Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: xVIm5g6ryXO+t8hYXH+cLsheWYEn5FRDls1KKZ64kbI=
Subject key identifier: 60:5E:D9:78:7F:3F:04:63:DE:BF:65:0B:4E:C5:19:2B:8B:C4:87:67
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 0196B0D7BFA5C2C9A8029AB337FC7309F000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 1535
Signing time: Thu 08 May 2025 17:00:51 +0000
Manifest this update: Thu 08 May 2025 17:00:51 +0000
Manifest next update: Fri 09 May 2025 17:00:51 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: smqeyA8eTxv+CYTGVi067Xngnp5x48DWKfLR/JtMW/c=)
2: cTvIsND0rcbhO2LRnW_ioplG7i0.roa (hash: cEDaT4nTfiZsrwarP2rDKx77YlDRn3t6MrTdDfbMfn0=)
3: ejCuuXb3IPaAQbLGykjSnhsrUI0.roa (hash: 2O/6jwQ1UqJYAgAcDjt8a/MDPHZ138YPWORfwXR/3iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:bf:a5:c2:c9:a8:02:9a:b3:37:fc:73:09:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: May 8 17:00:51 2025 GMT
Not After : May 9 17:00:51 2025 GMT
Subject: CN=605ed9787f3f0463debf650b4ec5192b8bc48767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:00:61:49:d1:94:a1:aa:23:c4:1d:78:e9:
f9:71:dd:52:b0:38:47:a5:77:a4:63:a6:f9:41:01:
31:9d:8b:61:b9:d4:29:75:ed:dd:2f:2b:38:d1:6e:
f3:1e:96:da:99:81:67:ca:ca:58:15:01:e0:2c:1c:
1c:98:a6:09:5f:1e:78:eb:13:07:4b:a8:af:84:32:
be:10:b0:a1:b4:f3:1e:7c:d4:d3:a4:07:10:bd:c6:
4f:86:a0:03:1c:c4:a1:0e:f9:25:c5:be:ce:70:f6:
83:80:c6:45:e8:68:3b:b2:de:b1:08:0e:f3:d6:3a:
66:71:25:32:eb:ce:c9:63:1f:14:84:37:5b:1a:d4:
88:ce:d7:69:d5:a3:31:ba:47:a3:5b:89:8f:6a:3f:
b5:ff:49:06:ab:1a:11:b6:7a:5b:04:b8:18:a2:3c:
6c:b1:eb:4d:a6:5e:50:98:39:b8:01:20:02:0b:91:
bd:bf:09:9f:9b:4b:ff:d0:36:31:ec:b2:8c:29:b3:
dc:ad:21:8e:b8:88:29:e9:70:44:ee:ac:40:1e:45:
5e:54:1b:e5:07:80:59:80:69:da:ba:89:7d:a4:d0:
81:6c:fd:22:22:d0:5a:1a:33:5d:fb:47:5c:db:a5:
94:8c:3b:6f:86:82:7a:83:7b:13:03:54:47:d0:15:
35:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5E:D9:78:7F:3F:04:63:DE:BF:65:0B:4E:C5:19:2B:8B:C4:87:67
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:44:b2:12:23:a8:d0:05:12:78:0f:4e:a1:03:bd:a6:35:72:
6b:66:f0:55:0b:4f:34:3d:9f:13:6b:42:7f:ac:9d:59:f4:a8:
98:b4:38:02:d1:06:a7:af:02:dd:d2:ee:da:46:29:da:59:e7:
d5:ad:ee:cd:bd:e4:66:b9:b1:4c:41:fc:29:6e:f9:04:5b:57:
5a:3d:f6:ae:5b:9f:be:88:e9:19:e0:83:b2:77:1d:05:da:d9:
9b:c0:db:04:3c:f1:c4:3b:ae:fc:66:3f:21:2e:76:ad:58:5d:
24:a4:92:95:e6:d6:8d:70:fd:44:d3:8f:a3:b8:53:99:a1:76:
2a:a6:b9:d2:c8:8c:82:ea:d8:cd:2a:24:d1:6e:1e:88:ee:e6:
6e:39:7e:df:fc:13:5e:11:bd:17:12:d6:6e:16:e3:74:1b:2d:
25:f7:26:4f:11:11:37:11:dc:e6:1f:c7:89:f1:24:f3:b8:07:
9c:39:fb:0c:f8:d6:0d:8a:07:e9:93:57:a8:bf:7c:68:b9:c3:
29:e8:1b:f8:2d:18:1e:87:d7:24:fb:01:ad:94:f3:9c:71:e9:
e2:88:85:2b:92:75:b6:16:fc:a9:de:46:fc:51:73:c3:2d:a0:
51:99:8f:3a:64:ba:aa:1d:2b:c7:19:45:58:c0:62:66:9e:73:
19:11:70:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:39:25 2025 by rpki-client