Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json)
Hash identifier: lUPb9ZW7Wm/TNGxiNa/RHIrFXLf7SWby9DJtnSv/zwU=
Subject key identifier: CD:59:92:DF:52:E7:B2:FC:5A:20:3C:92:C2:AF:9D:15:36:F4:7A:8C
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial: 0196D2BE66A6F9D7A6594D8C66A68870BE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
Manifest number: 1072
Signing time: Thu 15 May 2025 07:00:15 +0000
Manifest this update: Thu 15 May 2025 07:00:15 +0000
Manifest next update: Fri 16 May 2025 07:00:15 +0000
Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: ctzJUJMcUcUm5IK0CMTjHqAW1gRsaQxn3l2tdJ+DVvY=)
2: p3WBjzteYXQZYIX5zj87ra338og.roa (hash: UdBIIG65TiaVNqypoeNqjZfjwvGuuMkdscTIPnMkAs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:be:66:a6:f9:d7:a6:59:4d:8c:66:a6:88:70:be:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Validity
Not Before: May 15 07:00:15 2025 GMT
Not After : May 16 07:00:15 2025 GMT
Subject: CN=cd5992df52e7b2fc5a203c92c2af9d1536f47a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:61:c8:ac:9b:9b:4c:1d:ce:ae:a8:90:e2:
d8:02:72:7f:79:a2:5a:eb:01:93:e5:24:86:c8:56:
fd:6b:0b:b0:65:c6:90:1e:6d:c2:58:82:e1:7b:fd:
d7:65:e9:df:25:e5:d5:47:1d:99:f3:60:d1:78:4b:
64:1a:9c:86:b3:8a:e5:b5:68:7c:5d:32:0f:d5:b0:
cd:69:84:92:7c:77:70:2c:b7:3c:25:88:ea:97:bb:
cb:27:a4:69:3e:3b:a9:00:69:c4:69:e5:b7:17:1e:
78:e6:aa:f4:59:ad:f7:32:61:c6:86:38:86:6a:83:
90:82:3e:8b:09:0f:5d:fc:0a:8b:fc:c1:9a:9b:bd:
6a:4f:d8:ca:5e:dd:49:2e:e4:14:d8:0c:a0:9e:8d:
b3:7b:e7:be:42:33:67:03:c8:cc:4b:2b:1c:7c:68:
6b:bf:84:12:b7:78:e8:3f:0c:13:48:36:b6:19:97:
70:fc:92:73:98:65:fd:fc:24:84:63:4c:5e:c1:c2:
c2:24:ac:df:88:93:34:f1:12:75:0c:37:47:cb:4f:
2b:ca:5e:f2:e6:e8:db:0e:d7:1b:a0:d3:14:52:1a:
4e:db:8b:6a:9f:fe:dc:73:fd:67:cd:a7:a2:15:8a:
9a:0e:9f:67:db:91:af:98:e2:d3:4e:99:8c:0b:b4:
c3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:59:92:DF:52:E7:B2:FC:5A:20:3C:92:C2:AF:9D:15:36:F4:7A:8C
X509v3 Authority Key Identifier:
keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:17:51:94:99:92:70:55:57:74:11:37:4b:25:87:ff:26:a0:
0a:de:62:2a:ee:c7:7b:b5:ca:cf:af:41:5a:03:73:2a:40:b2:
9b:ba:ec:22:bb:68:38:e9:6c:3e:68:c0:ce:2f:b6:b6:5f:c1:
76:95:47:84:cd:57:10:c3:d4:4e:0e:8e:d2:7f:76:c7:e8:0b:
a2:e9:87:25:e6:91:44:f3:61:ee:3e:2a:ec:c5:fc:4e:ac:0b:
82:b8:01:8e:6f:fd:41:d2:85:e1:82:2c:25:5f:d4:2c:a2:e5:
84:e2:42:6a:1b:4a:10:78:7d:b1:0f:35:76:8e:a5:0d:44:91:
8a:44:08:de:dd:13:ae:b8:0e:7b:7d:08:c0:8c:e0:08:4d:1e:
a4:ff:ab:92:f9:35:0b:d1:5a:50:2a:35:29:6f:4e:f5:c5:47:
33:13:9e:7e:36:84:59:33:81:68:7b:b4:2a:6c:06:64:7b:03:
b5:e8:ad:b0:c2:82:fa:ba:96:87:03:77:52:24:fb:cf:2a:fd:
7c:2f:ba:ad:f2:89:3d:40:23:5a:de:4a:76:2b:7e:53:ca:a0:
73:67:0b:80:b2:db:ad:0c:d0:84:1e:d3:a3:89:9b:bb:80:9c:
54:6a:e3:db:9c:71:2c:1e:ed:be:29:54:72:4c:be:af:1d:64:
3b:50:6e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:51:28 2025 by rpki-client