Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
File: R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json)
Hash identifier: FyaSE6udRVsM5pSZqTSmvDkOhAR8zffpMYNO5/GfHj0=
Subject key identifier: E1:B1:8F:9B:44:9F:33:E5:EB:F7:CC:32:6C:74:11:06:F0:FC:E4:D0
Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442
Certificate serial: 0196A577E7FFBF4B0A2EF8047740268F9689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
Manifest number: 152C
Signing time: Tue 06 May 2025 12:00:20 +0000
Manifest this update: Tue 06 May 2025 12:00:20 +0000
Manifest next update: Wed 07 May 2025 12:00:20 +0000
Files and hashes: 1: Q3JTPjWcEREqifdCmIjbHLzzn7s.roa (hash: vaz4o+tAP641StTPMvLecOpfelAjJS1sX1oCmpWNCoo=)
2: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: hGWvMwcF1NM9v0nBFW8Kmf6vQ/WkEIPpbqouTRmVjpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:77:e7:ff:bf:4b:0a:2e:f8:04:77:40:26:8f:96:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442
Validity
Not Before: May 6 12:00:20 2025 GMT
Not After : May 7 12:00:20 2025 GMT
Subject: CN=e1b18f9b449f33e5ebf7cc326c741106f0fce4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:33:6c:c3:71:7c:1d:be:67:94:d5:70:5a:
6a:21:70:84:58:38:67:44:9b:0f:86:30:25:3a:c0:
d8:7a:a7:4a:ee:d5:7c:78:19:0f:d2:8c:13:7a:60:
21:e8:2e:8b:e0:6c:ed:1a:64:77:55:46:d0:3b:cb:
fc:6a:de:75:38:5a:55:5c:9a:ea:60:e4:83:e8:17:
28:10:35:42:08:53:96:3a:5c:ca:18:54:9c:41:9f:
2c:8e:74:4c:2c:52:57:96:52:46:dc:06:41:16:bb:
4b:57:ab:46:5c:ec:bc:a0:6a:0a:c7:bf:c2:37:a8:
50:24:84:b3:6d:9d:ea:39:00:50:1e:7f:fd:07:57:
d8:b0:91:5e:a3:29:56:a8:80:03:fb:f5:76:7e:3c:
66:1f:73:68:fa:33:7b:8a:56:61:09:a6:de:08:e5:
6c:2a:97:ee:61:1f:8a:08:86:78:d6:0d:97:ad:38:
85:e4:3d:46:43:88:2a:b0:76:5b:cd:d1:6f:15:15:
8c:a5:0d:e5:0c:26:cf:85:30:f9:d3:02:52:d3:b5:
58:17:fa:80:a5:20:ce:dc:6b:3d:a1:9f:11:7f:7c:
5a:ba:e5:e6:5c:73:45:26:5f:98:e8:af:bd:be:f4:
04:3a:18:82:66:a0:c5:66:c7:82:e7:b1:09:57:3e:
1e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B1:8F:9B:44:9F:33:E5:EB:F7:CC:32:6C:74:11:06:F0:FC:E4:D0
X509v3 Authority Key Identifier:
keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:33:00:74:bd:91:2e:e0:3f:93:9d:f7:ba:ac:37:5e:d4:e7:
14:52:ff:52:eb:87:f5:11:83:ec:76:65:0e:d4:04:dd:b3:dc:
ef:2f:e0:4a:00:0f:91:34:7c:c5:a4:8d:17:5e:cb:db:ec:a9:
83:99:13:4f:8a:82:a2:7e:9f:6a:37:ff:17:d1:7d:ea:fc:a2:
16:31:18:7c:9a:a3:c0:c5:3d:ee:5e:66:9e:e1:53:32:01:6d:
79:1f:77:17:27:21:13:cd:19:8e:5e:31:d4:40:dd:4b:f6:69:
0c:38:83:34:92:38:3c:2d:3f:33:ff:b2:c3:b0:cc:6a:25:e5:
74:a6:af:f1:83:41:d2:8e:f9:b3:82:6a:52:ce:8d:13:90:35:
df:48:85:cb:60:f3:54:32:19:b1:6c:c4:28:02:b9:0e:51:20:
5d:d8:f4:b3:62:58:2a:df:f2:ce:6e:a8:5a:2b:4b:ce:0c:f3:
20:57:0c:52:56:48:fe:87:e1:f8:c7:4a:f9:6c:63:29:e8:c6:
18:50:1d:dd:fa:73:ad:9d:87:51:3a:cd:84:4e:5e:d3:34:8f:
85:3f:3f:a7:de:b0:9c:02:cf:f4:1b:23:c6:a5:c6:48:6e:37:
e0:8c:29:f2:c9:10:dd:b1:94:fb:95:ea:c1:7a:76:a8:98:f1:
a6:0b:f7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:55:19 2025 by rpki-client