Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
File: 3OSkxIQPyaX9IUphmqiHtbdiS_U.mft (raw, json)
Hash identifier: qflyQZ0pzTTKs2BAbk1tuSpJTdxGTmHMW6OU7kedzhg=
Subject key identifier: 3F:68:C7:D5:07:E8:A2:E2:BF:1F:D7:32:80:89:95:D1:50:FB:27:A2
Authority key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
Certificate issuer: /CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Certificate serial: 01969FACC49F3F6EA2CF8B5835511DB6F6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 09:00:21 +0000
Manifest this update: Mon 05 May 2025 09:00:21 +0000
Manifest next update: Tue 06 May 2025 09:00:21 +0000
Files and hashes: 1: 3OSkxIQPyaX9IUphmqiHtbdiS_U.crl (hash: E8ZdaTVMrNxmjTm6uKbTb2MdrNbIHt+JuFl5KLUvVxc=)
2: SlznhF9EiZYGKKClhlcBqpQpcMg.roa (hash: Jy5c7P7JMODRFjsTTWh43LUlPZcqwSCq10CJL1zOqOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:c4:9f:3f:6e:a2:cf:8b:58:35:51:1d:b6:f6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Validity
Not Before: May 5 09:00:21 2025 GMT
Not After : May 6 09:00:21 2025 GMT
Subject: CN=3f68c7d507e8a2e2bf1fd732808995d150fb27a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8a:54:03:54:b2:81:8a:6d:1a:aa:29:95:5b:
07:71:6c:f7:6e:94:0c:28:c6:ba:e2:94:e8:ef:d7:
07:aa:1a:5b:1b:be:f5:3b:c7:6a:80:b1:7e:07:1c:
28:a5:25:63:4b:e2:71:5b:41:69:72:56:7c:9c:36:
8c:4e:90:16:3a:b8:17:09:d7:82:68:c0:9e:52:4a:
42:05:1d:42:4e:71:9f:8c:11:09:ed:e6:8f:27:4d:
1a:c8:67:39:1e:3a:c3:49:6a:30:b8:33:aa:00:70:
5f:a9:74:ff:46:ca:63:1a:bb:d9:8b:9c:ea:25:02:
3a:19:53:bd:a7:eb:4b:02:95:7f:9b:42:eb:86:4e:
d2:5d:e9:62:62:94:c6:15:4d:65:a7:38:cc:70:3f:
a8:3d:c1:e3:9a:d3:79:95:be:dc:fe:30:75:37:20:
00:4a:9e:ce:e2:70:d6:e9:c5:b6:eb:32:fb:bb:11:
66:65:fc:83:7c:fb:72:c2:e3:7b:8a:64:be:f2:84:
74:bd:9e:6e:fe:12:ad:e8:53:d8:4e:ee:a8:1c:61:
1d:c5:e0:e8:11:dc:0d:71:33:32:2d:e3:75:13:51:
f0:77:c8:d4:cc:34:5b:76:17:e1:07:91:43:7e:17:
ae:6e:c2:fa:70:c1:80:00:b9:41:06:5b:24:cb:94:
a8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:68:C7:D5:07:E8:A2:E2:BF:1F:D7:32:80:89:95:D1:50:FB:27:A2
X509v3 Authority Key Identifier:
keyid:DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:72:03:fb:9e:fd:16:f9:cf:d1:90:68:bf:57:14:b7:db:1e:
04:86:f4:a7:53:17:d4:0d:75:c0:62:ca:f9:3e:47:4d:18:2f:
cb:10:fc:1d:37:ee:36:ab:0b:9e:ad:96:1d:72:e3:42:ed:f0:
35:20:f1:77:ba:62:d8:91:ab:50:cb:de:c9:1d:8b:8e:b0:9e:
bc:8a:2e:4a:ce:fb:94:a3:58:f2:c2:61:32:35:eb:01:2f:58:
4c:23:a1:b1:1a:00:d5:c8:18:08:cd:fd:e2:66:e8:52:8a:5b:
71:76:fb:ad:e1:5c:f4:d6:be:e0:a9:08:95:af:61:bf:0d:fe:
93:2b:ef:2e:e2:69:3c:f9:bd:4a:0c:aa:e9:ac:d5:6a:fc:29:
f0:3e:de:1d:a1:9f:9b:c5:ac:97:f9:e5:70:8a:0c:e9:63:73:
cc:bf:ec:f5:c0:a7:4d:4d:6f:9a:d7:9b:bf:aa:16:9c:e1:13:
68:65:d5:e1:a6:21:da:f0:4f:6b:79:b3:ed:ea:d2:25:d7:be:
07:51:b0:79:a2:b5:24:38:51:32:36:fc:06:2e:f2:08:74:88:
c8:a5:46:f0:da:a2:a7:e8:28:93:b0:c2:cd:a6:aa:ea:e8:ce:
71:09:39:dc:c0:99:24:b0:02:0d:d0:2b:d7:ff:20:eb:bb:ee:
8c:52:2d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:43:09 2025 by rpki-client