Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
File: 3xT-bNqQya_oB1kNLVA3SnaijhM.mft (raw, json)
Hash identifier: Mi9UbQtTsDJ1Geui3bhLQsullLTf7/WxekNHf1cc8sg=
Subject key identifier: FB:B6:77:7F:88:03:12:AC:C5:71:1F:9E:A6:F1:36:01:79:4C:AA:25
Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Certificate serial: 0196C8724511657F5140D29F2B1EC7446C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
Manifest number: 1133
Signing time: Tue 13 May 2025 07:00:54 +0000
Manifest this update: Tue 13 May 2025 07:00:54 +0000
Manifest next update: Wed 14 May 2025 07:00:54 +0000
Files and hashes: 1: 3xT-bNqQya_oB1kNLVA3SnaijhM.crl (hash: hmLa/edX/FrZm9V3+weouibYM+VdLqdcYgJeg7PNk/0=)
2: Swt5oFMQEQM3RtDOFxZCp2VObOM.roa (hash: d7VQjqZCXdGvodDw1gYlaDWjc+rRxAbFcC4KKSSYHOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:72:45:11:65:7f:51:40:d2:9f:2b:1e:c7:44:6c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Validity
Not Before: May 13 07:00:54 2025 GMT
Not After : May 14 07:00:54 2025 GMT
Subject: CN=fbb6777f880312acc5711f9ea6f13601794caa25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ef:77:d5:34:c2:b7:ec:ee:7d:03:3f:b3:81:
06:15:50:4a:dd:11:0f:da:8f:ca:11:0c:da:23:e5:
db:41:ca:72:db:e1:4d:27:f3:83:50:82:d1:85:f3:
6a:e6:b7:c6:b6:28:97:d4:cb:a5:da:71:3e:0d:fa:
50:67:ea:a6:bb:24:2c:5f:46:ec:01:e7:a9:a4:6d:
49:c8:ac:70:dd:34:04:8e:e1:97:77:83:30:00:ed:
39:c3:d7:99:8f:56:28:54:b1:b7:a4:18:92:e4:d0:
8b:d9:cd:6f:07:a9:0c:eb:fb:20:90:3a:e1:f4:3f:
0e:43:e6:ea:3b:ba:d8:3a:12:96:92:40:99:1c:ab:
be:01:2f:bb:72:c2:3c:b3:b6:38:90:e0:58:34:2b:
6a:08:f4:9f:e0:fc:33:d4:88:aa:a0:28:a7:f1:fc:
ca:be:84:73:eb:30:34:20:75:88:ca:c6:e8:d8:b4:
6b:45:f7:18:3c:26:1a:9c:ae:f8:ac:3c:1c:64:2c:
50:87:2a:a8:21:19:e4:d4:95:0f:5a:30:5f:83:70:
df:91:5c:09:3f:b4:81:84:fc:ee:29:e4:7f:8c:98:
f8:9d:df:a2:7e:09:8b:5f:5c:90:ac:83:8b:fb:78:
8e:f7:2b:c2:a6:ad:ce:9d:6a:25:69:07:a9:82:e5:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B6:77:7F:88:03:12:AC:C5:71:1F:9E:A6:F1:36:01:79:4C:AA:25
X509v3 Authority Key Identifier:
keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:14:c8:fa:1f:b9:d5:41:0e:c7:4a:3e:99:95:dd:cd:c7:76:
31:62:ee:ff:d4:e1:cb:10:eb:67:88:a7:9f:ae:ae:01:c3:b1:
5e:d0:dd:b6:f9:72:46:00:05:76:59:a4:f5:65:3a:e5:b8:0b:
f5:2a:6f:78:7e:0b:d1:77:6c:89:dc:44:cd:a2:e3:02:86:b4:
0b:59:27:20:0f:f8:6a:8c:3a:98:e2:42:eb:e3:28:9a:f4:d7:
34:6b:c3:39:68:91:65:64:73:11:bc:5a:bd:0a:4e:dc:0f:d1:
c2:ae:11:51:59:58:29:f0:14:07:0c:49:78:51:23:0f:64:da:
34:26:5e:b1:b9:2e:54:73:83:ed:26:4b:ff:5f:57:88:2a:f3:
eb:df:4e:ea:db:f0:cd:aa:16:0f:c8:2f:97:7a:ba:1c:34:1e:
d9:e5:21:dc:ab:4f:69:7f:7e:ca:05:c3:39:14:0e:ec:a1:1f:
26:10:c4:34:21:36:cb:e2:9d:79:06:fe:49:f9:05:03:b8:ed:
39:a7:57:ae:02:7a:b1:eb:29:17:43:14:6d:46:70:73:27:bb:
4d:00:c7:4c:28:f5:cc:d0:00:fe:30:4b:6d:8f:3a:0a:4e:c8:
00:6d:01:e1:b1:dd:28:5f:ff:16:c1:ec:06:09:1f:5d:9c:22:
47:7a:f1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:05:52 2025 by rpki-client