Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
File: x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft (raw, json)
Hash identifier: SgvQUXU6DVJIAM21B2Snxaz7rwSMqfZvzg04fQIJpuo=
Subject key identifier: A8:14:7B:AA:F1:42:ED:B7:E6:43:42:72:F6:A7:E9:3F:57:FA:14:32
Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
Certificate issuer: /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Certificate serial: 0196A01AC070E36966BB869C383306558053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 11:00:29 +0000
Manifest this update: Mon 05 May 2025 11:00:29 +0000
Manifest next update: Tue 06 May 2025 11:00:29 +0000
Files and hashes: 1: G5zSLsnIB1Tf_3dQqRjF_q9OU44.roa (hash: 2jnkEsy8dLS8k5/gnwKVBaZUL+prmqB8W/32sROipKI=)
2: x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl (hash: ps80z8ZI2HFK23DWhEH8wi16guBLAs1sQo3yjUxubek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:c0:70:e3:69:66:bb:86:9c:38:33:06:55:80:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Validity
Not Before: May 5 11:00:29 2025 GMT
Not After : May 6 11:00:29 2025 GMT
Subject: CN=a8147baaf142edb7e6434272f6a7e93f57fa1432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:48:90:e2:3e:f2:62:4c:b4:41:2d:e8:51:
4d:b5:a8:6a:83:c7:38:33:23:17:07:0a:1a:79:04:
6d:8c:fb:23:2a:99:52:2e:4f:40:8e:03:48:dd:a5:
23:34:e5:34:7f:56:75:8e:13:f6:67:62:81:57:7a:
c7:c6:ef:95:dc:ae:19:ef:b7:48:0e:6b:72:da:fc:
66:c7:cd:f3:48:d7:91:0a:a9:67:61:a5:fb:22:c4:
9d:63:96:a9:0f:2f:3a:ec:a4:6f:bb:50:5a:7c:19:
51:77:6b:3c:87:8b:8d:d1:26:04:cd:e5:4f:68:99:
c4:7b:1e:cf:8a:14:fd:a4:c4:2b:fc:a0:21:f8:f2:
40:44:00:81:31:91:b3:d0:af:56:28:5c:91:fe:fc:
ec:6f:1b:ce:ff:6c:ef:36:39:02:03:92:3c:02:d4:
4b:f3:ba:bd:11:ad:35:d9:8c:f1:a4:01:ea:a4:f6:
8c:5f:ba:24:c1:94:73:e8:a9:c3:3c:4e:8b:71:4d:
86:bf:8c:35:27:58:a3:af:f8:c6:21:27:0d:14:3a:
db:86:f8:d6:78:5d:9e:96:9d:04:bb:c0:3a:d2:88:
4e:eb:42:87:9b:f7:94:2e:71:82:38:28:ce:a3:1c:
ea:a2:67:b7:bb:28:51:39:77:89:ad:d8:6e:23:20:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:14:7B:AA:F1:42:ED:B7:E6:43:42:72:F6:A7:E9:3F:57:FA:14:32
X509v3 Authority Key Identifier:
keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a9:2d:c0:71:88:9e:db:00:6e:37:dd:f8:80:42:ba:c6:fd:
c8:42:5a:d0:e7:12:f4:1a:2a:34:68:bc:6a:ad:12:c8:37:67:
fc:75:6d:3b:30:50:0c:14:f5:ca:73:2c:88:e5:10:58:3b:09:
76:64:64:3d:a7:54:04:a6:18:a9:b3:96:bf:14:0a:b8:7c:c6:
ea:74:af:6f:2e:5c:03:14:f0:d0:45:1c:5b:cc:45:8f:b7:55:
e5:fd:89:33:f6:19:55:6b:bf:63:52:38:5b:a4:6a:7a:de:7d:
f3:60:d2:a1:f1:57:16:a4:f8:d9:59:38:e7:23:c7:fa:d4:12:
20:8f:00:b2:ad:67:96:1a:83:45:d8:bf:4c:3a:a8:43:5c:a6:
74:98:f2:dd:97:f0:de:44:5a:bc:52:11:5b:d9:bd:3d:28:57:
8d:1e:5e:61:59:73:5f:6e:71:fa:a6:fe:c0:6d:e7:2d:8a:91:
d7:00:17:e6:5a:e0:5c:d3:44:2b:8f:ca:7a:61:8e:46:3a:e3:
d5:d0:96:db:f0:4f:07:2f:d9:69:24:f1:84:0a:e7:ff:f9:b0:
86:c6:14:cd:70:85:fc:16:c3:4d:69:15:4f:d5:af:c9:2f:3a:
9f:d9:29:df:67:8d:31:f2:83:c1:46:f1:10:53:bd:cd:fd:bf:
2d:f1:1c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:28:20 2025 by rpki-client