Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
File: 3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft (raw, json)
Hash identifier: 8B5W05khPRjDYxZijwUYFpc7NLztO1euj3tHKeC3rko=
Subject key identifier: F5:1D:55:DA:5E:BD:F2:1A:EC:71:25:BF:9A:CB:CE:6A:74:7D:FC:A1
Authority key identifier: DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
Certificate issuer: /CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Certificate serial: 0196C3B93EF8FCC568F74F69ECA6FAF53E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
Manifest number: 14CB
Signing time: Mon 12 May 2025 09:00:19 +0000
Manifest this update: Mon 12 May 2025 09:00:19 +0000
Manifest next update: Tue 13 May 2025 09:00:19 +0000
Files and hashes: 1: 3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl (hash: QZdBv9SVv1SYEV+RQaJH05/AeFEA0OJ7oKiXlQihsns=)
2: RZ4xmYAJVpVRLfuQVLFQGXgbrQE.roa (hash: aFDGOW4Qu6MNo6mtPQc9Lw/jPxt+lcHM9Vl2lskSnz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:3e:f8:fc:c5:68:f7:4f:69:ec:a6:fa:f5:3e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Validity
Not Before: May 12 09:00:19 2025 GMT
Not After : May 13 09:00:19 2025 GMT
Subject: CN=f51d55da5ebdf21aec7125bf9acbce6a747dfca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:3a:24:0e:8c:06:b1:e9:44:e8:bc:8e:59:
25:7b:67:b7:9a:e7:5d:14:9a:5d:4b:eb:97:3b:49:
6c:b8:68:92:57:5c:11:f3:f2:94:5d:7b:cd:b4:15:
19:75:62:5b:28:f7:e7:4a:06:88:a3:38:41:60:8d:
40:02:a7:5b:5d:07:9e:3c:77:8a:4e:b9:a2:a6:4f:
82:04:17:f0:d1:93:17:ae:22:75:b1:87:73:48:6f:
b2:96:3e:4b:de:3b:b9:87:27:d1:4e:c2:a9:18:9e:
3b:e5:c1:9e:fd:24:64:01:3f:27:d7:1f:b9:1c:2d:
50:4f:87:b1:f7:69:83:83:50:5a:f2:cb:2b:25:da:
21:49:ad:6d:a4:d3:75:32:5e:f6:c4:27:17:67:10:
d1:35:bf:d6:d2:ac:0f:81:d9:16:66:f0:8f:2f:76:
92:a8:98:53:46:27:03:b0:ee:64:52:49:ca:cd:5e:
f5:d4:5e:1f:9f:93:1b:8e:42:3d:1a:f7:2b:a2:b7:
4f:18:01:30:32:49:7f:55:ae:05:3e:f1:5f:ef:d1:
10:7a:df:e2:bd:ad:ac:b7:f1:01:64:2f:25:66:b5:
25:e0:a7:22:4a:11:c4:e3:ba:7d:af:3e:b6:06:2a:
c9:4e:b0:04:65:22:21:f6:a3:37:78:8e:0a:44:ba:
c3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1D:55:DA:5E:BD:F2:1A:EC:71:25:BF:9A:CB:CE:6A:74:7D:FC:A1
X509v3 Authority Key Identifier:
keyid:DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:09:f7:d9:d2:a1:75:88:6d:12:0a:b8:a4:0c:be:09:91:6d:
97:62:37:df:31:29:be:12:ee:37:ed:0a:7d:c2:43:2c:66:27:
71:b9:b4:84:43:7a:63:aa:e4:be:64:c2:b3:d3:cf:65:e9:04:
7d:c6:73:72:80:b8:93:4f:3d:6e:0a:56:60:ec:d4:25:f7:b1:
8f:5f:bc:71:83:93:c9:24:d0:22:35:e4:49:fc:ab:3b:22:34:
07:f7:9c:fb:f5:62:0c:d5:2a:fc:65:d9:03:67:bf:2d:19:a9:
a6:ee:11:d0:8f:cf:c2:2a:80:eb:bc:b1:c1:60:f8:aa:52:d7:
7f:a1:40:b7:bd:05:9f:20:62:30:4a:15:fd:fb:2c:b7:d3:99:
11:fd:2e:ed:10:0f:41:51:28:0f:88:d6:52:5a:f4:c9:08:55:
46:73:4c:84:11:e9:40:aa:a6:2c:17:31:08:68:62:19:4b:07:
c4:0b:08:52:3d:1a:f4:ee:46:ca:01:56:56:aa:c7:fc:d3:86:
fc:96:f8:18:bf:f3:37:f6:5a:09:73:35:10:b8:1f:78:46:ab:
7c:bd:fd:da:08:fa:cf:11:f5:71:a9:84:83:96:9a:1c:5a:0d:
68:75:a2:f7:e8:fb:cb:a3:ff:0c:ec:96:24:69:df:7a:41:76:
9c:b4:6e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:10:03 2025 by rpki-client