Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
File: 3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft (raw, json)
Hash identifier: 0hXjZl07AEAqHRk0rGu2b0PHVYwDbaehAT4GqmjMaik=
Subject key identifier: E2:CD:9A:C3:8D:90:60:3B:25:F4:18:B6:56:CF:1B:E3:77:F4:07:9C
Authority key identifier: DE:46:82:E6:B2:86:60:BD:88:A9:B4:D2:8C:B1:D7:5E:F7:CC:6D:7F
Certificate issuer: /CN=de4682e6b28660bd88a9b4d28cb1d75ef7cc6d7f
Certificate serial: 0196BD4941FAB7CA91EB84B49EAE0B53AFA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
Manifest number: 0EEE
Signing time: Sun 11 May 2025 03:00:16 +0000
Manifest this update: Sun 11 May 2025 03:00:16 +0000
Manifest next update: Mon 12 May 2025 03:00:16 +0000
Files and hashes: 1: 3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl (hash: vzIL0nZYoC/Yezk06c1bHufaAn4bje1znydQy5rZz5g=)
2: j2BsJZHL3LgBeU5YdWYJa32hdy4.roa (hash: d+oREESRuLvMYhUCDv9aLTd0uG0phphp5vORkyTT7cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:41:fa:b7:ca:91:eb:84:b4:9e:ae:0b:53:af:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4682e6b28660bd88a9b4d28cb1d75ef7cc6d7f
Validity
Not Before: May 11 03:00:16 2025 GMT
Not After : May 12 03:00:16 2025 GMT
Subject: CN=e2cd9ac38d90603b25f418b656cf1be377f4079c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:e5:ee:e4:74:67:a9:65:c2:a4:d9:0a:d3:a5:
4f:01:57:5b:db:84:99:15:8b:4b:66:93:bb:a5:5b:
05:50:02:3d:c0:77:5a:af:75:9c:22:47:88:d3:82:
9e:c0:42:f7:7d:ba:53:d2:9f:69:17:61:bd:d2:5d:
a8:31:21:cf:a7:aa:ca:83:3b:48:10:eb:0f:17:93:
9b:d6:8b:0a:96:94:b2:c7:b4:25:31:5f:b4:5c:b8:
77:f5:7f:56:ad:09:16:fd:63:97:92:69:d9:ba:d5:
f7:44:0e:6a:d3:dc:ba:15:96:52:23:89:51:af:e7:
06:a1:47:9b:f5:1c:15:69:38:37:54:90:24:12:d2:
d7:8b:78:d2:a1:0a:a2:50:aa:a8:3c:4c:c5:8c:2c:
a4:59:a0:ed:8e:57:fd:ce:bf:62:8f:6c:f6:7a:98:
cc:1a:18:56:c7:ff:78:a2:70:db:e5:9d:bd:c4:48:
18:2f:39:99:f3:41:8c:84:c8:4c:01:7d:be:e0:95:
00:a2:92:8e:dd:8d:4e:c5:4a:9d:8e:e3:e3:86:07:
cb:58:0d:9f:52:46:19:c7:90:89:a7:d4:23:59:f8:
26:1c:c5:2d:3e:9a:20:76:a5:72:3d:fd:91:13:cb:
a6:4d:76:b1:41:b0:f7:ab:3f:16:73:e5:3d:a0:17:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CD:9A:C3:8D:90:60:3B:25:F4:18:B6:56:CF:1B:E3:77:F4:07:9C
X509v3 Authority Key Identifier:
keyid:DE:46:82:E6:B2:86:60:BD:88:A9:B4:D2:8C:B1:D7:5E:F7:CC:6D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:06:18:b7:87:bd:7e:03:fb:8c:3c:af:97:32:c9:f1:5b:24:
90:12:bb:ee:be:a1:a6:b8:49:b8:51:c4:a7:e8:36:f2:55:64:
57:a2:12:17:dd:c2:09:13:18:f1:62:d5:e2:0b:55:1e:a2:97:
59:85:00:0e:ae:13:15:80:26:b5:59:da:c6:da:ce:59:f6:a7:
87:d6:61:c1:29:d8:3f:27:8d:aa:88:d3:0e:30:2e:08:27:fc:
2a:a5:a2:09:04:04:cd:a3:bd:0f:58:38:0f:ee:b8:6c:c8:75:
fb:80:ac:39:8a:86:49:ce:a6:24:86:64:8f:49:af:fb:21:de:
02:27:81:a8:2a:9d:9c:93:da:bd:04:be:89:ee:c9:c0:97:87:
c9:d4:f3:cd:8b:c2:2d:57:e0:b5:ab:cf:64:50:12:ab:11:1b:
fd:08:4e:4f:19:11:97:ac:38:18:3b:60:ee:73:d9:bc:21:18:
13:81:41:c9:01:f7:00:f0:3c:2d:f6:6e:33:26:7e:8d:f0:a4:
c0:24:65:77:cb:b0:c7:ec:67:97:78:b9:01:4c:59:04:81:08:
90:c0:74:3e:e3:25:bb:34:4a:8b:38:1d:09:ff:ce:0a:98:f4:
3a:8a:a1:7d:00:da:48:bd:a2:e4:fc:7f:a5:1d:7a:13:be:f7:
c7:b1:64:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:30:29 2025 by rpki-client