Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier: Uenj1nrkzayMAng/e1PFBH3MEKSNUz0z7eELObU5T3o=
Subject key identifier: 98:97:A0:EA:EC:15:3C:BE:95:ED:B7:A7:59:2B:3B:28:D0:F2:50:05
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 0196BD1255AB9235716430FD458DFF26FF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 02:00:17 +0000
Manifest this update: Sun 11 May 2025 02:00:17 +0000
Manifest next update: Mon 12 May 2025 02:00:17 +0000
Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: XFN8ypvFgntG4Yin0wse0eFubHCU8rq00Qx8nVevyYw=)
2: L9b4ducPYyR6qc5uaeOni9YJQHA.roa (hash: vaOymUj3eUPmbh7xiKllx8KgzftTh5qvMK+aeen3RXg=)
3: kpbrBAbvkEz7iwjj9qvNJnx2KAI.roa (hash: EaUeR1cKI29E16jF0XdNnwUwftG+vurlmN50dR3srjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:55:ab:92:35:71:64:30:fd:45:8d:ff:26:ff:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: May 11 02:00:17 2025 GMT
Not After : May 12 02:00:17 2025 GMT
Subject: CN=9897a0eaec153cbe95edb7a7592b3b28d0f25005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:e1:52:20:4d:fb:97:6e:81:f8:5e:f4:8e:
3b:3f:a9:69:ab:7d:c6:13:31:08:79:2b:5f:a9:8f:
a4:aa:6f:73:d2:64:fa:65:20:d6:b1:86:27:03:95:
e3:7d:b7:91:e1:c3:f4:f3:8d:50:ec:9e:77:ae:e1:
f1:37:6f:93:cc:ef:19:f2:b3:d2:2b:71:e3:c9:c6:
b6:73:51:a5:42:a8:14:d1:34:2e:f1:de:9e:84:b0:
9d:8a:61:94:3c:8c:9c:c8:5c:88:3d:c5:60:08:3c:
7b:b2:15:49:06:e4:9b:31:57:d0:d0:15:89:98:67:
b5:99:90:d6:84:ac:76:6f:df:5e:27:87:c5:07:be:
ce:94:d6:99:62:33:2d:2a:85:e5:f9:c2:0c:71:de:
9b:f2:50:17:97:22:bd:cf:24:77:11:11:d7:2d:a6:
60:43:d5:ae:ed:43:b4:df:5d:24:72:d0:da:1e:e6:
eb:f5:99:c1:e1:94:34:b2:54:59:0e:77:fc:1f:40:
26:30:d0:85:b3:10:8f:53:0f:34:bf:ef:23:4f:f6:
9b:da:ab:e9:c1:9a:00:ad:6a:f9:e4:aa:bc:c0:60:
16:56:c8:dc:47:76:49:1e:0d:a1:c5:20:89:ce:5f:
56:1b:f1:ff:6b:2f:2d:73:31:62:87:63:9d:b0:37:
e0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:97:A0:EA:EC:15:3C:BE:95:ED:B7:A7:59:2B:3B:28:D0:F2:50:05
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2b:4f:49:4d:c2:34:da:e7:46:2c:90:d6:5e:fc:c7:0f:30:
40:58:02:f0:82:d1:c6:d6:8c:2c:95:22:14:49:e4:f4:1b:d0:
6a:94:dc:58:74:a4:09:ca:81:dc:de:3e:7d:6a:5b:06:c4:fd:
b8:40:10:c1:ac:90:80:2c:92:c1:e2:bc:62:44:f0:11:8f:5a:
eb:dc:6f:f2:22:ec:5a:78:53:b8:91:b9:ef:1b:a6:28:06:25:
39:83:a1:6c:1b:ba:b9:cb:6e:01:d9:d3:42:f9:fe:8d:dd:89:
4a:f0:f9:1e:ff:b5:89:32:08:fa:7a:88:a5:54:2f:37:a7:37:
2f:1e:a6:21:65:3b:eb:eb:5a:48:cc:c6:97:2a:ae:2d:bd:85:
78:f2:dd:90:25:2a:d9:4b:e8:ea:ba:be:2c:de:68:95:6e:7e:
4e:2a:a2:5b:f1:1c:81:81:50:76:ba:29:f5:14:8e:d9:a8:dd:
02:93:56:49:d7:bc:25:49:26:6c:36:35:81:96:c8:36:68:45:
3e:f3:0c:57:92:59:5f:88:fe:24:ef:80:bc:19:49:d0:4a:ae:
d5:e5:b3:f6:0e:a6:8e:e1:21:f2:c7:a3:59:2d:e9:07:49:0b:
fa:f1:62:d2:86:0d:dd:08:b9:35:80:6e:b9:1e:1f:53:6c:5c:
0e:fd:74:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:13:50 2025 by rpki-client