Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
File: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json)
Hash identifier: 64nVtptBB6IH4vGqL+ViuC7L09Kqsiz/d5CnWQBJQ7I=
Subject key identifier: 5C:94:F3:13:42:78:8B:22:95:54:DE:9F:51:79:47:E0:A3:E7:A8:A0
Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
Certificate issuer: /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Certificate serial: 0196B032E645DBE708CFF89DC6C94EF2AAD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 14:00:47 +0000
Manifest this update: Thu 08 May 2025 14:00:47 +0000
Manifest next update: Fri 09 May 2025 14:00:47 +0000
Files and hashes: 1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: jgVl4JoIzlTYakp0GfxzdHYLNs+GgVKDR9Px3ihOOMw=)
2: b5tCOGfZlXjj3Rp4LI2wyRIwTZc.roa (hash: Ux81ccFaPxD7MPa+kjPcqatGWLTvR5GEGbxi2D0f0BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:32:e6:45:db:e7:08:cf:f8:9d:c6:c9:4e:f2:aa:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Validity
Not Before: May 8 14:00:47 2025 GMT
Not After : May 9 14:00:47 2025 GMT
Subject: CN=5c94f31342788b229554de9f517947e0a3e7a8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:de:0a:6f:e6:69:18:4d:01:ef:23:28:9f:c0:
03:ed:29:1f:d5:04:0b:16:cb:25:d2:2e:ca:5d:10:
0d:3a:68:8c:32:e0:b2:82:7f:24:94:64:a7:bf:21:
81:85:ce:cd:60:a6:25:47:5c:ee:3b:13:1a:42:08:
d9:4a:e8:f7:af:93:4e:bb:d7:03:84:76:55:2e:a8:
35:20:bd:1c:cb:c5:40:15:7e:80:39:3b:d7:b3:6a:
a7:12:d1:67:09:eb:eb:30:1f:00:35:e8:86:5c:3f:
f6:68:a2:80:eb:fa:8d:c8:11:37:56:d8:43:6f:d1:
6d:b3:92:df:f7:6e:89:0d:11:3e:cf:21:bb:51:9f:
a4:3d:1c:b4:ab:cf:d8:5e:ff:bb:dd:ca:44:90:e3:
ab:ce:3e:8c:13:51:cf:8c:63:5d:b9:3c:85:d6:83:
42:22:53:a3:d4:54:57:6f:52:ba:79:f8:9f:10:d7:
62:02:73:ee:4a:cd:59:87:90:12:cf:22:4c:96:be:
0d:bc:6c:bc:ce:cd:6f:88:83:ff:0b:8d:0a:4f:f0:
8d:69:b5:98:3a:2f:71:cc:60:ee:c7:94:e5:d2:e8:
70:d5:a4:fa:7b:bb:a2:3f:71:5f:57:95:7c:d4:67:
39:ed:32:1e:c6:9f:df:2c:a0:09:18:ee:69:d8:4e:
8a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:94:F3:13:42:78:8B:22:95:54:DE:9F:51:79:47:E0:A3:E7:A8:A0
X509v3 Authority Key Identifier:
keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9e:a1:70:25:81:09:f3:ef:fa:d8:e0:bf:5f:b2:ec:ce:43:
0f:52:a6:d8:5a:d9:62:a2:4a:52:6a:7c:fa:2e:06:95:bc:ee:
9c:da:37:a1:ba:cf:1d:8a:81:00:aa:3f:81:56:92:75:4a:8f:
c5:aa:5a:aa:59:cc:62:a4:a3:30:16:ff:c9:6b:9e:4b:9e:af:
17:e1:e1:d9:e4:3a:83:a2:0c:46:9f:19:1c:f0:27:98:66:a7:
2f:01:8e:01:37:cb:02:6b:c2:69:0c:a6:2d:d4:c1:97:5a:03:
71:13:11:c2:6b:c9:cc:8d:c6:d8:fc:20:2c:3e:6f:3a:5f:17:
f2:58:e9:2c:ed:5e:b6:39:62:87:0a:66:dc:39:c9:e7:c0:37:
28:c6:db:a1:fb:4f:e1:2d:34:f3:56:fb:ad:b3:2b:c6:67:97:
ae:e7:b2:e6:28:a4:5b:a8:3c:2a:62:d2:ec:c8:19:90:db:24:
db:aa:2f:af:09:17:df:d3:21:79:6d:e3:07:b5:ca:38:49:b8:
76:29:ea:d1:bb:ea:8e:b9:05:51:54:91:b1:7c:eb:a9:bb:ff:
f3:56:1d:6c:cb:1a:29:da:30:51:bc:0f:64:60:d7:d6:26:43:
54:dc:96:9c:73:e7:39:5c:8b:c7:be:e8:26:6b:26:de:f1:78:
a3:32:2e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:25:36 2025 by rpki-client