Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: CZONyq/q2mZdOP/2XIZKszRrUm2+fsrv2gIzWyeiSTw=
Subject key identifier: 9D:EF:44:C4:96:93:98:8B:84:05:B9:77:F7:33:D1:49:4E:BB:EF:39
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 0196AE0D1BC692F9CDB2B7607C979EAAC4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 04:00:16 +0000
Manifest this update: Thu 08 May 2025 04:00:16 +0000
Manifest next update: Fri 09 May 2025 04:00:16 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: rjrtgzpgSJoNqEkzkcMosi4GxmWJhcQQE+zD6WHvekU=)
2: VU0FkvZgVaRI8EGkm-qXkP1h2_c.roa (hash: FXgImtBv7FeA5blXsKdg5pD7MuiscFVJi0Lfx25h6e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:1b:c6:92:f9:cd:b2:b7:60:7c:97:9e:aa:c4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: May 8 04:00:16 2025 GMT
Not After : May 9 04:00:16 2025 GMT
Subject: CN=9def44c49693988b8405b977f733d1494ebbef39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:11:cb:bd:8f:eb:cd:e9:6a:90:8e:2e:35:
a2:77:ef:7d:5d:d0:88:18:12:fe:f9:f9:2a:eb:ee:
5c:e9:c2:ba:a4:28:0f:d1:fd:17:86:3d:67:3c:06:
41:60:7b:b5:46:5f:f4:7a:ec:1f:6a:a6:9b:3c:e1:
79:e9:37:1c:f8:77:26:2c:6e:b7:4c:89:21:56:37:
5e:93:39:a8:f4:f3:e5:2c:3a:c7:95:12:f9:9c:61:
93:16:58:e6:48:0f:81:e3:fa:97:df:3f:89:a6:03:
67:80:5d:0f:4f:5f:10:00:42:7b:a3:69:0d:75:27:
a4:6d:40:b3:ca:55:16:d1:ef:07:5b:f2:38:68:f8:
03:ba:a3:51:bf:a1:03:1d:2c:cc:f1:9b:32:36:af:
45:c6:9c:72:20:99:15:f0:47:0e:de:ff:e8:0d:95:
09:55:4b:de:36:c6:12:ec:b4:96:6a:6c:2a:c6:e6:
a6:23:3a:dc:b7:b0:95:2a:af:60:18:8e:f2:27:99:
6e:35:db:ff:e7:ab:fd:c9:14:2f:a6:93:ea:e3:56:
d4:59:44:80:7b:ad:79:94:74:2a:7d:d8:1e:a3:54:
7f:57:4d:a4:e4:77:e0:74:5e:9f:96:de:c9:dd:cf:
37:3b:8b:a3:8e:81:27:e2:82:6e:5d:f6:1a:46:cf:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EF:44:C4:96:93:98:8B:84:05:B9:77:F7:33:D1:49:4E:BB:EF:39
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:93:1f:8c:12:d0:ef:74:79:df:0c:8b:0e:0b:47:c9:2e:54:
db:64:2a:dc:40:b7:83:42:09:2c:44:5f:b5:20:92:76:f4:28:
bd:e4:19:dd:24:06:f7:94:f0:ab:4b:ed:64:bb:c0:e3:d9:27:
c6:cf:9f:6c:ee:d7:e1:86:cd:83:13:69:97:63:29:04:40:ca:
91:18:5d:45:d7:71:57:4e:2b:c2:e2:ee:31:84:1c:ea:14:f0:
58:85:0e:0f:f1:32:4c:ab:19:40:c6:f0:fd:56:7e:9b:30:82:
c2:f9:74:98:d8:f9:21:de:ff:1a:ad:b3:16:ce:af:00:2d:57:
53:f4:07:9b:49:dc:f8:0e:99:c3:10:85:8e:57:4b:51:e2:0a:
ed:78:ee:c9:9a:22:41:d1:c3:e2:a4:ef:ad:c6:0b:1b:e0:50:
e1:c0:d9:b7:97:2d:3a:46:44:31:b9:48:6c:9d:ea:72:8f:6c:
f3:6a:31:f3:72:1a:f6:fd:c2:b8:db:11:77:21:83:bb:f1:a6:
9e:bf:93:0e:3f:48:bb:75:5b:c4:51:a3:b9:a4:3f:ca:ad:4f:
23:cd:66:96:0f:13:a7:ca:0e:41:d7:e2:d1:1f:99:6f:33:39:
ae:01:28:14:9a:c9:3b:fa:67:8a:af:cc:98:69:9c:5a:24:d9:
05:e3:24:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:11:21 2025 by rpki-client