Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
File: 3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json)
Hash identifier: 6208Ho0USNQihhLCMvA+LiE/ECTnqE5FaanMmjA9qHc=
Subject key identifier: E7:FC:F1:DB:09:DF:7C:C2:26:C4:59:23:B1:86:25:90:8B:3D:1D:9E
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 0196A61D2E4174B316CB57DA9B72C15AC0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
Manifest number: 152A
Signing time: Tue 06 May 2025 15:00:52 +0000
Manifest this update: Tue 06 May 2025 15:00:52 +0000
Manifest next update: Wed 07 May 2025 15:00:52 +0000
Files and hashes: 1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: qWibDaMkA/MLQ6WFO7mO76i/rAjS7zNXQmx7hQcSjU4=)
2: lGIx-o92jKFHwjzv3WLOo2W-Z-M.roa (hash: Q5Tqe0EHcZZYvwuXt1YX2uqSKiJ+UhyPnyv5Ni+/PxY=)
3: wV8zvnBET2OmPNrrtE4SsK5y3DM.roa (hash: WHZUiMThERHZ0hfVjMipF4WGFlL19sh6184Ce9U7WFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:1d:2e:41:74:b3:16:cb:57:da:9b:72:c1:5a:c0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: May 6 15:00:52 2025 GMT
Not After : May 7 15:00:52 2025 GMT
Subject: CN=e7fcf1db09df7cc226c45923b18625908b3d1d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3a:ac:c9:3c:c4:63:7f:1f:e4:6d:8e:56:43:
96:00:cc:c6:49:8b:5a:be:0a:92:c1:7d:b7:6c:cb:
45:c8:21:c7:92:00:56:61:b6:5a:c6:45:d3:1f:f8:
b5:72:96:0b:98:b0:01:a1:33:93:28:a0:dd:35:b2:
23:8f:64:99:3f:26:23:af:c8:22:f4:45:d1:f0:8d:
5c:e5:58:1b:04:9f:98:64:87:50:0d:82:a2:f0:99:
93:75:a4:c3:4d:27:1e:36:21:e1:1c:f0:95:8f:11:
d2:0a:3c:f3:cd:85:d9:0b:11:eb:ce:91:0b:f0:ac:
db:6e:fc:0f:cc:b4:89:56:70:6f:97:c2:43:2f:05:
02:94:8e:9f:ea:a6:5e:80:88:2e:35:77:78:b8:d1:
24:87:2c:eb:d5:52:20:a2:f2:6c:42:eb:1f:4e:60:
19:a6:31:23:c2:cb:a4:03:bf:c3:7d:8b:10:0b:85:
ca:d9:42:51:a2:28:6b:97:df:88:7b:2c:66:81:b4:
9e:ea:f9:69:b2:e3:35:1d:04:c3:ac:07:c3:12:89:
ca:84:0c:f3:12:c7:c0:a8:ac:81:c9:4a:52:14:eb:
24:c3:ad:f4:41:71:92:c5:4b:a9:3c:c5:61:49:d3:
1c:2a:0a:98:64:91:45:9a:63:21:ab:87:96:fb:7b:
10:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FC:F1:DB:09:DF:7C:C2:26:C4:59:23:B1:86:25:90:8B:3D:1D:9E
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:52:56:db:f0:7e:d0:b5:67:aa:d4:75:6c:62:95:f9:f1:6a:
ae:94:05:a7:26:c3:16:ac:f7:8b:a6:d1:60:51:f5:ca:de:b5:
c4:58:25:f5:82:b2:bf:47:75:dc:4b:9e:b2:4a:4d:f9:09:b9:
e9:13:48:d3:90:26:53:0f:26:d7:40:f5:6f:e1:45:c7:54:78:
d0:7b:9c:72:f1:e1:88:a4:8f:2e:8f:84:6e:86:6a:ae:de:06:
01:31:29:aa:f8:9d:27:4c:8a:36:ed:7a:16:79:a3:e2:76:87:
be:a1:e9:b4:c6:e7:03:18:99:2c:57:7e:cc:b5:0f:c4:13:50:
fe:51:2c:0f:0d:ad:c4:e7:29:ef:97:df:9c:9b:0f:62:d9:ec:
ea:9d:01:64:68:9a:db:26:6b:ff:5e:3d:ec:23:fb:6a:b2:02:
71:f7:6a:32:a2:25:58:56:bf:8b:d2:0f:dc:c9:a9:d2:ac:49:
fd:d5:87:e4:fd:7c:ca:5b:46:4a:fc:83:0b:4a:4d:03:e0:ed:
1c:97:80:1b:c8:3b:eb:67:04:93:76:2d:15:2b:c3:19:75:0b:
61:cf:29:82:4e:90:fc:49:ab:8a:74:0b:fc:5d:97:79:13:1e:
a2:f3:0e:31:ab:c1:27:24:28:63:d9:1b:69:0b:ed:f5:ce:f9:
78:dd:9f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:50:27 2025 by rpki-client