Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
File: 3NJG4YMFZ6sRUjHbd18oedma8KA.mft (raw, json)
Hash identifier: sjZ44V/J7pNbjG8wqFcg5wfZO9mpyemgLSWktUsHy7Y=
Subject key identifier: 8B:D8:DB:30:3B:98:BF:08:4E:F8:6B:DE:C9:BF:D6:06:1B:CA:0A:EA
Authority key identifier: DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
Certificate issuer: /CN=dcd246e1830567ab115231db775f2879d99af0a0
Certificate serial: 0196A16411FCA22879C3A2FA957D1D43857A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
Manifest number: 03BE
Signing time: Mon 05 May 2025 17:00:12 +0000
Manifest this update: Mon 05 May 2025 17:00:12 +0000
Manifest next update: Tue 06 May 2025 17:00:12 +0000
Files and hashes: 1: 3NJG4YMFZ6sRUjHbd18oedma8KA.crl (hash: D4WLR2okSXf3ZHjdB+BahwhKmIr1RSAEh0iANUAHYAE=)
2: pMwZ_dWs8ojtwFFRIemRw2PGl-4.roa (hash: N5kw38iMWCD98CNIZvqnGspiT0ia5Z9rWUHOZazCoDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:11:fc:a2:28:79:c3:a2:fa:95:7d:1d:43:85:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcd246e1830567ab115231db775f2879d99af0a0
Validity
Not Before: May 5 17:00:12 2025 GMT
Not After : May 6 17:00:12 2025 GMT
Subject: CN=8bd8db303b98bf084ef86bdec9bfd6061bca0aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:6d:41:c0:71:61:6f:1d:3c:eb:e4:0b:4c:
09:34:94:1b:0f:f0:46:e3:9c:15:39:76:1c:a7:f5:
1c:89:87:bc:87:9d:c7:ab:54:1f:13:6c:c7:33:17:
9b:37:39:66:4c:2b:60:4e:4e:8e:c3:63:f3:ab:49:
a4:8e:11:16:ee:12:11:34:a1:05:6f:0b:be:a1:35:
51:36:92:e3:50:9c:69:29:b8:ea:d0:00:b2:38:c3:
cf:93:1f:bc:c5:6e:c3:4d:ab:13:a9:95:11:9d:f2:
de:a0:a1:14:8e:c0:ab:35:97:06:60:0b:d1:ea:b8:
da:3d:9d:1e:de:59:23:3e:6b:be:42:7b:28:79:d3:
48:cf:4b:22:47:d3:f9:85:2e:5c:f6:d5:bd:9d:02:
60:c3:b5:84:ae:5f:c3:a5:c5:50:48:f8:48:e9:7b:
30:f1:85:1c:b7:4b:56:fe:28:f8:cf:73:7f:f3:47:
cd:6a:7e:cc:74:48:69:f0:8f:8b:90:9d:dd:ab:b6:
3c:13:80:dc:ac:bc:56:cd:fd:71:ad:e2:24:f0:3a:
a2:d5:5c:39:38:88:95:e2:21:9f:4b:8f:88:18:fc:
ef:88:fe:1b:48:85:fd:e8:c5:56:82:36:2f:2f:9f:
5a:d1:49:e7:43:d3:44:c7:11:1f:67:9f:ec:6a:b8:
40:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D8:DB:30:3B:98:BF:08:4E:F8:6B:DE:C9:BF:D6:06:1B:CA:0A:EA
X509v3 Authority Key Identifier:
keyid:DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:df:88:c9:bb:5d:ea:12:40:b3:c6:7e:75:f4:b3:ef:c4:a0:
d0:29:9f:a0:e4:24:f2:91:f2:57:ef:c5:2b:2c:00:61:53:9c:
ce:03:c2:b1:0f:0e:7f:bb:a8:fa:9c:dd:92:1c:cd:2c:6d:00:
6e:6e:61:fb:da:6f:90:5f:99:29:fb:12:1b:78:72:f3:cf:49:
dd:19:b1:ff:20:62:85:1a:54:1e:b9:16:9a:7c:6f:a1:c2:db:
95:05:5e:d5:d0:b9:2a:c4:a1:7a:2e:7e:3d:39:0d:71:e9:0b:
aa:af:c8:97:e0:16:29:08:de:1d:9c:bd:1d:8f:e5:b0:a5:57:
cb:4d:78:25:68:3a:43:cc:e8:30:5f:b9:5b:2a:b7:8c:43:48:
a4:2c:89:38:da:e8:ba:86:6f:36:53:9b:14:4b:ac:8b:72:bd:
b9:ea:5f:95:69:c5:59:64:22:65:3a:19:07:bc:bf:c4:3e:4c:
db:ae:d8:d9:b4:36:23:50:fd:e5:c9:06:aa:0d:1b:3a:2f:c8:
8d:34:ab:a0:57:1d:3c:0d:41:cb:5c:67:5a:5d:04:0a:69:e7:
fe:d3:d6:ae:8d:be:dc:2d:1e:c2:b2:8f:fb:de:f0:0b:9e:44:
6c:4c:7a:26:fa:5f:44:0c:ae:ae:9a:e2:9c:0e:2b:4b:22:3b:
7b:a8:2f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:48:38 2025 by rpki-client