Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: N+ds8kEWKNJhIrxPdjG25Buk+52N/NG7qo4SroytDSk=
Subject key identifier: 12:2A:14:A9:A2:4A:7C:05:10:DE:90:8C:75:1D:D1:2F:C4:3D:82:62
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 0196A3534BE4F6FF041F4E06ADE527C3F12A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 1523
Signing time: Tue 06 May 2025 02:01:07 +0000
Manifest this update: Tue 06 May 2025 02:01:07 +0000
Manifest next update: Wed 07 May 2025 02:01:07 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: W1DyeXl+NwiiblPY6qhUtxrKJ4FIos4PlpGnheM5YhU=)
2: ddyzrC5BC4wxEQNwmkjcZcFPmY4.roa (hash: 0XE307HFpJ7wb9YEVzh633mz+Wdn4W7KWCgB9kPDSrg=)
3: nB_zoF-5vRmGl3d9TG824Zcc-nw.roa (hash: m3z2itiLoAbrDtSbjfB2c49btcR+jFaVv3ZdkaLWcmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:53:4b:e4:f6:ff:04:1f:4e:06:ad:e5:27:c3:f1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: May 6 02:01:07 2025 GMT
Not After : May 7 02:01:07 2025 GMT
Subject: CN=122a14a9a24a7c0510de908c751dd12fc43d8262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:35:8c:6e:f6:3c:d7:8b:01:22:94:5b:c7:1c:
92:36:72:89:24:cf:a4:4c:5f:b7:9f:eb:c3:4b:74:
28:b9:a8:75:eb:6b:93:82:5a:e0:66:5f:2b:32:54:
2e:2a:6c:e9:b2:8c:94:dd:b2:e7:13:fc:03:5e:db:
f8:a6:a6:ee:42:74:30:3b:64:01:2c:21:03:ad:1d:
46:2f:28:d1:09:ab:65:eb:5c:bb:0e:d4:ff:a5:f0:
c4:39:19:15:3b:fd:ec:29:28:31:87:ee:33:bb:75:
88:7d:0e:37:45:7e:ba:57:11:7d:24:5a:92:b0:85:
0e:f8:d2:30:df:50:0c:60:7c:a7:26:95:b5:7d:d1:
69:6d:20:59:a7:dd:ba:d4:f6:b9:1e:7e:97:7f:76:
ce:a1:8b:4d:de:3a:46:1b:21:1c:1f:bd:7c:b0:6b:
58:8a:76:e5:fd:71:7d:64:08:6a:fe:22:ce:d0:f9:
ba:b9:b4:b0:8c:4c:d3:31:80:69:57:22:31:3d:7b:
77:04:8d:42:bd:98:ae:d7:a3:29:ad:a2:8b:bb:ed:
f9:a7:f5:58:16:63:7f:81:f0:66:fa:f8:13:66:3b:
34:4f:11:b2:89:12:9d:7d:5e:8f:c3:17:47:b1:84:
c9:0a:cf:da:b1:01:de:d9:30:f2:62:bb:c7:63:f0:
9c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2A:14:A9:A2:4A:7C:05:10:DE:90:8C:75:1D:D1:2F:C4:3D:82:62
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:73:50:71:38:74:75:26:ea:4f:a2:c0:cd:9c:56:a7:fe:4c:
30:53:b0:49:bc:f5:47:37:31:f7:04:f3:b2:39:ab:71:ae:69:
ca:cd:79:f4:83:aa:36:83:70:fc:62:1a:f4:e1:f9:a8:ad:b8:
aa:da:e0:7e:4f:1a:18:fb:2c:71:65:9e:8a:cb:3b:13:17:58:
63:44:7b:e6:7c:00:04:ce:9f:d9:e3:ed:7c:4c:fb:ee:d0:d7:
72:83:a8:0c:0f:c6:7b:e7:66:ec:de:00:f2:14:7b:a1:f3:f1:
ef:c9:2b:31:ab:7d:be:30:54:46:b6:b4:58:79:71:99:6f:28:
36:a9:b8:9a:ba:c3:aa:76:63:4f:c2:3a:33:59:81:d5:8d:69:
e7:48:47:04:d5:d8:74:18:c2:a1:52:56:57:f1:d3:66:32:09:
0e:a1:ad:80:89:20:94:da:19:fb:92:59:43:a1:27:d6:9b:59:
24:c7:09:02:ea:75:a7:22:c9:f0:7b:86:2c:6f:82:09:3c:2b:
44:fc:2d:62:e9:66:98:1a:fa:79:59:f6:5a:b0:7d:d8:18:4e:
7f:c8:29:4c:6c:5d:85:e3:d8:4c:ce:23:b3:a7:a7:f7:41:46:
28:27:56:55:d9:d0:7c:b1:19:f5:87:e8:d2:81:6c:f9:1e:0a:
4c:ef:48:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:56:39 2025 by rpki-client