Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: L0w4gK2w9vxGD849yN9VjHFnkGcdnMSf00i1XFGJ2wU=
Subject key identifier: 2B:17:0D:55:6B:70:4C:67:29:80:DB:7E:96:84:AB:79:D4:E0:DD:4E
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 0196CB3BB7C67B4112E359570AA8014FA149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 141C
Signing time: Tue 13 May 2025 20:00:10 +0000
Manifest this update: Tue 13 May 2025 20:00:10 +0000
Manifest next update: Wed 14 May 2025 20:00:10 +0000
Files and hashes: 1: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: Rv/0YRW7gtNNxJ6D0kJujGm6IQVJLwXXQkX2xBKqgPs=)
2: EoONLCC0uBU4UnkK6hGEDKnLwOs.roa (hash: BvTXgf3VZmemwuiX/6PvTlFRYmGF/FW7bb7KGQyaCiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:3b:b7:c6:7b:41:12:e3:59:57:0a:a8:01:4f:a1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: May 13 20:00:10 2025 GMT
Not After : May 14 20:00:10 2025 GMT
Subject: CN=2b170d556b704c672980db7e9684ab79d4e0dd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:91:87:17:5e:29:95:f0:11:90:d3:08:70:
89:ae:0d:61:6e:18:b2:e6:67:bc:e6:12:02:e4:76:
18:c8:65:d7:f6:5b:18:e6:48:47:59:4e:4e:54:6b:
55:75:7b:db:32:8d:0b:4a:37:f0:b2:ab:d3:38:e3:
1b:76:51:6d:fe:bb:5a:0f:ce:bc:2e:73:aa:b5:b0:
3c:64:b7:df:55:8d:f2:5a:01:c0:85:28:6b:5c:bc:
45:51:e1:f6:5a:2b:83:87:9c:60:fe:3f:46:8c:12:
df:fe:ea:74:67:b3:cd:f8:42:25:f4:ff:45:10:87:
fa:9a:cc:98:ca:52:e6:57:b2:90:cf:c5:68:7f:1b:
37:8f:0d:03:67:c7:95:95:3a:bd:b1:75:f3:eb:4f:
15:eb:ea:a5:f2:8a:4e:de:8b:6f:be:ac:bf:94:8f:
7b:91:33:1f:40:ce:7f:e3:20:53:d8:11:3e:f2:a9:
d3:f2:a4:56:a3:ad:cb:55:a6:19:8d:c2:91:7b:9c:
9c:b0:30:84:31:57:05:78:fd:c1:a7:1a:85:17:d7:
3d:43:82:d1:be:d0:09:2f:03:7f:6c:6f:02:f6:e0:
94:09:41:f6:29:fa:10:90:6a:24:81:14:f9:c8:70:
a8:a6:ee:99:75:7e:4b:23:03:d9:ca:eb:66:3d:f6:
eb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:17:0D:55:6B:70:4C:67:29:80:DB:7E:96:84:AB:79:D4:E0:DD:4E
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:02:3d:6a:a9:ad:ac:07:53:84:2a:28:01:cd:3d:b8:26:14:
cf:25:c5:0e:d8:44:1d:6c:b7:98:3d:36:16:e3:a9:0b:e6:8f:
67:a7:9c:7e:03:01:80:a9:60:14:c4:8b:04:99:9c:d8:a6:26:
8b:f9:a6:8c:f1:bd:02:bc:68:c6:ef:3c:7a:1b:e0:52:3a:39:
1b:4a:ad:c9:84:27:99:b1:97:46:c9:ad:29:1b:6f:4c:dd:8c:
ab:c6:26:b3:ea:ae:39:cf:ad:a4:db:8d:48:49:b4:9d:36:cf:
90:75:df:bf:cd:67:07:a4:ba:49:d4:9c:19:45:e1:e8:e5:46:
cb:fa:c9:16:3c:d5:cd:e2:4f:86:19:38:b4:33:ce:30:95:13:
8d:0a:fd:eb:22:7e:53:4c:27:e2:02:5a:e6:9c:05:da:f7:ed:
16:e1:df:c0:a7:aa:da:c8:07:d7:d9:f9:9e:21:46:49:17:77:
6e:e9:ca:00:c5:ab:71:0a:11:60:cf:3c:fc:74:78:50:e4:d3:
ff:9a:a0:ad:ed:1c:f4:8f:ba:12:79:1e:e8:bb:de:74:57:b2:
01:5e:39:ab:be:33:f7:b7:c6:fc:b4:2b:79:0c:82:69:5d:d5:
76:ab:15:68:27:9d:f8:0f:29:c9:b8:a2:7f:d3:e2:42:02:07:
d0:2b:f4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:13:40 2025 by rpki-client