Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
File: 3t-aZxvPF4nBtaw2MMdBvlYNraA.mft (raw, json)
Hash identifier: Z99e093BgbMiJtfBGy40RjjBcx3eS88FIs7UUqAL82k=
Subject key identifier: 4F:6D:41:DB:AE:FE:42:07:EC:C9:F6:A2:15:8B:BA:19:40:C4:89:22
Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Certificate issuer: /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Certificate serial: 0196B8C7AAE701F360427777A5496BBD34F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
Manifest number: 10A8
Signing time: Sat 10 May 2025 06:00:15 +0000
Manifest this update: Sat 10 May 2025 06:00:15 +0000
Manifest next update: Sun 11 May 2025 06:00:15 +0000
Files and hashes: 1: 3t-aZxvPF4nBtaw2MMdBvlYNraA.crl (hash: TjL8XNKa748mVVvTg99rpA5DmB5fDBqoFvIBbksmn34=)
2: RNkRhX3yK-TkHlh9YWWsykby_Dc.roa (hash: vp+4Wych+XwTPbr9Bjf9hawO/Jnhv86eVFw3KntPsww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:aa:e7:01:f3:60:42:77:77:a5:49:6b:bd:34:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Validity
Not Before: May 10 06:00:15 2025 GMT
Not After : May 11 06:00:15 2025 GMT
Subject: CN=4f6d41dbaefe4207ecc9f6a2158bba1940c48922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4d:75:1d:37:ec:52:cb:5e:e2:c4:59:d2:84:
b4:7f:36:96:5a:9c:90:bc:f1:80:a8:12:2a:a1:f4:
68:64:d5:79:36:01:1d:d1:f6:07:7c:20:61:6d:a2:
7f:f1:6c:2c:65:e2:de:29:a5:f7:8b:28:91:d9:9c:
ae:55:82:8f:b4:9b:6c:42:65:b0:73:07:e2:2f:06:
72:e3:8e:6d:d1:60:e9:e3:58:44:6b:8e:bc:dc:84:
0e:00:1c:05:f7:91:d3:87:3a:4a:b4:8c:9d:ad:ad:
4f:29:08:a4:a1:8a:7c:33:d2:0a:c6:14:c8:70:4f:
e7:55:0c:1d:7b:b6:89:27:a6:95:30:a6:99:48:3d:
c3:bf:04:64:2a:58:f7:2e:74:92:19:6e:b2:07:34:
de:85:35:b2:3d:b6:c4:d2:da:72:ff:58:45:aa:a4:
c3:c7:c4:e1:da:ab:c4:f6:76:73:01:15:89:86:7f:
72:5a:52:3f:0a:10:ad:22:da:d9:61:ca:d9:64:1f:
44:54:fe:bc:49:0c:7b:91:8a:5f:f8:83:89:7a:b1:
f2:2a:f4:97:50:ab:e0:47:fd:38:3a:03:f8:b7:32:
b4:ca:29:db:53:80:53:b7:cd:1b:0f:af:d4:00:1b:
f0:fb:3d:00:54:ff:4f:83:2a:72:02:8b:d1:39:cc:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6D:41:DB:AE:FE:42:07:EC:C9:F6:A2:15:8B:BA:19:40:C4:89:22
X509v3 Authority Key Identifier:
keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:38:ff:63:bf:91:42:58:5c:4f:9d:7d:e4:f0:d6:92:39:e3:
10:58:24:de:57:fd:0e:5c:c1:28:d2:08:e5:5a:38:81:ac:10:
c3:97:3d:b8:61:57:25:0c:fd:32:bc:63:a9:aa:a8:67:54:92:
35:4d:3f:94:84:69:bb:57:c5:5f:19:78:aa:a3:76:4f:c8:2c:
78:88:47:a1:dd:d3:89:52:47:cf:a7:c4:3b:41:e3:12:5c:0c:
60:db:f4:33:41:a5:08:5b:53:6c:b4:ab:c6:a6:2e:e4:1b:e4:
f8:d0:70:77:eb:44:2c:a6:64:b2:99:11:aa:1f:2c:55:fc:ad:
ac:9f:bd:8f:da:f9:f4:0f:27:66:6c:34:69:60:c2:5d:98:50:
9e:c7:bf:f8:38:c5:53:f5:d0:79:54:58:78:89:bf:af:bd:7e:
c8:a6:cf:6e:e2:f4:26:ba:f3:39:54:fb:52:45:0d:e1:e4:fa:
4a:ec:44:2a:1c:26:45:54:06:3f:ca:10:e0:0e:15:64:7d:e5:
a4:4f:d3:6c:15:22:f7:cc:1a:6c:9b:50:8e:18:65:46:84:b2:
e4:a7:c3:b0:20:3f:d3:df:73:4a:b4:98:6b:57:3f:19:9f:ca:
3d:c2:46:75:47:df:22:fb:37:06:93:46:70:9d:67:f7:31:3f:
69:91:09:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:21:17 2025 by rpki-client