Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
File: 3OVg8OyFDainwPjW84JRAtTeSs4.mft (raw, json)
Hash identifier: xIN3sgprD0CLrOf+vr8y9fg+mslCExvOKQElz2aKu1E=
Subject key identifier: C4:FA:91:17:0B:EC:7B:B1:6E:AC:EF:72:24:E1:30:42:F6:00:6F:B7
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Certificate issuer: /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial: 0196B9A486EF9555A0750A65FE2F6F24D9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 10:01:29 +0000
Manifest this update: Sat 10 May 2025 10:01:29 +0000
Manifest next update: Sun 11 May 2025 10:01:29 +0000
Files and hashes: 1: 3OVg8OyFDainwPjW84JRAtTeSs4.crl (hash: L0rHIM7Ajp1Ae/7883UCeOPVdCV8pmbZzcJsjLkWkGs=)
2: cvAMZ-azozJjAwqBJfc2rmmZkME.roa (hash: Gewk40CVQw5q21r2SfPnFc/pGMGpE0T4SZt3vyzVUaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:86:ef:95:55:a0:75:0a:65:fe:2f:6f:24:d9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Validity
Not Before: May 10 10:01:29 2025 GMT
Not After : May 11 10:01:29 2025 GMT
Subject: CN=c4fa91170bec7bb16eacef7224e13042f6006fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cb:fd:11:a3:a1:e1:ca:e5:75:36:13:d1:20:
04:c6:26:79:ac:34:11:3c:bb:f9:6c:34:00:b2:4c:
14:f8:a4:d4:a5:7c:19:3f:b5:da:af:1d:58:a6:36:
6c:03:64:fb:a4:93:20:04:23:77:eb:7a:e5:27:ed:
df:35:35:f0:07:05:5d:94:1d:ee:37:55:2c:2c:a4:
07:00:5d:21:6f:87:2f:dd:bd:21:d8:bc:1f:17:df:
5e:8c:8d:7e:20:16:83:3c:d6:44:f7:6c:cb:32:70:
4b:dc:e0:86:5b:e5:2c:f3:fb:41:43:87:6a:e3:27:
80:fd:b8:19:03:38:1c:be:c2:22:7c:75:f1:62:2d:
84:71:31:fa:db:55:47:17:3a:b2:10:4d:58:db:00:
e6:fe:66:f1:57:23:4c:63:55:1f:71:4e:75:1b:49:
c0:9c:1e:c1:d2:39:a2:c2:b9:6e:8c:43:a8:3b:4c:
67:c5:a9:0d:76:a2:c7:83:0f:66:49:9d:f9:c1:c5:
e4:68:d0:05:99:f6:2d:86:17:92:53:9d:56:45:7e:
9c:f4:a8:6a:1b:30:14:2a:3b:c2:5e:b5:1c:ea:52:
cb:94:c3:a7:b9:54:81:70:b9:d1:da:a7:5c:f6:49:
0c:79:a6:d7:56:58:c4:c6:2f:46:4c:9e:8b:ec:19:
08:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FA:91:17:0B:EC:7B:B1:6E:AC:EF:72:24:E1:30:42:F6:00:6F:B7
X509v3 Authority Key Identifier:
keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4c:6c:12:ad:1f:57:77:75:7b:b0:f8:16:4e:d6:16:6f:6b:
6d:54:e8:01:c7:ad:1a:ee:04:c0:84:c2:46:b7:2c:4b:82:fe:
eb:f4:fe:43:95:7d:36:e1:9c:11:66:56:ed:d1:6d:aa:d0:44:
99:3e:14:4a:8f:22:80:07:93:eb:52:41:92:53:a1:ec:12:f3:
1d:4d:43:64:b4:13:8f:63:49:e1:45:83:82:34:04:68:2e:bf:
60:5b:9c:fd:72:bb:00:2e:39:b4:eb:40:af:cd:b7:9d:00:5a:
eb:22:fb:1c:68:dc:c5:4b:d4:53:53:d4:17:b7:d2:1a:1b:6f:
97:8d:58:7c:82:3c:7f:db:ed:99:fd:d8:31:bc:65:5a:14:a4:
93:ca:d7:e3:ea:ff:e1:61:1c:b7:41:4d:56:f0:38:0a:69:28:
dc:e5:4b:fc:4f:ac:d2:8b:af:30:13:b8:0e:31:da:ab:99:46:
eb:2e:e8:b1:ff:d5:95:04:ab:00:fe:ad:fa:cd:d9:83:67:fb:
c8:87:15:5f:f5:e5:33:22:23:fb:46:f1:f6:cb:bf:96:3a:9a:
d0:f4:6b:53:02:24:f8:6b:b8:fa:5d:46:ac:82:fd:51:c0:ca:
cb:56:08:89:9f:a6:6c:cb:1f:f3:8b:a3:3d:41:b6:1b:9d:b1:
75:8d:12:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:41:01 2025 by rpki-client