Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
File: 3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json)
Hash identifier: AMwCv4V8ZXny8qCnVewSCTRKttFvZ8EZwfyWEvqnxyY=
Subject key identifier: C2:75:17:01:AE:90:BD:9D:BF:AA:A8:1C:A2:A2:7E:F0:48:62:11:EE
Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Certificate issuer: /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Certificate serial: 01969CACB83241A5241825F0697C615D638B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
Manifest number: 1523
Signing time: Sun 04 May 2025 19:01:27 +0000
Manifest this update: Sun 04 May 2025 19:01:27 +0000
Manifest next update: Mon 05 May 2025 19:01:27 +0000
Files and hashes: 1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: B9bvoDg+vLAhL3iPFAhkE1r/vYSNSQJsPYG2I1OOYJ4=)
2: 4aMsThSQ8pto7QNh_kFB73sOXo8.roa (hash: HEBFusOcNgQfdZRF0U/he5dAzzkTri4ddTPSMK0+giU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ac:b8:32:41:a5:24:18:25:f0:69:7c:61:5d:63:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Validity
Not Before: May 4 19:01:27 2025 GMT
Not After : May 5 19:01:27 2025 GMT
Subject: CN=c2751701ae90bd9dbfaaa81ca2a27ef0486211ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:ac:00:4f:e2:a6:be:15:cc:cc:63:ba:7c:
09:99:86:57:4d:53:b8:c3:2a:c4:ba:31:1d:a2:47:
d2:6a:43:1f:f7:9c:d1:98:1d:e8:f4:1d:b5:98:8f:
02:fc:e6:61:59:58:64:e4:a0:6f:6e:ef:db:48:02:
81:f9:66:ff:99:18:5a:ed:86:1e:f7:dd:23:10:f5:
ec:ac:a6:05:0d:7e:94:3b:cb:9b:4a:ff:96:30:38:
31:ae:d7:1a:58:db:39:cc:c5:5c:0c:9c:18:9d:12:
69:41:53:7b:5f:ec:fb:ae:fb:f1:17:04:b7:78:1f:
33:fc:48:33:0f:1b:0c:9c:43:52:cd:04:d7:c4:7e:
4b:64:67:cb:a5:d6:8d:01:51:b5:ee:f5:94:ba:96:
6f:15:d2:f8:c7:c7:78:d8:4d:df:49:c5:95:e9:54:
09:8d:f7:58:c2:06:9d:89:8c:ef:c5:74:38:14:6a:
44:7a:85:11:6d:2d:83:12:70:73:e1:27:0d:e2:9b:
74:3b:c7:dd:77:37:f2:3e:46:4c:00:ae:30:aa:86:
4f:8f:d7:73:63:ae:31:b5:57:1f:ab:8d:14:e2:bf:
c7:9d:90:80:0f:51:a9:9b:33:6d:83:2e:36:a4:0e:
1e:5c:2d:e2:ab:50:46:ae:6d:bf:78:2a:84:fb:ec:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:75:17:01:AE:90:BD:9D:BF:AA:A8:1C:A2:A2:7E:F0:48:62:11:EE
X509v3 Authority Key Identifier:
keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:87:5e:0e:66:70:ec:d5:ea:96:44:74:38:5d:db:60:7d:51:
79:98:16:d7:06:a5:23:33:ea:97:dc:19:45:ba:67:4e:99:8b:
b3:6e:ce:07:a7:13:26:69:79:5b:94:e8:63:3b:52:74:0b:ea:
36:2b:12:26:6b:f0:4b:13:c8:f1:ba:15:fd:46:10:9c:ee:c5:
a5:60:33:d3:44:18:2a:08:75:43:20:c7:c9:d5:02:de:ec:0f:
2e:eb:c0:08:8b:0c:f1:ac:c5:5c:d1:91:e4:50:94:c6:61:0a:
d3:d6:4e:ee:4f:d8:fc:25:ed:0c:5a:19:b7:9e:0a:d6:41:ef:
ea:05:34:59:ab:37:f2:2f:99:aa:05:e9:e8:92:52:ff:75:61:
fe:32:d3:79:21:f6:55:e6:dc:a8:83:4e:da:0d:80:b1:4f:65:
ae:a2:f0:03:09:6a:04:9f:c3:e0:e4:cb:8b:f8:1c:38:5f:85:
9b:11:dc:64:6e:2d:1f:a8:66:b9:3a:bd:0f:eb:13:5c:a5:a5:
b0:f8:c4:bd:2b:9a:bb:ac:a8:c4:69:68:47:99:67:f9:8b:d5:
b6:cd:aa:0a:5a:44:8d:5f:0d:72:86:0e:00:f9:65:dd:e2:3a:
77:bd:b6:c8:48:13:50:ed:3e:b5:60:5a:8b:bb:21:bb:99:e6:
33:2e:4a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:39:24 2025 by rpki-client