Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
File: 3y4c6U6IoT84_n-UO3lBa8B6HfA.mft (raw, json)
Hash identifier: C9SdsgEYGqFhSN9cDx+FyDse5JbTEV3vDuw9n7+2C0I=
Subject key identifier: 12:3F:17:49:00:69:E6:9A:AD:82:1A:BE:11:EF:B9:EF:0D:49:82:00
Authority key identifier: DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
Certificate issuer: /CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Certificate serial: 0196BA11A51EF8295024F252138A1518B6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 12:00:40 +0000
Manifest this update: Sat 10 May 2025 12:00:40 +0000
Manifest next update: Sun 11 May 2025 12:00:40 +0000
Files and hashes: 1: 3y4c6U6IoT84_n-UO3lBa8B6HfA.crl (hash: B0dDWRTj/DlyOqTLyGgav4/n/35C4nl9gEWgxumUHbs=)
2: cssion0g3PJ3Xd3t2jaSsbUDiLU.roa (hash: n63LUbsK0+15N0vAETIk0kewzsiQZdMNrmzn6fJSfQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:a5:1e:f8:29:50:24:f2:52:13:8a:15:18:b6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Validity
Not Before: May 10 12:00:40 2025 GMT
Not After : May 11 12:00:40 2025 GMT
Subject: CN=123f17490069e69aad821abe11efb9ef0d498200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:88:4e:34:45:46:1a:59:b4:8a:8e:9f:96:
85:dd:36:ab:ce:78:f2:d2:79:8b:59:bd:e1:47:bc:
ff:a8:bd:db:77:63:69:35:37:07:59:22:da:e5:ff:
7f:14:32:37:a8:03:7e:60:5b:bf:d5:bb:fd:e6:79:
26:4b:79:27:7e:86:3a:bc:31:d3:e5:6b:76:78:f4:
55:c5:ba:f1:d4:90:98:c5:03:58:aa:24:b5:fe:f3:
d0:52:26:40:d4:00:93:db:db:3e:8b:8f:5c:06:7d:
f8:70:b4:dd:3d:5d:b9:0f:19:40:8e:62:cb:2f:10:
df:ed:f8:4f:fb:04:1f:d8:a4:ba:7f:d4:1c:42:7e:
6d:53:af:0f:49:26:9f:83:5c:79:ff:4b:6c:46:a3:
74:37:cb:99:d8:bb:74:33:9d:31:62:eb:34:c6:99:
75:26:2b:8a:a3:2c:8c:a9:3f:e1:4b:de:eb:62:96:
9b:65:4c:83:ec:ef:08:31:77:67:f2:a3:ab:78:07:
4a:f9:2b:d6:c8:7e:5f:f1:2a:8a:04:98:f8:45:9b:
cf:2a:e8:34:9e:ff:0d:7e:fc:86:e9:c4:74:2b:2a:
17:5a:1e:d3:43:f8:fe:09:ad:2e:ba:de:0c:79:08:
6f:be:54:0c:44:8c:51:84:44:94:ee:10:71:a4:3c:
85:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3F:17:49:00:69:E6:9A:AD:82:1A:BE:11:EF:B9:EF:0D:49:82:00
X509v3 Authority Key Identifier:
keyid:DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ce:a8:e2:13:b5:78:d2:72:0c:ff:19:d6:50:65:cc:5b:71:
d4:58:f5:66:47:fa:f6:5e:9b:3d:d8:21:08:47:05:7d:5f:34:
cd:40:0c:74:07:40:8b:73:8a:07:52:6c:f2:6f:c4:7e:25:1d:
cc:ec:71:c0:d9:1c:40:e3:71:a0:e4:f7:b5:60:0b:84:85:0d:
03:6f:ae:f0:48:54:8b:54:16:b8:f8:90:8e:87:91:96:71:67:
e9:cf:87:dc:b7:c5:0a:ca:ec:ff:76:1e:01:f0:e8:01:b7:85:
a2:34:79:b3:53:77:19:46:ad:30:24:13:ab:8f:81:f2:ca:c3:
fc:a8:17:57:51:60:13:9c:d6:14:3c:78:4a:0a:2e:45:7a:dd:
ce:cb:53:2f:98:20:f6:f2:da:8b:68:8a:32:cb:84:cb:ab:a8:
fe:49:d5:2f:59:21:03:b8:6f:c8:b4:4d:4c:7d:cb:c9:0a:4d:
c9:7b:04:02:16:58:a0:c8:13:dc:32:e2:c7:a5:22:ca:93:7f:
85:42:14:90:d7:cf:a7:a6:61:06:d3:42:d2:1a:2e:ce:3c:5f:
a8:dd:15:93:5b:83:bd:7a:f8:99:40:3d:c9:a0:e0:5a:51:24:
83:ee:ed:4a:25:b8:9c:b2:6f:95:6d:c0:ec:ba:8d:51:3e:8a:
fd:98:16:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:12:45 2025 by rpki-client