Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File: 3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier: /Zz53NAztOCyEhBCYtYf07/pEe9CcAmx8q5YkS90D1s=
Subject key identifier: FB:85:29:1C:C9:A7:F2:B3:0A:C8:1F:4A:D4:19:58:B1:9D:E0:1E:80
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial: 0196C15D66FBB1DC6604E5BE984B8E7D0990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number: 05AE
Signing time: Sun 11 May 2025 22:00:45 +0000
Manifest this update: Sun 11 May 2025 22:00:45 +0000
Manifest next update: Mon 12 May 2025 22:00:45 +0000
Files and hashes: 1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: DTcB6gU41GZFra9X37q43UuiO484iawc3sJuHUySLFI=)
2: HrIwTwMD6cd99R3d7bEiTOryXZg.roa (hash: 1wrHqn0lkUk+GnZl+JBgqFqtnLiVA3gNpwduqpO2T9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:66:fb:b1:dc:66:04:e5:be:98:4b:8e:7d:09:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
Validity
Not Before: May 11 22:00:45 2025 GMT
Not After : May 12 22:00:45 2025 GMT
Subject: CN=fb85291cc9a7f2b30ac81f4ad41958b19de01e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:10:5b:bb:31:17:8b:08:56:e9:f3:38:c1:
5d:08:83:43:22:c4:37:f6:5c:d4:eb:db:a6:ad:6e:
94:53:55:fe:28:45:9b:d2:96:1c:b3:a7:9b:f4:1b:
ff:97:01:83:97:75:a7:5a:96:cd:df:54:77:25:97:
a4:16:71:b0:bc:e7:85:91:46:39:e4:65:70:ef:1f:
7c:d9:13:c4:e6:77:3d:ce:7d:a9:3e:b3:82:29:1e:
ec:cb:fb:2f:cc:e3:66:89:f5:7f:0b:75:83:a7:f4:
e6:f7:8f:7b:15:64:03:55:98:ca:c0:33:8f:c8:ad:
b0:55:88:1f:7c:aa:12:fd:a3:1d:9a:fe:e1:d2:2c:
03:73:ed:ee:78:6d:a6:47:b8:66:c9:0a:48:98:58:
57:3c:da:55:80:0d:1b:00:38:84:a1:0a:42:cb:c8:
f9:02:8b:c6:be:d5:77:94:0d:42:d3:99:c1:cf:1f:
66:00:f2:b3:2a:96:75:dd:5a:0d:71:c2:5e:b8:25:
6d:67:db:85:ad:75:40:f9:13:d5:0f:c5:0c:46:f7:
67:f5:d4:9c:a0:0c:a5:a8:9e:b3:5b:05:49:80:4c:
17:6f:df:15:f3:9b:73:d3:df:65:23:cc:6b:66:00:
cd:1d:9e:db:21:84:43:08:90:e0:75:47:55:bd:d9:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:85:29:1C:C9:A7:F2:B3:0A:C8:1F:4A:D4:19:58:B1:9D:E0:1E:80
X509v3 Authority Key Identifier:
keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c6:f3:06:69:ff:15:94:81:16:02:0c:7e:3c:2e:9a:e7:a4:
55:81:c0:d8:32:3d:84:10:fc:6f:34:7b:87:fc:b4:dc:aa:21:
a6:4d:17:67:bd:80:db:22:9b:93:9b:0b:e6:ea:76:a4:af:7d:
b4:b6:7f:c1:b2:d8:6d:52:7d:07:93:15:08:4d:db:ba:c9:40:
85:ae:b3:ea:37:8b:7d:a5:30:89:a2:8f:07:b6:15:7f:90:00:
32:97:93:66:1f:be:6c:ec:c9:67:fb:95:9e:c3:37:a0:4a:ec:
03:82:14:6b:c2:9b:36:34:fe:da:d6:4a:99:fd:7a:5c:af:81:
37:51:7e:39:db:8a:f4:e3:04:c1:25:bf:92:58:e5:e2:cc:da:
2a:d7:00:be:17:64:12:75:8e:b5:1f:e1:29:8e:a9:38:17:ee:
75:4c:f2:43:32:1b:d8:57:2e:a7:12:ee:50:57:b9:d3:6e:4b:
e7:ef:c3:2f:54:b6:db:4f:f1:40:b5:82:3b:f5:89:bb:79:d7:
2e:7a:a4:d1:8f:26:f3:fa:b7:28:a1:ee:c5:32:2f:4b:4f:00:
1c:7e:5c:d4:ad:98:e8:7b:42:11:9f:0a:0b:90:76:ad:18:05:
b8:eb:c1:85:f8:64:ed:cb:13:a7:fc:83:16:ec:94:78:f2:0b:
05:3e:a3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:54:50 2025 by rpki-client