Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json)
Hash identifier: hBpIRwz45E9DjDWb9ikmMjgf3SJrb0+gA1JLJBEoqx4=
Subject key identifier: 4A:00:39:E6:B7:75:E2:AE:C9:5E:76:EA:43:9A:2A:61:CB:F5:CE:BD
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 0196C427622E6D34F1B84E3EBEFC7886BF1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 11:00:37 +0000
Manifest this update: Mon 12 May 2025 11:00:37 +0000
Manifest next update: Tue 13 May 2025 11:00:37 +0000
Files and hashes: 1: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: PfQ5bMzNUecH8t1fH+VEIR26pLR/6n3e4ufZlGQiy+c=)
2: I9GqI9GxRbg5gyNw2oYeQXtgJJg.roa (hash: IdZbo1C2DnUJiJSpOjjTPKnvp3frNBJygc4FMjTeWHU=)
3: OJHrSjDn0A0xOyeisC7fOP_zy4g.roa (hash: 4mrlovUy+cBI29r4SEJkRQxz3HoEwjM6nDvfGvlxWBU=)
4: ie70DJhDrGYxNNPSAG6BpAZrtxY.roa (hash: HiOIeBO8KrrORXl70BQK8AAzSZ8zCob2hQpjThQB7t8=)
5: tr4Wz-5rQhPo47mTFs_LgvHDl8s.roa (hash: PZGVkTuh77FvBlVCnDa38AVdteMzJ1COvOQXzBoIS0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:62:2e:6d:34:f1:b8:4e:3e:be:fc:78:86:bf:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: May 12 11:00:37 2025 GMT
Not After : May 13 11:00:37 2025 GMT
Subject: CN=4a0039e6b775e2aec95e76ea439a2a61cbf5cebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:13:9a:d4:c4:23:f3:da:7d:33:8a:d6:30:
47:c1:fe:b7:e8:d9:50:55:33:e4:39:5f:dc:cc:ad:
43:de:41:04:5d:e7:4d:6b:b5:fe:c8:e8:e2:63:57:
0b:c5:47:d8:e0:b4:47:1d:d9:3c:c6:b9:1e:d7:62:
e0:52:cb:c4:4c:40:0e:4a:e7:1c:88:7b:da:9f:26:
1c:c5:3f:85:7f:12:dc:f4:b8:ef:c9:24:40:48:5e:
26:08:1d:b1:aa:d5:95:1b:e0:91:72:90:a8:33:56:
76:35:d4:38:67:6b:82:7b:7c:3a:1d:d5:82:54:89:
50:b8:72:38:c8:a8:9b:dd:aa:6c:f7:bb:4b:0a:e7:
e4:49:2b:17:13:3e:e0:c0:58:47:04:0b:ce:a8:d4:
dc:43:1f:fa:d3:2f:11:b1:b1:a6:c2:d8:c7:67:17:
a7:7d:ba:aa:a3:0f:35:d8:55:81:a3:d0:e7:e3:ce:
68:0c:52:a6:52:b8:6b:74:40:5d:ab:34:56:53:72:
33:d1:9b:8f:39:78:a6:28:35:ae:c4:5c:90:1c:ba:
aa:51:07:f0:62:24:e7:2d:e6:8c:8d:9e:42:1e:a2:
6d:d0:e8:cc:2c:b1:86:a2:ff:1a:a1:f6:8b:27:83:
5f:af:2b:b3:c5:14:19:f0:e9:be:72:f9:32:64:c3:
8e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:00:39:E6:B7:75:E2:AE:C9:5E:76:EA:43:9A:2A:61:CB:F5:CE:BD
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ab:4b:01:0b:2b:a3:ef:ff:cf:fb:01:ef:8c:41:a8:43:9d:
56:ff:e2:28:84:8d:de:87:e5:19:f4:b6:55:d6:0b:31:ff:c0:
c5:ee:cd:ea:b7:05:0a:d3:72:19:2a:42:c7:5f:0c:6d:33:c8:
65:99:a4:b6:af:d4:da:a2:74:74:67:17:81:8f:34:2d:86:70:
d8:8f:45:b0:1f:67:a2:35:95:04:78:57:12:bc:4a:0f:ee:a3:
92:f7:d6:f9:f4:45:58:72:5c:bb:61:fb:63:64:2b:4e:02:89:
3b:57:c7:53:4a:3d:a4:bc:92:0c:42:4e:ae:ff:4f:f8:7e:43:
9d:0d:09:f0:e7:67:70:b9:8e:6e:fe:52:b3:a9:d3:5a:77:a0:
d8:38:af:23:9e:60:ce:e5:ac:57:50:2e:97:03:12:94:de:31:
4c:1b:5e:55:9a:06:cd:3f:f8:79:e9:b8:33:86:60:59:cc:d2:
cd:70:a1:f4:64:0d:c8:62:2d:bf:9b:e3:25:e2:9f:31:7f:f8:
14:84:29:68:78:55:a8:79:74:45:37:a2:39:eb:91:f6:cc:21:
11:01:59:7c:ab:97:25:09:31:e4:5c:e0:d2:ac:17:d2:0a:92:
9b:6e:8a:83:d9:a5:f9:64:7e:d3:8d:e7:e3:d7:f4:3a:77:52:
09:8b:28:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:01:16 2025 by rpki-client