Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: iIYtFkzFK/LcbZMu4O+FHzFVVnKhu2/0nBssn6IwplQ=
Subject key identifier: 1A:DC:47:94:EC:F9:D1:9E:CE:EB:FA:78:12:F0:CD:D6:AB:9D:73:12
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 0196A6F8EA770E2CEB69BF3B178F22B3AF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 14BA
Signing time: Tue 06 May 2025 19:00:52 +0000
Manifest this update: Tue 06 May 2025 19:00:52 +0000
Manifest next update: Wed 07 May 2025 19:00:52 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: k3+vHSZMpPqzdPEPpyFjSQ7h16NeydYwFw2wMfsXjh0=)
2: QYQzorGK1cakLmK4R7aZ_z5BtRk.roa (hash: K/JfnEYnWlRvZUne2cydti381OQHnxSabuUVM9ge064=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:f8:ea:77:0e:2c:eb:69:bf:3b:17:8f:22:b3:af:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: May 6 19:00:52 2025 GMT
Not After : May 7 19:00:52 2025 GMT
Subject: CN=1adc4794ecf9d19eceebfa7812f0cdd6ab9d7312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f2:f5:8b:27:46:ce:a5:cf:bc:af:da:29:85:
99:5c:a0:20:50:e3:18:db:d9:6c:41:2e:c7:28:3a:
9d:27:d8:23:c1:d7:ca:ff:2e:53:a3:d0:50:99:75:
41:fa:b5:1f:80:b1:44:76:07:79:b6:af:e8:af:38:
31:e0:f1:44:a7:db:8d:b2:ad:3c:31:a3:d4:d7:db:
2b:dd:db:e8:89:d5:a2:6c:04:0e:13:92:24:bc:17:
8f:df:b7:21:d5:05:b8:d8:be:ee:5f:ee:9a:64:86:
98:1b:13:58:d9:58:a3:13:5e:19:cd:28:66:20:ec:
3a:39:9d:c3:6f:8d:bf:17:bc:f6:96:81:98:09:25:
19:d4:af:28:1e:a4:4c:5b:1b:ec:fa:7f:db:82:70:
54:b2:df:4e:ad:8e:31:7f:72:8a:51:e4:a2:74:13:
4e:d9:23:1f:c0:63:2b:df:a3:c7:bb:35:a3:15:de:
bc:11:37:11:78:5d:5e:ca:4b:85:78:3a:0f:8b:07:
c3:66:64:67:ab:1e:24:87:aa:00:3f:07:9b:90:e8:
62:ed:18:79:5e:5b:21:1e:e2:53:dc:b6:59:c0:25:
be:5b:7e:66:8c:5c:1c:25:26:4d:f5:99:c1:ea:72:
28:b6:c3:36:9a:83:d0:f5:a9:5f:93:f5:b1:2a:48:
d7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DC:47:94:EC:F9:D1:9E:CE:EB:FA:78:12:F0:CD:D6:AB:9D:73:12
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:01:bf:dc:4a:5d:1a:24:5d:5c:e9:cc:61:92:ee:ab:93:ab:
91:98:c7:21:bc:9b:dc:94:1b:13:24:8b:42:a7:c3:cf:98:a6:
e9:f5:52:cf:cc:e2:79:6a:e0:25:d7:00:b4:74:59:1a:59:f0:
a6:ab:d8:7a:3d:12:7b:11:28:dd:2f:53:4a:aa:3b:f8:cb:0c:
35:8f:1d:25:a1:5a:ae:17:2e:c2:89:3e:89:f0:26:21:22:a1:
c8:ef:fb:63:6a:4c:f8:7c:36:5e:99:ea:1b:74:8b:06:42:5b:
9e:82:60:0a:92:a2:07:b5:7d:b8:29:15:e5:ed:d9:b9:a7:01:
a1:35:f9:e4:09:3e:f5:b7:10:3a:16:4b:01:d8:4b:8b:c0:cf:
a1:3b:fc:53:aa:d9:ba:78:6a:60:8b:d8:a1:fe:40:48:3e:17:
ff:b4:b5:00:14:b0:e4:9a:19:ba:cf:62:c7:39:75:45:5f:ec:
92:00:6c:41:63:86:bb:c8:85:ea:c1:21:dc:39:dc:a0:14:84:
83:ad:11:78:f4:eb:e2:b5:9c:2f:8e:72:14:a2:44:32:27:e3:
9c:1f:49:bf:5c:e2:2a:8a:3d:85:3c:48:f3:ed:c4:79:69:d9:
fb:c1:1a:cc:29:09:78:ea:5c:43:96:17:5a:0b:d5:b7:6c:30:
3c:72:b6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:15:10 2025 by rpki-client