025 16:00:38 +0000
Manifest this update: Fri 16 May 2025 16:00:38 +0000
Manifest next update: Sat 17 May 2025 16:00:38 +0000
Files and hashes: 1: 3YqroPRrqhRP2wk46RwU-UxhZQw.crl (hash: x0EiseSNKu6XHf42DmN6EzCFZIfv6B4kZjeATwJj2So=)
2: jyRFM9_T_syhJNdrBbZtEXQjBxY.roa (hash: 3sN/6EgdGuf6mYlFqORSiJaf85S1hh85EE3f4pncjgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:d3:7f:4c:9c:27:7e:d3:45:9b:fe:13:a3:3c:db:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Validity
Not Before: May 16 16:00:38 2025 GMT
Not After : May 17 16:00:38 2025 GMT
Subject: CN=5c607e71d6921bbc6ea160354abc8feacdc139d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:98:a3:bc:b6:72:39:d7:d6:e8:cf:3f:24:4b:
f4:d6:ce:13:eb:92:33:9f:92:30:05:c1:55:74:ae:
4b:c5:84:55:f6:cb:85:f0:3a:cb:b3:67:c2:e8:91:
0e:63:d9:5e:08:71:57:82:f6:69:ce:9b:ff:5e:5d:
f2:5b:94:7e:1c:b2:6e:28:ef:9d:66:31:ce:91:b9:
0e:b3:a7:3a:32:0c:e2:18:52:6b:d1:43:15:38:dd:
56:c8:05:41:52:72:a7:7a:67:b3:81:c8:9b:15:d8:
9a:f5:7d:58:80:18:d2:cf:94:8e:71:8c:fa:0e:44:
2a:62:df:1b:bb:9b:f5:13:61:ce:eb:e2:3b:83:a3:
7f:4a:e9:83:98:0f:cb:46:31:d6:44:27:e7:ad:9c:
9c:e0:d7:60:68:e0:0e:20:22:af:4a:0f:5b:e3:c5:
54:56:e4:ca:e6:1c:27:4c:e8:17:03:dd:93:fd:97:
63:33:40:94:0e:bb:57:70:37:1a:79:cf:f9:ed:ee:
61:18:e5:8b:6d:a7:85:d3:01:58:b2:2e:32:00:5f:
e6:22:67:38:a3:64:af:19:86:f2:9b:3e:c9:da:b0:
ec:32:8c:23:a2:ef:c1:82:ac:87:05:04:83:1b:0d:
47:98:66:de:b9:b4:65:a3:55:01:c2:88:5b:4c:44:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:60:7E:71:D6:92:1B:BC:6E:A1:60:35:4A:BC:8F:EA:CD:C1:39:D7
X509v3 Authority Key Identifier:
keyid:DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:cc:0f:17:e3:b7:a4:72:48:9c:54:6e:e7:45:55:f5:97:11:
21:cb:3e:f6:58:8d:2c:30:f1:0a:0b:2a:c5:ef:90:09:b7:02:
ea:7f:50:d6:88:2f:05:db:85:b9:08:98:f4:4e:8f:ee:17:66:
23:e8:c7:28:79:86:b3:b9:cc:aa:b5:0d:b0:7b:79:d4:57:17:
d0:98:92:f5:ef:0e:df:94:e5:46:fc:3a:12:c0:3c:65:c3:c6:
87:b9:4b:01:4a:13:43:36:78:8b:c0:da:3c:28:b2:c5:54:5a:
76:f2:d0:31:34:db:5f:8b:d2:fb:ea:62:ba:52:42:a3:30:64:
14:3f:66:60:2b:c2:55:41:11:33:8b:af:55:57:02:a8:39:a4:
25:74:f9:b1:b8:1d:05:c4:a2:92:7e:15:73:a9:07:49:8f:9c:
93:f9:fc:3f:e4:21:ef:23:68:e3:57:5a:3c:d1:0d:b9:8c:44:
b8:f4:73:0d:8f:09:f5:18:17:35:a4:de:eb:fc:08:aa:08:c8:
0d:1c:23:65:fb:a9:a3:a9:d2:76:73:7c:54:61:90:e2:ea:37:
9f:ba:1d:1f:18:5d:b6:3c:b4:8b:72:34:1b:d2:11:e5:48:43:
c7:38:9f:ca:09:37:0f:bd:76:36:f4:a3:3f:0a:a1:44:fd:84:
46:05:2f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:18:02 2025 by rpki-client