Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
File: 3erZGbhaEwUdAgi34o3cyzmLFNY.mft (raw, json)
Hash identifier: ZecOUEzWHQhEQV2F1J7dd/SpXK4Izesjc/BD0vnyojg=
Subject key identifier: BC:28:B1:26:E2:48:06:E7:EC:D8:CB:2D:87:D8:CC:B8:3B:31:16:19
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial: 0196AD315A9D7B8D4283836AF43D39E0DAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
Manifest number: 1530
Signing time: Thu 08 May 2025 00:00:14 +0000
Manifest this update: Thu 08 May 2025 00:00:14 +0000
Manifest next update: Fri 09 May 2025 00:00:14 +0000
Files and hashes: 1: 3erZGbhaEwUdAgi34o3cyzmLFNY.crl (hash: DRNu/vPuI3prFN02cux1+RwoEPk38pwCI2Vw+O64VC8=)
2: gyBGqWNKS8K0vTNBAA3GKNL77Vo.roa (hash: BXXbMCiaPDwWpKluJbMJNiQFpxOCWm/ZXx0AVN6V8Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:31:5a:9d:7b:8d:42:83:83:6a:f4:3d:39:e0:da:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Validity
Not Before: May 8 00:00:14 2025 GMT
Not After : May 9 00:00:14 2025 GMT
Subject: CN=bc28b126e24806e7ecd8cb2d87d8ccb83b311619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:d2:3a:d4:2a:11:35:c1:3d:df:8d:7a:79:
72:79:2a:65:e1:c4:25:0b:ad:17:ee:45:d9:91:6a:
b2:29:e2:36:ef:3f:7e:36:96:3d:39:8e:90:04:bd:
6e:20:0b:0d:6e:97:6f:3d:63:22:ab:d6:d3:6f:1c:
2d:94:80:70:3b:68:20:82:f9:45:28:ae:4d:3e:8f:
c1:ec:1c:9b:98:b9:84:d5:03:bc:d5:76:37:bf:a2:
90:0f:8d:20:0d:55:d2:9c:72:73:81:ee:60:e7:c6:
cb:94:e6:d9:a8:ac:50:09:87:48:2d:8a:b9:d8:3e:
b9:4d:1c:b7:66:28:ae:1d:0e:ea:5d:03:75:39:13:
08:98:5a:fe:3f:77:cc:f7:2e:c1:8c:e2:4e:4e:fc:
40:d8:2b:99:de:e3:18:88:5c:bc:c6:59:67:37:60:
bd:35:15:8b:6e:4e:b7:63:29:42:02:77:9b:e6:59:
6e:9c:26:43:2a:15:d3:11:e3:4e:36:6d:ae:29:34:
6a:e0:90:6d:ff:a9:45:a3:c2:23:a5:5b:80:2e:a5:
a1:3a:00:3a:19:cc:3e:28:d3:ff:d4:52:e8:b0:59:
32:ff:42:be:de:34:95:1f:61:db:b4:9b:99:c7:dc:
7b:77:fe:72:bf:10:9a:2e:b5:6e:ec:0a:45:52:47:
d0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:28:B1:26:E2:48:06:E7:EC:D8:CB:2D:87:D8:CC:B8:3B:31:16:19
X509v3 Authority Key Identifier:
keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8c:c8:47:48:ab:de:3b:b2:3d:7e:fb:bf:ab:eb:f4:4a:6b:
f8:a7:c4:6c:44:d7:bc:44:c8:ee:77:76:ae:51:b2:fc:ed:dd:
49:34:60:78:81:86:e5:eb:3f:05:d9:26:5e:fa:df:21:56:33:
09:bc:88:29:56:29:74:11:82:d8:ad:3e:a0:30:d6:f3:b0:31:
fb:bd:3c:10:2b:3e:cf:dc:d0:9c:e0:dd:e7:d3:eb:80:20:c9:
f9:19:b3:ea:a5:93:c4:e6:08:59:e1:8c:31:9e:4b:b1:3e:05:
b6:9c:ca:51:66:fa:2f:db:78:f5:36:d7:8c:bb:d7:90:2b:05:
60:bf:6b:ca:0e:dc:e4:83:14:a9:15:39:ad:93:cd:70:7c:4e:
81:f2:23:cd:54:25:8d:08:70:4f:b4:6b:67:d6:44:6a:25:fa:
a8:9a:e1:f2:6d:07:69:74:e3:24:0b:24:34:82:f4:df:16:6f:
0e:1d:7c:73:61:15:ce:0c:b7:bb:0e:c8:ce:8d:b9:ba:9a:af:
be:0f:46:7a:8c:d9:d9:cb:2a:2b:2d:6f:d2:fc:59:24:79:a2:
4e:5b:30:4e:f9:c8:47:0f:86:28:03:79:15:c3:bd:4b:e6:9d:
d4:78:36:59:6b:aa:25:29:bb:70:55:ab:e7:4b:f0:b4:f0:22:
a0:bc:38:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:57:33 2025 by rpki-client