
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
File: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft (raw, json)
Hash identifier: 69uXnOHPXbUHRPfgxUrFGzEDeu2TnbXjyzFkK124Wk8=
Subject key identifier: B7:B8:8F:B7:B9:E5:53:4E:3F:EB:2E:0D:F8:2A:0D:D6:05:53:30:4A
Authority key identifier: DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
Certificate issuer: /CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Certificate serial: 0196C1CB28F93635A72548E6A1913DB1C744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
Manifest number: 0DBD
Signing time: Mon 12 May 2025 00:00:39 +0000
Manifest this update: Mon 12 May 2025 00:00:39 +0000
Manifest next update: Tue 13 May 2025 00:00:39 +0000
Files and hashes: 1: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl (hash: s9Mcvk3dasrXDpWKgYHJZB/jQlXMQbHpbXhcCvKZL6w=)
2: xEogw3XOMF8942N9C953fQ9p_WQ.roa (hash: gm/zrEw7lZ+SPbWVu4mrs06eSMAYkDfSw1DjLnUzlh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:28:f9:36:35:a7:25:48:e6:a1:91:3d:b1:c7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Validity
Not Before: May 12 00:00:39 2025 GMT
Not After : May 13 00:00:39 2025 GMT
Subject: CN=b7b88fb7b9e5534e3feb2e0df82a0dd60553304a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:ca:b4:86:f3:91:70:23:12:ae:96:c9:28:
7e:7d:83:d9:b7:97:7b:a9:15:09:35:fb:6d:f4:5f:
da:2e:48:3e:41:ad:3b:34:02:d3:d0:89:57:49:fa:
96:82:0b:fe:98:2d:8e:e9:c5:b1:05:62:70:c9:2b:
3f:16:83:3b:c4:c7:00:0d:7f:b2:ca:9e:8e:c0:39:
ce:69:c6:5d:15:01:69:ea:fe:c1:88:c4:2b:a6:7a:
28:6e:11:4c:80:a4:e0:75:1d:c5:e0:b5:a0:1b:0c:
57:0c:31:81:07:b3:e9:b1:be:93:3d:9a:c2:bc:17:
c9:09:be:c3:46:22:db:a1:70:1f:e9:5c:4d:9a:c6:
b6:44:6c:0f:31:2b:6d:a1:fa:0c:df:11:f3:29:1b:
dd:3f:7f:0c:67:cc:2d:80:8f:3e:88:c3:e2:92:fa:
d5:5e:e2:29:d8:ee:ed:29:fb:4a:91:d7:57:3f:5d:
d5:5f:89:98:a8:7b:0c:c5:da:34:86:f1:d1:b6:16:
51:7b:64:be:7a:ee:cd:f1:6a:c5:3b:70:c5:5d:00:
b2:47:a6:7d:f3:30:06:0d:a8:e7:19:85:1e:98:c9:
e5:c3:75:8a:d7:b5:3f:ff:a0:92:89:b0:b0:a0:f9:
f1:16:53:ae:41:e7:8b:92:eb:54:ba:52:4b:03:7b:
e1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B8:8F:B7:B9:E5:53:4E:3F:EB:2E:0D:F8:2A:0D:D6:05:53:30:4A
X509v3 Authority Key Identifier:
keyid:DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:53:ad:e5:fa:40:6a:dc:4e:ca:ba:24:e5:da:50:26:a1:fd:
7e:ff:87:72:93:ab:a4:93:57:b7:87:75:ae:94:46:8f:10:c9:
2c:0d:5c:b5:17:20:3d:b7:93:eb:47:b0:6f:49:fa:c1:06:14:
18:70:19:63:96:e6:55:86:38:70:b9:4c:27:23:e8:06:47:a0:
d3:ec:9a:43:8b:5c:50:c8:c3:1d:58:95:70:68:52:ec:64:bd:
ee:8c:67:55:aa:2e:03:d6:2b:e2:de:69:2e:d3:52:48:ed:ff:
67:5c:ec:31:d4:5f:e9:38:48:8d:4b:e9:85:0c:d8:99:09:41:
82:55:d4:8c:89:fb:7c:e6:87:ff:84:8a:39:ba:6c:bf:af:0f:
81:d7:b6:40:36:f8:9b:9c:82:c2:39:db:8a:18:9b:ff:4a:fd:
05:f2:6b:84:54:42:38:98:46:64:a3:d6:ca:54:e9:82:20:b4:
81:d5:62:40:bf:58:bd:ef:32:b6:32:cb:80:03:0d:6e:1c:cd:
da:d0:ec:ac:d6:58:81:e9:4c:76:6e:45:df:2d:86:3a:2b:07:
5f:d6:e5:34:fc:46:31:17:75:a5:57:63:e0:80:31:46:4f:cd:
2b:60:5b:48:ca:8e:a0:49:d5:78:dd:0d:6d:2e:62:69:27:8f:
26:8f:e6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:24:35 2025 by rpki-client