Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
File: 3x4tS9NitiuARQIdw1CxIOVTAmU.mft (raw, json)
Hash identifier: 3pZeNDz3C3sFIkkUvBR4oWIyqsnw4j6Y3iIKLjJGc6k=
Subject key identifier: 36:2A:E0:AE:44:5D:6D:7B:C3:E5:FC:D5:14:91:DD:92:8C:F3:D8:FF
Authority key identifier: DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65
Certificate issuer: /CN=df1e2d4bd362b62b8045021dc350b120e5530265
Certificate serial: 0196CEAAD3DC3EEEEE4C9B45150A672A49B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
Manifest number: 131C
Signing time: Wed 14 May 2025 12:00:23 +0000
Manifest this update: Wed 14 May 2025 12:00:23 +0000
Manifest next update: Thu 15 May 2025 12:00:23 +0000
Files and hashes: 1: 3x4tS9NitiuARQIdw1CxIOVTAmU.crl (hash: W+tegt4INr3m5t+8ckILh/+bbiI9uNvOUjMnCHhnm/k=)
2: MYuqoMzDVi1acZcNDb9FA7d3gCM.roa (hash: tUaun7mhti9TK8aJqqe0a+bLVD50ReQW/RjSFMudsMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:aa:d3:dc:3e:ee:ee:4c:9b:45:15:0a:67:2a:49:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df1e2d4bd362b62b8045021dc350b120e5530265
Validity
Not Before: May 14 12:00:23 2025 GMT
Not After : May 15 12:00:23 2025 GMT
Subject: CN=362ae0ae445d6d7bc3e5fcd51491dd928cf3d8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:12:10:2a:7b:d4:4e:50:7f:97:04:fc:5a:
8e:1e:fe:b6:8f:5f:72:ba:f7:04:32:a0:7a:3e:42:
5f:23:54:8a:c0:ce:f3:9b:4c:21:be:fa:c9:61:85:
8e:fb:52:4f:79:33:47:4e:4f:8b:33:53:6e:96:59:
74:33:ef:76:68:29:8d:52:11:08:79:8a:dc:b7:99:
30:b9:3d:87:f1:e9:95:c5:08:49:ce:dd:af:ee:0e:
db:95:21:c9:6d:b2:e4:37:92:13:df:bf:14:68:73:
7e:25:26:43:ea:37:96:90:67:f9:47:6a:be:5e:5a:
2f:c5:55:0d:28:61:07:f6:bc:54:a8:7a:f3:04:98:
23:d4:12:f3:28:3e:bc:6e:68:60:59:e8:7e:1a:01:
5a:1a:f0:8b:67:9f:d0:ca:68:3b:04:df:bf:d2:cc:
ea:15:e6:0b:ce:97:c1:a3:96:f6:da:c6:1c:d9:9f:
e8:c2:97:d8:b1:1a:07:4d:79:a7:d4:aa:8e:00:10:
26:da:35:e1:da:cd:c0:8c:14:5d:47:d3:07:14:7d:
05:af:65:d2:e8:99:e5:e8:8e:a6:7c:83:d0:97:a8:
68:01:be:ba:56:a9:df:33:7f:3e:d1:82:ec:39:ca:
2e:97:9c:77:24:9d:24:69:4d:58:21:e8:ce:6e:c0:
4e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2A:E0:AE:44:5D:6D:7B:C3:E5:FC:D5:14:91:DD:92:8C:F3:D8:FF
X509v3 Authority Key Identifier:
keyid:DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9d:66:a6:dc:29:1a:d6:76:43:1f:68:dc:4d:2e:6a:d7:3b:
ac:f8:b5:73:6a:bb:02:fb:20:ed:ef:a6:51:cf:ec:f6:70:ed:
5a:68:40:9a:b7:88:f8:27:d7:4c:43:1a:37:e2:a7:6c:37:03:
8c:70:d1:85:08:8d:7f:cb:31:76:82:32:ff:46:ba:ef:d6:6b:
68:ca:02:fb:2b:77:7f:95:0a:68:9a:3e:b9:a7:0d:d6:01:d8:
b6:32:44:d2:9c:df:25:7e:2b:64:d0:b7:e6:89:37:39:a9:ac:
ad:9e:66:e0:72:e2:e5:2b:92:99:0e:c3:df:74:5a:76:8f:0a:
24:ab:d5:a3:78:c8:21:9a:2c:28:cf:77:ab:fa:a5:c8:d0:48:
42:b2:3b:c3:df:0f:2a:51:96:e7:05:ca:31:27:7d:03:54:5f:
62:b4:5e:8b:62:42:65:31:12:7d:e6:45:f0:22:d3:14:0a:0b:
09:77:cf:d4:34:d5:2d:85:fa:fb:73:4c:02:ac:df:b9:24:2e:
0b:44:0e:e7:2a:a6:40:4f:41:43:43:65:cb:3c:d1:6f:c1:7c:
8a:d8:3b:e4:da:90:2d:66:86:5c:28:e2:a1:b0:dd:82:49:b5:
e0:03:21:43:7a:39:28:ce:5d:04:53:fa:1a:f3:7f:ec:00:f8:
b9:c1:e2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 21:02:01 2025 by rpki-client