Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
File: 3MIAShrwMLqZ_PRR872I78U4Rqk.mft (raw, json)
Hash identifier: j2bJtRcDTFfXE5feWPfjJu1jUBWWgxNF+fW3y1lgGLU=
Subject key identifier: 2A:2E:04:5D:5E:8B:44:67:DE:14:44:35:BF:7D:FF:16:FF:20:56:69
Authority key identifier: DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
Certificate issuer: /CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Certificate serial: 0196BB920F931B22B1A1DCFC2B0D2D18B325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 19:00:33 +0000
Manifest this update: Sat 10 May 2025 19:00:33 +0000
Manifest next update: Sun 11 May 2025 19:00:33 +0000
Files and hashes: 1: 3MIAShrwMLqZ_PRR872I78U4Rqk.crl (hash: 3N/IpcjANLjE32P4xOy2hgKK4zNsyAiOA1X2xsUjL8o=)
2: AL-L8asVgI-s4USXW1Jxulz_8Sg.roa (hash: UF0FyApaz9L8VccFK4e4NgnphNtboD57IyF8hP0doDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:0f:93:1b:22:b1:a1:dc:fc:2b:0d:2d:18:b3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Validity
Not Before: May 10 19:00:33 2025 GMT
Not After : May 11 19:00:33 2025 GMT
Subject: CN=2a2e045d5e8b4467de144435bf7dff16ff205669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:c4:f1:23:62:24:9c:e2:df:a4:d2:3f:b1:
64:3a:a8:52:f5:aa:b8:86:8a:b4:3e:ee:26:de:c3:
42:fc:4b:3c:73:7a:82:2a:64:e8:27:5d:3d:28:cf:
5f:87:a9:f3:52:13:4e:a7:60:8a:c4:4b:ab:3b:bd:
7e:16:ff:a2:d9:ca:79:5e:5b:c8:14:e4:9a:38:1f:
3a:75:7a:99:28:a5:b3:6f:93:3c:70:46:fe:67:c9:
53:f3:a5:ab:26:1e:dc:98:d2:cc:ed:52:fd:31:92:
2e:42:cf:a7:41:40:ec:b6:91:43:65:fa:32:ec:2f:
68:52:0f:ac:cc:83:91:49:ce:c5:f2:bd:2d:59:77:
21:3e:5b:95:bb:66:f1:f0:6a:fd:89:b7:7b:0f:6a:
1e:d2:cd:4f:d1:8a:3d:75:83:e1:b7:56:ec:f3:72:
5d:0d:ed:8c:26:b5:05:cc:0e:f6:19:db:ee:fe:a0:
77:3e:f5:57:71:d0:52:38:19:b5:cb:7f:3f:53:68:
7a:72:8c:7c:3d:50:ad:20:33:55:89:d2:2a:2c:15:
8c:83:66:26:d8:4f:08:c2:cb:a9:83:24:20:65:f6:
eb:1e:42:d5:2e:84:4e:9a:71:b4:2b:68:fa:22:78:
f3:d5:d3:a9:73:ce:11:e6:be:a8:57:1a:f9:ac:bc:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2E:04:5D:5E:8B:44:67:DE:14:44:35:BF:7D:FF:16:FF:20:56:69
X509v3 Authority Key Identifier:
keyid:DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ee:14:8b:5f:57:83:e5:f4:ff:26:33:c8:f2:6f:2b:8e:01:
56:e9:68:f7:bc:a0:e3:78:35:6b:c5:91:cb:dd:eb:78:a6:3f:
12:08:76:e3:73:d0:e2:c0:8c:c4:cb:42:6c:44:83:92:9f:ad:
c3:1b:b3:46:7d:16:3a:dc:0a:04:ae:ab:50:c3:28:e6:90:bd:
2f:db:c0:53:28:73:be:bb:59:b1:05:30:8c:3d:6b:03:c5:2d:
0f:72:dd:a8:a7:24:71:e5:29:2b:43:21:a0:c9:60:b1:0f:62:
3a:1f:f0:08:3c:88:ea:8d:bb:5c:d0:b6:b1:8d:85:0a:3c:5b:
3f:d4:05:04:a1:92:e5:41:99:ce:cd:b7:64:dc:e4:4d:e1:60:
08:7b:96:ed:ba:57:2b:3a:d4:26:6d:a5:73:f2:16:89:96:20:
c8:80:85:12:be:ab:c0:99:b7:0e:b6:80:fd:1a:74:59:64:d9:
70:74:6e:6b:8e:31:ef:d7:5f:a8:62:d5:a0:b9:d5:3c:46:4b:
61:28:c2:f7:8d:81:ab:45:f1:cd:44:10:47:4b:01:e9:db:c3:
3a:1d:33:2a:55:21:70:e3:86:07:1d:9d:25:41:37:42:25:66:
b5:2f:31:62:95:2a:5b:cd:c9:4c:8f:5d:ce:cb:e9:32:ad:ab:
32:c4:59:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:45:04 2025 by rpki-client