Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
File: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft (raw, json)
Hash identifier: g+k99BLu4j+29k0we8YUuQWdnGJXNzy9HX1dCppAgzc=
Subject key identifier: C4:C5:BC:E1:D2:7A:E1:D8:95:AF:BD:C8:DF:CC:D3:1E:9C:13:3B:33
Authority key identifier: DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
Certificate issuer: /CN=de23f18c576d6fa609133533c0d0e38d7732c652
Certificate serial: 0196CB3C2E91BE37CCBA91CE5D76E9D3DCEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
Manifest number: 01E3
Signing time: Tue 13 May 2025 20:00:40 +0000
Manifest this update: Tue 13 May 2025 20:00:40 +0000
Manifest next update: Wed 14 May 2025 20:00:40 +0000
Files and hashes: 1: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl (hash: 25XXys/eOAm2GM399hxpzurH37ixPxHREB571RGlK8w=)
2: _uzKcHUnRqCblBfJ7LQOWwPDs9E.roa (hash: QtEg8CgvNKFjK8sDnq+KQm/gvMScP6wDUlBc5heZNlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:3c:2e:91:be:37:cc:ba:91:ce:5d:76:e9:d3:dc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de23f18c576d6fa609133533c0d0e38d7732c652
Validity
Not Before: May 13 20:00:40 2025 GMT
Not After : May 14 20:00:40 2025 GMT
Subject: CN=c4c5bce1d27ae1d895afbdc8dfccd31e9c133b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:3a:47:92:c7:25:da:c2:1b:7e:1d:57:83:
db:c8:37:e0:82:18:41:89:67:55:97:e6:89:9f:a6:
b2:42:46:dd:33:24:79:5b:71:e5:9c:38:9c:66:28:
a9:e3:e5:af:4e:70:99:67:0e:0d:48:fd:90:24:43:
ee:a1:29:81:89:90:6a:16:35:f9:37:03:b4:2d:64:
cb:ad:3f:86:90:27:ce:e1:95:e8:0c:95:fc:4a:65:
58:10:66:08:57:52:7a:21:cc:8d:05:98:2a:95:45:
a1:c2:b2:c4:b1:7a:07:f5:08:4c:38:c8:50:71:5a:
5c:26:b4:b4:07:7d:8c:3b:d1:38:68:0e:80:9d:9b:
f8:9a:0a:c1:29:da:c1:bf:ad:6b:93:72:87:a7:44:
eb:40:73:c0:1a:c5:9e:ce:dd:d9:c2:06:5c:4e:14:
08:94:b9:93:ad:83:23:36:5a:50:94:26:32:54:b0:
08:ac:10:14:37:fd:55:93:ee:2d:e2:a0:d1:ef:3b:
7a:d9:9c:bf:33:a0:c1:60:3c:88:05:42:40:8c:72:
d4:20:33:b6:78:39:b2:7f:96:75:3a:8b:c9:72:af:
34:38:5f:9e:88:9d:4a:f5:a2:a0:5b:06:bc:da:db:
d7:35:70:e5:67:ff:34:4d:3c:b5:9a:3a:85:56:31:
b1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C5:BC:E1:D2:7A:E1:D8:95:AF:BD:C8:DF:CC:D3:1E:9C:13:3B:33
X509v3 Authority Key Identifier:
keyid:DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:23:d3:43:c4:7a:fd:37:a0:0d:00:49:5c:7c:72:6c:77:70:
82:a1:3c:82:0d:8c:70:bd:d7:27:89:e0:96:59:e0:c3:0c:84:
ef:98:1d:0e:e5:65:5e:e6:19:bf:7c:7c:37:de:a9:4e:40:f9:
1d:bf:08:52:bf:50:5c:58:0b:e8:79:e7:81:2e:5e:42:07:95:
53:5f:7d:cb:5f:31:70:a1:6c:9b:86:5c:57:1b:ea:44:f2:57:
c1:20:5e:5e:18:2e:4b:85:bf:31:cb:57:78:9d:c9:16:c9:62:
73:e7:c9:41:87:ec:53:03:a0:5e:64:b7:81:b1:93:25:77:c3:
5c:21:51:62:9d:da:49:27:1e:84:42:35:99:eb:df:26:ef:79:
62:51:d7:bb:e1:cc:e8:00:94:98:c1:d1:e0:09:4c:29:c0:6f:
1d:08:15:74:37:6a:80:dc:e1:43:7e:79:a0:22:3b:23:c4:f5:
9f:2c:d7:6f:61:07:85:92:e2:35:0d:43:3f:fe:16:7e:ff:38:
f9:7e:31:78:d3:26:76:03:17:96:a0:13:76:ad:2c:61:d2:af:
52:7c:49:74:a9:93:ab:a3:a8:8a:b8:2e:44:f6:f5:6e:72:6f:
aa:f0:33:99:9d:32:6b:89:db:6d:cc:58:b2:2f:a5:94:e6:48:
02:81:18:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:42:19 2025 by rpki-client