Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: H3rE7Ljihk7QYNekrX/1Talsw1Day/iHZEjhK1geLmY=
Subject key identifier: 77:3E:BC:82:5E:19:C8:01:D4:CC:7C:09:B4:CD:FB:F4:2B:AC:0B:CB
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 0196ABE7F0DE2CA80296BEAEAA8EE2AB1ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 152B
Signing time: Wed 07 May 2025 18:00:26 +0000
Manifest this update: Wed 07 May 2025 18:00:26 +0000
Manifest next update: Thu 08 May 2025 18:00:26 +0000
Files and hashes: 1: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: +I48F5+nI6c1e0KyP97KTF0wgTOPIRZTUu5tk6l+1Ig=)
2: KW800OmJGIdT7uikc0QcQ975IG4.roa (hash: dwHKNqVSICACPiCia+yUDPbsR26gug+E9f0Pra0zV6s=)
3: cEC9bPBmfz9Z43qJKU1IUGSC0lI.roa (hash: 4mEdeYIHzDK/DCJ4cVdrdS7DkgcRn2OeioiYgUbofOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:e7:f0:de:2c:a8:02:96:be:ae:aa:8e:e2:ab:1e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: May 7 18:00:26 2025 GMT
Not After : May 8 18:00:26 2025 GMT
Subject: CN=773ebc825e19c801d4cc7c09b4cdfbf42bac0bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a5:e7:36:0d:65:7a:96:09:0c:9f:c1:20:59:
f7:d5:fd:a1:90:1f:0a:2d:91:15:b0:8a:b2:94:d2:
0d:88:ff:fa:64:6f:33:01:48:a1:d9:35:cf:03:41:
16:61:db:96:2f:d4:8f:ad:4f:eb:6f:80:04:d6:65:
93:4f:e5:bf:a5:f5:db:2b:8e:c8:37:93:ae:d1:35:
7e:05:f5:e9:8b:1c:cd:b4:21:99:75:2e:0e:a6:e0:
30:26:9a:5d:f9:17:d3:27:31:0f:68:e9:f2:64:1d:
b8:5e:8c:c7:46:c5:2d:b8:18:11:f0:b2:cf:75:c5:
18:c3:e0:25:e1:21:93:44:8f:5e:38:a6:c9:d9:54:
f2:f5:a1:c1:4c:d2:09:14:35:ec:b9:c2:90:0b:bb:
d8:e0:02:9a:87:82:08:4d:09:46:49:e1:24:57:92:
60:13:01:5d:f3:bd:83:03:aa:64:23:d6:7b:96:65:
fb:f8:84:bc:ad:15:9a:0b:8e:95:cb:44:ce:fc:48:
4b:70:91:9b:d1:a0:a7:a3:60:4e:18:54:b2:b7:7f:
97:ed:75:1f:8c:b4:f6:8d:a3:7a:7f:09:5c:c3:77:
bf:c9:83:7a:d3:ed:9d:e8:bf:bc:1c:c4:8b:a0:5a:
81:44:4d:87:5e:8a:c1:1e:99:d4:71:a1:d7:28:6f:
c1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3E:BC:82:5E:19:C8:01:D4:CC:7C:09:B4:CD:FB:F4:2B:AC:0B:CB
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b7:ac:d3:e4:29:0d:81:ab:46:bd:e7:88:b4:da:ee:4e:e2:
23:63:9d:c4:e9:92:65:b8:09:ee:8f:dc:0f:b4:37:82:1f:05:
e1:d2:1b:7b:7f:30:89:24:2a:76:8d:82:75:5f:03:af:61:81:
6a:d5:71:ea:17:03:b1:4a:65:87:c0:4e:33:fc:a8:90:96:ba:
89:b8:28:07:d6:e5:2c:14:34:bd:1c:25:fd:7e:63:85:48:bd:
58:58:3b:2e:d7:39:09:11:c3:86:64:f2:49:70:77:d3:d1:63:
49:63:65:61:6e:46:f7:e8:49:0e:71:50:d7:d7:e8:cf:88:59:
ad:9c:c0:56:5a:fd:88:a8:3a:14:c2:f2:23:11:79:5c:47:e8:
d5:0d:94:79:90:d9:43:df:65:bf:54:6b:98:3b:21:96:b4:86:
8d:9d:25:07:c4:8a:f6:b9:21:ab:86:c1:50:94:6b:9c:b4:6e:
57:1f:d2:d8:32:2a:a9:9e:b7:b1:17:75:f0:1b:9f:91:ac:7a:
35:cd:24:e1:86:4a:3d:77:f8:ae:da:29:5c:39:fc:49:56:90:
01:56:c9:dc:e2:82:22:d5:42:58:45:97:8e:9a:f7:07:cc:8d:
aa:f7:80:92:53:d5:a4:2c:ea:a2:3e:e4:b8:1c:18:d2:3a:67:
52:15:90:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:34:45 2025 by rpki-client