Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier: 9UhvjbB9IUr1DKLKQcxIyM7K2yIkw/6plr9bLztk/3s=
Subject key identifier: 80:23:4B:AD:7F:A7:BA:8A:78:EA:E8:71:5A:A3:A6:EA:7A:D0:B8:05
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 0196BFDC8B14C4555F080E4976455BF380EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number: 14C9
Signing time: Sun 11 May 2025 15:00:23 +0000
Manifest this update: Sun 11 May 2025 15:00:23 +0000
Manifest next update: Mon 12 May 2025 15:00:23 +0000
Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: DgBnzguifRNsE6oy0nAALWZKM2wX4/8Oyza6Wh3rSJs=)
2: KC65iLduV38Y-_4YeZcOkvub1x0.roa (hash: 59wDbBZd77QyRnr9wiaIVyjbp4l+GRhLfxwyuRW0y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:8b:14:c4:55:5f:08:0e:49:76:45:5b:f3:80:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: May 11 15:00:23 2025 GMT
Not After : May 12 15:00:23 2025 GMT
Subject: CN=80234bad7fa7ba8a78eae8715aa3a6ea7ad0b805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3a:90:2e:07:dc:ec:ed:ca:70:b5:c3:7d:35:
73:6c:78:da:4b:70:11:27:5d:41:f8:57:70:7f:97:
b0:bc:d1:6d:40:ad:06:e4:06:81:f9:0c:d2:06:bb:
50:ab:d9:c7:f5:1f:e7:9c:5b:71:8e:78:e4:27:3d:
b7:ee:34:be:e0:67:14:f0:2e:d2:e0:ff:6d:57:ab:
30:e3:66:78:39:38:ca:ee:ab:e8:3d:47:1c:52:9d:
1f:9d:b6:e0:2e:88:44:32:9e:85:d4:36:6f:d6:7c:
26:f2:fe:51:90:67:48:2e:a0:50:13:e4:e7:95:5b:
1c:14:76:98:c9:f0:7b:d7:a8:59:ee:44:b1:7e:f7:
e8:00:b7:bf:6a:44:50:7e:c1:7e:1b:b4:01:c0:f0:
a1:d6:01:c7:93:90:2b:ba:56:2c:05:62:40:bd:bc:
8c:45:cc:e3:ed:ae:61:08:81:9e:43:75:6a:53:55:
41:57:66:a0:03:67:b0:c7:06:6a:a1:97:b0:49:f4:
51:9a:7c:21:bf:b8:7b:c1:f6:4e:a2:8b:4d:93:a3:
d5:77:50:98:ad:21:b0:5b:e2:2a:27:d2:db:f7:16:
2e:76:4b:a2:ed:0a:df:99:48:7e:0f:e5:db:35:54:
f9:5f:de:a1:c6:de:d8:0c:39:91:f5:19:aa:74:a4:
2e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:23:4B:AD:7F:A7:BA:8A:78:EA:E8:71:5A:A3:A6:EA:7A:D0:B8:05
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:21:fc:ff:02:73:76:95:7b:6f:04:87:04:58:27:43:8b:ea:
99:30:f9:89:7f:8b:75:0f:f0:b3:e7:5d:da:e8:f3:57:cd:d4:
e2:1e:cc:d8:54:52:0c:45:60:33:04:bf:00:53:8d:65:2b:48:
21:ea:64:16:b9:87:a1:d3:0f:f1:a9:78:82:29:48:97:84:22:
67:ab:69:d9:39:50:fa:9b:74:7c:97:a4:5e:6d:27:4c:4f:49:
b2:c1:18:23:d0:55:20:bc:56:64:87:0a:0a:3d:8e:e6:2f:d7:
d8:c9:7c:09:ab:81:ab:7f:7f:33:f2:46:ea:01:6f:98:fe:b4:
7a:f2:7c:62:3c:45:e5:59:96:6f:c2:54:be:ec:46:92:9f:60:
a0:19:7a:64:8e:37:36:17:9e:12:47:3b:f1:5e:85:6f:b9:8e:
93:33:7c:ef:8c:56:8e:25:12:39:b3:9a:fb:fd:cf:d3:bb:f7:
96:1e:f0:85:78:43:e2:01:b4:7b:65:b1:8b:3c:2a:27:ed:17:
46:92:68:80:ea:ad:6a:d7:c3:76:62:f3:fd:95:f6:a2:63:93:
c8:14:e0:d4:13:f0:29:43:65:b2:7a:d4:7f:49:fd:48:59:7a:
68:53:7b:4e:a8:69:43:6b:77:21:76:ab:e8:dd:7e:44:fd:47:
70:4f:53:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:28:48 2025 by rpki-client