Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: IoRgzIOjWTgHoAumk+FbvYeFoy2ABoWnNEecb+1iTSw=
Subject key identifier: 69:38:33:2C:73:3C:88:0F:34:E0:65:1A:FB:AD:52:BF:AE:D5:6B:99
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 0196C2DDC800F2D5B1727C9725E35E78F158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 153B
Signing time: Mon 12 May 2025 05:00:36 +0000
Manifest this update: Mon 12 May 2025 05:00:36 +0000
Manifest next update: Tue 13 May 2025 05:00:36 +0000
Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: 1br+TzLFTdz2owjwXvvMbV1kH/pG4uZIgfUnT9PrnM0=)
2: FoF8ZUBZ5kCu4oa83zINkMjWAYM.roa (hash: RhcSxCtgICb2ZYm3ZoQOXVJ7hwELiIb6QSru+4BTc5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:c8:00:f2:d5:b1:72:7c:97:25:e3:5e:78:f1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: May 12 05:00:36 2025 GMT
Not After : May 13 05:00:36 2025 GMT
Subject: CN=6938332c733c880f34e0651afbad52bfaed56b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:8f:ec:ef:47:43:c2:c2:62:2b:56:68:59:
f8:66:4e:70:a0:51:83:92:b0:07:65:95:2e:2c:4a:
ac:58:2c:66:a5:eb:3d:f0:74:be:b2:05:3d:3c:d7:
b9:67:1a:7c:d9:4d:ec:70:e2:2d:07:1f:e2:30:f1:
98:c6:76:16:09:3a:bb:c4:c8:c4:74:5f:f0:ba:7e:
f1:43:5c:eb:da:36:b1:ac:54:4c:e0:91:66:f8:29:
e8:75:68:b0:e2:73:df:1e:ef:ca:00:f2:2a:4e:70:
99:29:24:a3:c9:9a:3b:33:23:f8:0c:2d:c8:1c:6c:
11:1c:35:ca:79:c1:17:a9:6b:93:52:a5:04:80:33:
e8:bf:e9:a7:dd:79:f9:12:d7:4b:98:cf:23:76:50:
6a:82:8b:6a:9c:2d:6a:c0:44:c4:6a:79:3e:55:54:
c6:52:88:22:11:74:7f:af:8f:bb:61:0f:fe:cb:be:
d8:86:7b:85:44:a4:9e:4f:d9:9e:f4:ee:eb:13:64:
67:c9:75:20:b1:e0:e6:1b:06:4b:4c:f6:04:53:78:
03:ab:ff:bf:d2:ae:75:6f:82:82:7d:34:34:fd:ad:
4f:57:e9:ab:10:36:32:fc:38:4d:bc:50:8b:de:5f:
a4:09:74:39:0b:d4:76:9c:21:10:dc:19:bc:25:9a:
1e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:38:33:2C:73:3C:88:0F:34:E0:65:1A:FB:AD:52:BF:AE:D5:6B:99
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3b:df:38:bb:d4:ff:c2:7a:ca:5e:de:55:33:06:97:e5:ef:
4d:6a:ca:65:f2:22:86:3c:a4:ca:97:06:34:2b:19:9e:8b:28:
6a:33:16:d2:5d:ac:c3:75:d1:b9:70:d6:51:c1:5b:9b:b9:ec:
c1:60:0f:bf:b1:cc:93:1e:74:17:d9:6d:66:75:96:a4:bb:d7:
45:f2:73:76:4b:47:2c:fc:1b:7e:bd:ad:42:8e:62:c4:24:4a:
ad:e7:9d:65:dc:10:78:51:0d:a2:ee:24:a6:19:21:a0:40:c5:
83:ea:cd:a2:69:72:ab:51:24:a9:ee:4c:ea:ee:df:04:b8:59:
72:fc:a2:c2:d1:2b:51:29:53:a3:ba:50:d0:bc:f2:2f:2a:47:
37:9c:fd:2e:8c:35:30:0d:a3:9a:96:f6:99:72:54:aa:c3:c9:
78:b3:31:8c:d8:a4:d3:28:6b:88:51:25:68:37:65:c1:f4:be:
82:a2:c0:c7:6d:b6:ee:33:b7:e3:25:ed:f3:9d:17:c0:f6:f0:
c3:f4:c3:36:47:eb:a5:22:d9:94:1f:3a:05:46:51:e0:19:4f:
5c:d4:9f:fa:4b:5e:e4:56:f6:d8:ef:41:54:0c:b5:4b:b8:47:
8a:50:62:c7:1c:1c:a3:0e:2f:ad:e5:03:59:25:c0:d6:bf:1a:
48:68:d8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:42:10 2025 by rpki-client