Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: /Ri5SUO7i6CSusT2c1o6SCg3LNKqoCfwrsIn+/MGtRI=
Subject key identifier: 10:2E:E1:98:84:B9:B2:D4:8E:6E:25:D0:18:32:0A:8C:97:8C:1B:A1
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 0196C26FC1282015D272697C533316309D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 0E77
Signing time: Mon 12 May 2025 03:00:25 +0000
Manifest this update: Mon 12 May 2025 03:00:25 +0000
Manifest next update: Tue 13 May 2025 03:00:25 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: DmAqSM7Bo/xtdOfiJItj+6+1TpRAn6PSqrTe9bpuJ8E=)
2: M0CEGpqdnFyhH05u6ywrw5xpjxw.roa (hash: Da8bL20Ezk/7GnIViJo/xS7eFj2lqLDIbA2oioZuSt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:c1:28:20:15:d2:72:69:7c:53:33:16:30:9d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: May 12 03:00:25 2025 GMT
Not After : May 13 03:00:25 2025 GMT
Subject: CN=102ee19884b9b2d48e6e25d018320a8c978c1ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:9a:58:fc:ff:6a:69:56:a6:a2:50:69:6d:
f0:88:fa:8b:94:2e:f0:a2:2e:9a:32:fc:64:92:f8:
5e:e8:2f:99:15:12:41:40:db:78:d7:8f:ad:8e:60:
6a:ce:9d:12:9e:b5:3e:d0:dc:63:2f:1b:c9:92:3d:
15:1e:c8:28:82:f1:c8:04:fb:00:94:f5:58:14:85:
61:5b:83:c4:65:6c:9a:f6:2c:5d:d0:7b:a9:f0:05:
d9:43:f2:92:80:26:25:ae:c0:73:10:c8:b7:ea:aa:
0d:66:80:93:18:b2:83:f6:35:ac:19:51:e8:9b:2b:
14:97:79:b7:81:98:52:1e:4c:3c:9d:9f:c1:3e:f9:
b4:b4:e1:81:9e:36:64:89:ae:14:67:e3:b0:25:47:
82:4c:ed:90:f9:85:10:89:df:e3:5c:b5:ad:d4:0a:
49:c6:51:8c:5c:80:42:92:83:7c:b5:99:42:89:53:
19:70:72:11:74:e9:6f:35:f4:8d:7d:d6:6c:96:47:
17:61:80:cb:3e:a9:02:a4:76:7e:db:52:e4:7c:5f:
2a:e4:24:d3:a4:12:95:6c:b0:c7:93:c6:25:16:19:
2d:92:99:c2:7d:84:63:33:4c:e4:04:75:49:2b:9b:
83:91:e4:47:28:7f:0b:77:70:2c:52:f2:c7:52:99:
ab:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2E:E1:98:84:B9:B2:D4:8E:6E:25:D0:18:32:0A:8C:97:8C:1B:A1
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:37:9e:1e:1e:cb:87:c1:d4:2a:a8:39:5d:3a:d6:f8:68:6c:
2a:7e:f8:ed:73:14:13:69:bd:5a:13:85:88:a0:11:b8:7d:c8:
53:75:7f:5e:85:9e:90:db:b3:f9:9a:bc:a1:c1:e1:8a:ce:9a:
e6:1c:90:30:6f:3c:02:2f:90:b3:9c:ee:62:dc:79:67:c5:9f:
fb:c3:a2:81:29:82:62:45:a6:49:be:36:5c:c4:31:d0:b0:38:
b5:a4:72:2c:f4:45:c7:d7:16:fa:b1:60:39:a0:84:8d:c2:b2:
b1:21:32:7f:6d:0c:70:29:0a:92:4a:06:19:bc:db:8b:15:43:
36:0a:77:cd:ec:81:22:7c:7a:ed:8b:08:c6:df:51:be:84:b4:
f8:e4:77:24:e1:02:4e:e1:02:99:87:8a:17:13:e0:9b:1e:93:
f0:9f:bc:e7:cd:d2:e9:62:cf:54:ca:ef:b8:23:d0:c7:c5:47:
dc:bf:b0:79:11:cf:89:19:ae:ac:fc:12:06:5e:6a:f6:4b:ac:
76:4d:3b:29:4c:ac:a5:7d:00:a2:2f:b8:c1:96:8a:71:9d:65:
63:06:4c:a7:99:96:b0:82:3a:b6:c3:3b:7d:15:d7:07:21:15:
8d:94:2e:4d:e2:a8:01:25:42:fe:b9:4d:2a:a3:da:16:82:72:
d2:5b:d2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:14:47 2025 by rpki-client