Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: whtl2G56iwAibBVRc5lcwDpKo3Mp+OsJRuCpqa4G+d8=
Subject key identifier: 45:F4:2D:C1:1D:2F:98:8A:AF:A5:0D:59:84:72:5B:CB:58:89:6A:28
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 0196C0EF6FA6B812FC279C5462D1E81688F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 20:00:39 +0000
Manifest this update: Sun 11 May 2025 20:00:39 +0000
Manifest next update: Mon 12 May 2025 20:00:39 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: 5Z9YMHd3M+41AM0hvPVx1CvG9BfaQ5BCc0mknyPvuC8=)
2: TWCQBg2-t-jrjyzWp02-IpHykDE.roa (hash: OzxPmG/iv0ZxRaIlS2kwO8RCX9n3cTZki/wmozkxxLc=)
3: w-Jga3ncDiQpUhbU2MQ6dRKRInQ.roa (hash: 5XUytb4Y6hE0gSnX9zthe9SyxMsKZ/nIOoxPG8EDHcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:6f:a6:b8:12:fc:27:9c:54:62:d1:e8:16:88:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: May 11 20:00:39 2025 GMT
Not After : May 12 20:00:39 2025 GMT
Subject: CN=45f42dc11d2f988aafa50d5984725bcb58896a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c8:fd:95:d4:86:42:86:cb:55:b5:40:d2:87:
9f:e0:c8:f5:0e:9f:f4:04:0a:61:5e:83:7e:cc:ad:
e1:f0:26:e7:7b:a5:dd:ad:51:5e:0a:48:a8:b3:95:
82:95:57:96:d6:b4:2c:56:34:07:e4:89:7c:3d:12:
51:23:73:3c:73:fa:0b:b2:6d:9e:f4:ef:d9:9d:a1:
11:e0:ab:55:65:5b:50:22:75:bd:46:3d:5b:da:13:
8f:c9:60:99:22:40:ab:99:de:1b:e8:50:8c:44:b3:
c7:55:c9:1a:af:bc:df:5d:ff:20:11:ca:8b:b3:e3:
33:07:2b:b6:c0:f8:61:64:ed:06:cd:6d:da:b4:8d:
61:e3:0f:f7:30:cf:42:19:a3:84:25:05:1d:9c:ff:
6d:52:35:a8:54:06:51:db:75:5d:21:40:a7:f6:29:
87:f8:31:df:ff:f2:78:25:7b:2b:ac:73:bf:f0:78:
40:81:a4:68:0a:a9:95:ba:3d:6b:60:83:45:62:26:
df:fd:ed:fe:09:cf:22:96:5e:98:ea:14:0e:d7:f0:
e9:78:4a:85:40:99:56:fc:5c:83:95:ba:e3:0d:08:
23:8d:9c:a7:d0:b2:9c:06:24:f9:03:5e:09:09:1c:
35:76:50:1d:35:d7:41:b9:4a:34:6d:63:ef:c0:b3:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F4:2D:C1:1D:2F:98:8A:AF:A5:0D:59:84:72:5B:CB:58:89:6A:28
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2b:6f:2c:ac:cc:76:10:6d:09:43:1b:48:fd:18:7a:0d:1a:
3a:fd:a1:f7:d1:cc:3d:9e:4f:8c:22:60:99:c9:d7:82:12:75:
d7:b9:3c:c7:e0:7f:4e:27:a8:09:16:3b:1a:dc:8a:59:35:ee:
ae:63:be:3c:73:46:db:a9:82:54:47:ec:f1:2f:8d:80:a7:bd:
86:e4:ed:59:3f:76:4a:b1:22:f5:b5:51:ca:b2:b0:cc:cb:b7:
c5:17:06:e5:3f:73:9c:f3:4c:84:cf:31:76:95:6a:ae:dd:5d:
d7:06:a0:5e:30:eb:93:3e:91:ae:79:40:9b:b6:0b:bc:ef:6d:
d8:40:44:96:a7:8a:95:b4:92:1f:be:cc:ea:0a:90:d7:b7:ac:
64:e4:26:4e:92:80:fb:a8:42:c2:e4:c9:9c:4b:c3:5b:31:35:
d2:8d:7f:6f:4b:2a:c3:38:c6:b4:0a:5f:b0:da:60:61:89:16:
21:d6:5a:0b:af:da:f5:c4:76:df:d3:66:fc:85:b9:6d:11:df:
5a:e2:1b:90:96:36:d8:43:85:46:60:62:e3:50:6d:7c:5f:c8:
c2:bf:f5:ab:56:d6:91:99:1d:2c:66:f2:55:e1:98:25:52:07:
fd:c6:56:3b:b7:e9:05:a9:c8:24:cb:9f:81:3f:b1:c6:1a:7a:
7a:4d:c7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:09:27 2025 by rpki-client