Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
File: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft (raw, json)
Hash identifier: 2MWZm6jT3B22B7soKhVBy0bS0fEcg7seK/UpwS5jUJM=
Subject key identifier: 95:B1:1E:05:37:AF:61:CF:1A:0A:74:28:93:2C:4B:DF:E8:B5:A3:1B
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 01969D87F9DC2AF2BBE8F259AD558013FF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
Manifest number: 125F
Signing time: Sun 04 May 2025 23:00:56 +0000
Manifest this update: Sun 04 May 2025 23:00:56 +0000
Manifest next update: Mon 05 May 2025 23:00:56 +0000
Files and hashes: 1: 3HTozQB4pcsucL9eexzvUMqz-88.roa (hash: p8l9H8yiS+tCWDGhSt8TqxKK4BPlsy+wIY5igUPwFNU=)
2: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl (hash: Z99gbnhi39WSv5NhJOBVyUyWIvE3NNNm+mwqgTkOmbs=)
3: I_q4haHSQ5-iSHbhiDxn8LO10n0.roa (hash: rR8MdnfYv9DYhofCAQL44jv965jNwY7cLv2/tA4Lg2A=)
4: TiC_Kjgn7ufdW5G3bZapc4eGbt0.roa (hash: bIFhS4mc+QnxlO7/qiPxce8pWMHI9i3DDkPiJSG5yyE=)
5: cdhvQ3G9D22hzZ35uWHLO4DK-b8.roa (hash: 9/hDVeqHVKKGEQirCvU77EziyJeBYbpOSUraYbA1sQI=)
6: dyZAc8NxmgpIJ7ReLwLtCdf8iuU.roa (hash: yzcV6FbEvYdi3FxJ85d1AG7eZonaFrOWx4BQurNQcLA=)
7: icjgdrZ-2bYy0vmLkXN3ZejcMO0.roa (hash: BhIg1YAcMIYOB5H79uWHhrjxoemSR0rVkY+hQV1/Imo=)
8: tgoPg8gJ1wgYlvzK_ZhaNvMswpk.roa (hash: 0Yao20qxSDFfx3jAhC+HO3FsXj9rP4F8uh+mjbY+yHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:f9:dc:2a:f2:bb:e8:f2:59:ad:55:80:13:ff:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: May 4 23:00:56 2025 GMT
Not After : May 5 23:00:56 2025 GMT
Subject: CN=95b11e0537af61cf1a0a7428932c4bdfe8b5a31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:dc:28:ff:57:36:41:38:45:0e:c4:1a:05:
b6:d9:ab:df:ee:04:b4:a1:3f:8e:3f:4b:50:5b:99:
55:87:5e:7a:7a:94:ee:be:c2:4b:22:c8:0f:17:16:
f6:7f:a8:b9:2b:fe:9c:4a:20:ce:25:68:61:1a:42:
80:23:0e:62:a7:e3:7c:ab:eb:da:0f:84:3a:0a:80:
34:68:4f:2a:c3:68:9b:a7:10:07:b0:c8:e5:36:b8:
3b:d3:81:e9:bd:43:92:44:a6:70:2a:c5:22:db:73:
57:d8:71:e5:8f:bd:c6:78:1f:9b:5f:78:be:19:71:
b5:a1:f2:d9:85:f2:6f:a0:cc:c8:25:f6:cb:1d:8f:
e0:12:d0:a3:38:d4:01:29:59:65:6b:13:0a:5d:a5:
ce:fe:32:5c:50:3a:9f:8f:74:cc:87:f4:22:fd:6e:
b3:d2:9f:ea:97:1f:16:20:67:6c:a1:ca:81:79:c8:
a6:d9:ca:4d:e9:7b:e5:4f:7f:5a:3b:c6:3a:1b:c9:
6c:18:3f:3a:85:8b:9a:0f:78:8c:f0:8e:ed:a1:cf:
a9:2a:ae:37:50:53:82:a7:b9:45:a9:54:10:d7:43:
03:84:23:12:a1:9c:c0:0e:33:e0:dc:27:39:85:2e:
14:3a:5c:3a:f7:40:c9:f7:f8:4e:a1:ec:e5:01:59:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B1:1E:05:37:AF:61:CF:1A:0A:74:28:93:2C:4B:DF:E8:B5:A3:1B
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cf:db:08:de:b8:15:1c:30:92:44:8d:ff:36:5f:a3:ef:f8:
6f:7e:35:00:98:45:24:85:d0:42:de:99:12:80:f6:8c:b7:d7:
7d:ca:02:19:83:9c:43:54:56:bd:81:07:c9:23:45:01:7e:0e:
b7:8a:15:89:0c:8c:fd:4e:bb:c8:68:46:fc:44:27:89:27:88:
8e:96:07:75:7d:ed:60:3a:56:e6:22:d1:4a:c0:8f:91:dc:5d:
f7:ef:14:92:4f:51:63:83:39:eb:cb:bb:90:11:7d:4a:86:a0:
76:0d:3a:91:79:01:34:e0:17:e1:fc:28:61:1a:3f:29:56:03:
2c:45:30:57:37:4b:27:d9:fe:d2:2a:5c:1c:5b:1e:c0:e2:18:
79:52:d2:d5:22:b8:c2:8c:b0:c8:58:05:eb:a3:4f:bf:52:53:
ab:cf:30:23:0b:da:73:e3:85:e1:7f:f1:c0:2d:32:c0:e9:05:
d7:a3:57:89:64:29:8a:0f:90:7b:94:f5:3c:de:0b:0f:bb:d8:
d9:85:a7:86:e0:b8:44:78:13:96:e4:86:b6:2b:86:e1:c4:26:
0b:ea:f2:93:ec:14:03:72:05:61:5c:e7:87:d9:f4:31:2b:06:
2f:52:3b:61:1f:b0:18:a1:df:1a:5c:0b:00:2a:e4:e5:7e:b3:
e2:f1:8d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:20:21 2025 by rpki-client