Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier: RuyCrL5B3l15dZCR1u3cDtgk8KgUyLay7oaVO51rKpQ=
Subject key identifier: 11:92:42:DD:7D:89:6C:ED:D4:74:9E:22:6D:55:4E:4F:A1:B2:46:A7
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial: 0196A68A7ACC937990E2B3B53D39B4A8A15E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number: 0A4E
Signing time: Tue 06 May 2025 17:00:15 +0000
Manifest this update: Tue 06 May 2025 17:00:15 +0000
Manifest next update: Wed 07 May 2025 17:00:15 +0000
Files and hashes: 1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: Jdn0HBdo5/tQQdJakNA5Oo4As9afPFT9tmw+ErROFE4=)
2: GTryjErQ-QvKOHELwraRwqDQoQ4.roa (hash: GN3kBbzA5jk8ZVZGy0p/hEuJ6JzyB6iMj6OE8Sf6qCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:8a:7a:cc:93:79:90:e2:b3:b5:3d:39:b4:a8:a1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec756af77dafebca10684d68556baacd7173617
Validity
Not Before: May 6 17:00:15 2025 GMT
Not After : May 7 17:00:15 2025 GMT
Subject: CN=119242dd7d896cedd4749e226d554e4fa1b246a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:84:12:f8:a8:6d:4e:1f:c3:21:c3:df:42:21:
32:a0:0a:02:da:96:82:c1:9c:41:16:da:7d:bb:36:
46:15:f0:46:ce:7a:bb:df:6b:b7:f7:71:fe:fe:72:
f8:8f:f8:6d:60:bc:27:18:d0:11:08:59:2d:9b:1f:
5e:c1:b6:49:c8:00:a7:5f:7b:73:64:7f:41:42:b1:
fc:b4:8b:04:35:16:96:95:e6:a8:d5:af:36:36:41:
95:53:0c:3f:e0:6d:99:16:4e:82:3a:a0:cf:02:1e:
8c:16:b5:eb:64:0e:1c:ba:ba:54:f9:5d:6e:69:10:
85:29:96:c2:d1:6b:f5:b6:ea:db:6a:af:4a:4b:aa:
78:e7:0b:83:67:d9:a3:7f:12:51:5c:ea:a3:f0:3a:
5a:67:54:e2:c1:c9:c7:0a:67:4a:1a:38:e3:e6:a6:
e6:d8:13:02:10:1e:10:f4:43:86:18:a9:38:af:c8:
8c:b4:6c:69:e3:c5:5d:da:d1:12:45:25:12:b8:c8:
92:93:9a:84:c0:1d:28:a8:a1:3b:a4:c6:7d:f5:b5:
00:3d:91:28:9b:d2:b6:a0:84:bd:a2:6e:e2:3d:3f:
41:73:dc:0e:e3:da:e0:6b:c8:f2:cc:eb:f9:4b:ad:
31:2f:bc:51:6f:05:28:1e:16:b2:da:ed:3d:50:c8:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:92:42:DD:7D:89:6C:ED:D4:74:9E:22:6D:55:4E:4F:A1:B2:46:A7
X509v3 Authority Key Identifier:
keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:60:9b:81:68:6e:b1:07:4a:4d:0e:d0:29:3c:6b:64:f7:d9:
5c:25:60:f1:f1:66:96:7a:fc:4d:78:82:d6:81:3d:51:f5:3e:
9e:4b:19:b0:5f:7d:ad:4c:c8:fe:d9:c7:d5:08:db:db:58:41:
b4:89:20:d2:2b:e6:da:10:bc:20:6a:65:4c:2b:88:10:7f:1e:
36:9f:59:36:08:45:07:91:37:83:c0:bc:49:c9:82:63:d1:60:
90:72:c1:7a:e1:26:0b:79:85:8e:0f:62:bf:aa:c1:e0:3c:fb:
02:9b:b4:2d:e7:3e:cc:d3:eb:1b:45:8e:91:a0:5a:8f:e2:33:
12:f7:34:67:6c:28:30:1e:86:d3:f9:1a:0b:98:41:62:be:67:
23:6b:3b:32:64:80:22:f6:38:ec:e2:2b:39:7b:06:de:20:c4:
56:fc:c8:b3:4d:54:5e:3d:31:37:16:33:f3:01:97:da:34:c2:
90:11:22:ee:12:12:a1:a2:fb:34:f2:db:e4:74:87:4f:6f:b6:
d6:41:c4:a7:78:af:49:6c:1b:3e:44:e5:5e:7b:ef:ee:85:90:
ed:08:21:cd:14:f9:8c:07:55:ad:d9:c7:03:ee:f6:89:6e:a4:
35:1b:5d:3c:c4:5a:a5:aa:02:0d:10:be:5f:a2:1d:3c:d3:08:
cf:32:4c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:57:40 2025 by rpki-client