Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: rsLQQBNETUgU0QR3N6b47/kKq8TDe3c8U9N6fBnoYNk=
Subject key identifier: 36:49:18:C5:35:AA:6B:E9:93:9C:77:B2:80:1B:77:3A:F0:E2:F8:51
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 0196BCA47DFB98ED7517965D08EA027993B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 153C
Signing time: Sun 11 May 2025 00:00:18 +0000
Manifest this update: Sun 11 May 2025 00:00:18 +0000
Manifest next update: Mon 12 May 2025 00:00:18 +0000
Files and hashes: 1: 1-r8ngTnAMIWnigi3kZKRlPxzAEg.roa (hash: 4upInjfh8BMDhZW1GMRFLRcUKFy4sgss61UjVbuCcN4=)
2: 3bHFI98fNrO-AI7iYMdoY6Cy4Ec.roa (hash: jNavEGcWKNfNKB84/MmKoUJXT5oHj4PAQhOkM5ErTv4=)
3: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: gwJwlWtqcL0Wgi9nKmUVdRvHs5OJjl6brXVA7FVn9nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:7d:fb:98:ed:75:17:96:5d:08:ea:02:79:93:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: May 11 00:00:18 2025 GMT
Not After : May 12 00:00:18 2025 GMT
Subject: CN=364918c535aa6be9939c77b2801b773af0e2f851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ac:1b:a6:d9:e1:83:74:ac:b9:49:f8:76:24:
0a:d1:31:c2:1b:bd:61:18:92:01:a8:ea:9c:8b:52:
69:47:df:41:fd:87:96:d4:b1:1b:a4:dd:c8:b5:87:
2b:df:60:63:1f:43:f5:ed:08:fa:01:76:80:55:9f:
3f:b8:58:dd:e9:09:50:15:24:d6:d9:d3:b7:dd:95:
03:11:cd:e1:1f:97:a6:95:20:8b:ec:89:eb:4b:37:
fe:67:d2:3b:2b:be:ec:f1:2a:27:60:c2:36:09:25:
2f:4f:06:2d:c4:28:5a:ec:86:12:8a:75:4f:be:28:
f5:2d:8b:26:c0:1e:d5:fc:d7:3c:9c:e2:7f:47:aa:
be:15:0e:42:94:d3:d9:2f:9a:be:51:98:f5:aa:b1:
71:b6:7b:50:f5:92:18:b9:40:ca:fe:c6:cc:3e:ad:
68:96:89:c9:18:8a:97:31:81:a3:f0:e1:56:86:88:
40:ff:91:86:d5:16:ea:05:3a:22:da:35:19:7c:08:
79:82:2a:be:f3:43:10:1c:a0:e2:22:e3:da:bd:9c:
39:8f:e0:d9:b1:3a:9b:61:19:85:d1:5d:32:df:df:
e4:e9:74:2f:c9:c4:3f:0d:54:56:5e:79:42:de:ed:
a5:74:a7:ae:4c:0f:6f:18:df:d6:18:a9:06:28:17:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:49:18:C5:35:AA:6B:E9:93:9C:77:B2:80:1B:77:3A:F0:E2:F8:51
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:35:62:45:6b:22:ee:76:d3:3d:19:9b:d1:0e:0d:c3:d5:f8:
a3:6e:7d:83:90:84:e7:9b:02:e0:44:4a:76:80:9a:ac:7a:67:
95:71:54:9a:f3:d6:be:64:f0:17:7e:8e:74:cd:55:8e:a9:1d:
76:78:ae:f2:38:f8:b4:52:ba:41:fc:7b:b1:93:34:09:ae:20:
96:48:f7:c4:d0:6b:ab:83:40:c2:d8:5c:c2:52:53:c8:56:67:
d7:53:8f:96:5c:45:3a:35:ad:ed:b6:9b:a4:f8:78:5e:70:9e:
cf:41:43:40:99:a1:80:8b:cd:3e:2e:80:59:09:55:c5:35:9e:
9f:3e:b0:b5:0f:dd:a1:ba:52:86:f2:e9:59:06:b1:9f:bb:d9:
89:9f:9c:db:c0:3a:9d:96:41:89:c5:3c:51:c1:d1:c4:a2:79:
01:53:41:ac:e1:24:94:39:ad:b0:af:95:fc:8e:ec:2b:52:b6:
f8:5e:ea:8d:78:3e:11:40:a4:29:10:95:b4:86:74:03:26:11:
20:98:5d:9b:3d:29:38:5e:d4:44:2f:9a:37:4d:4a:5a:28:b4:
ad:12:e6:27:e1:da:74:0a:34:d4:23:fc:20:b4:12:be:27:6b:
82:6c:24:26:58:1d:48:04:f6:d4:1d:9c:93:50:9f:4e:3c:bf:
61:ab:99:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:20:09 2025 by rpki-client