Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
File: 3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json)
Hash identifier: Py4od/9UY1LREjZ29+2WtNVSc+ItKTSCSNB1LLBMZRI=
Subject key identifier: 2B:AB:2E:77:86:CA:74:9A:CC:E2:3F:64:8C:29:A5:33:7D:D8:A2:88
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 0196ACC3D8341C0080A907BEF8AAAA066379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
Manifest number: 0F41
Signing time: Wed 07 May 2025 22:00:37 +0000
Manifest this update: Wed 07 May 2025 22:00:37 +0000
Manifest next update: Thu 08 May 2025 22:00:37 +0000
Files and hashes: 1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: TdmFsOHLhDOzblre+RuUdgdry6Nq3K0x7SNi1otMr58=)
2: a7DppR8a_zPl6np7nOEfJXryakA.roa (hash: wU3AghxluRA4zWm18LLUP4eLKYWVDAXfgoTV1mFNROs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:c3:d8:34:1c:00:80:a9:07:be:f8:aa:aa:06:63:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: May 7 22:00:37 2025 GMT
Not After : May 8 22:00:37 2025 GMT
Subject: CN=2bab2e7786ca749acce23f648c29a5337dd8a288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:e2:54:87:f6:b8:c4:c2:bd:c4:22:7c:93:
b2:9b:fc:0c:80:b8:1d:bf:d2:d5:96:cb:8a:f0:8a:
3a:79:bd:66:c6:39:20:b2:c4:74:97:76:06:61:80:
64:93:dd:05:14:46:97:10:d8:3a:84:00:f8:db:e0:
ff:4b:c3:60:19:53:b4:97:c9:57:94:de:32:b3:72:
57:60:52:7b:2b:f0:88:55:ed:ea:28:36:08:a4:b5:
91:df:98:ab:dd:02:17:db:9d:f1:8f:01:d4:f9:c0:
12:c9:56:ff:08:0e:ae:6e:d5:a1:c0:7c:15:02:86:
5c:13:cb:dd:2a:60:0d:94:a7:fd:83:f9:9d:81:b0:
80:f0:56:01:97:44:4c:30:37:75:bc:52:01:4a:5b:
56:d5:e2:0a:3e:62:9b:04:46:dc:5f:da:cc:9d:ab:
bc:2a:51:1d:23:74:c9:a3:f3:1b:6c:d7:b6:dd:30:
28:d1:c7:3d:48:1b:a3:1a:80:4f:a3:6b:bc:2d:c0:
70:b7:44:c6:fd:fe:8d:a6:55:43:07:57:b5:11:e2:
e1:aa:a2:00:47:25:fd:a9:c3:37:b5:2b:65:0e:21:
ea:36:5b:65:b5:e2:1d:2a:4f:3a:80:05:28:33:af:
ba:22:b5:57:3b:34:58:79:4d:70:84:fe:92:7e:8e:
38:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AB:2E:77:86:CA:74:9A:CC:E2:3F:64:8C:29:A5:33:7D:D8:A2:88
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:38:4f:06:6c:1d:dc:29:65:cf:75:9d:7c:7e:98:e3:56:33:
92:f7:52:09:63:f3:b2:bb:18:a4:8c:12:ca:ef:70:e1:72:f2:
e6:d2:4b:4a:d3:c5:58:f1:86:5c:6a:0f:f6:3f:da:54:e7:14:
43:5f:51:e1:46:6a:7b:13:9a:a9:90:69:d0:66:f5:11:ae:05:
65:f6:03:38:91:11:2b:e8:d5:70:f1:45:de:9d:b3:cc:be:f0:
8e:c7:ad:b5:93:36:61:8a:41:0e:3c:1a:90:c3:28:9f:66:71:
e1:fd:9c:17:8c:fd:17:5a:e1:cb:74:ce:5c:5e:dc:a7:a2:bc:
05:6a:d1:c9:54:ec:52:c8:94:6a:17:50:88:37:20:2b:c5:dd:
a3:79:81:3b:4b:c2:7c:b2:cf:2b:73:81:21:8f:e1:15:e7:5e:
c8:2b:e4:42:9f:58:d1:dd:06:32:2d:27:af:1c:2f:2f:f9:83:
a9:15:07:8c:9d:d0:7e:0a:dc:e7:15:35:d3:a9:c1:35:42:bc:
24:4e:c5:84:2c:14:87:b9:ea:ce:3c:5f:6e:1e:8c:ed:cb:53:
70:56:74:1e:ec:67:92:2d:c2:01:11:5c:20:9c:71:ed:6a:24:
9f:f2:78:5c:c9:af:9c:3e:d6:ce:d8:ff:51:91:6c:0d:5e:01:
ac:d1:50:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:34:26 2025 by rpki-client