Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: K4MQeuqiV9DA1WN/0NDB8EvrueIlaGfQEkgq01eBqbc=
Subject key identifier: 3F:BA:4A:AC:D8:94:0C:50:73:AE:22:DC:C4:E8:1C:09:61:66:47:DB
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 01969D876B6EC9BEA0F3D16918624DC9C1FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 0E66
Signing time: Sun 04 May 2025 23:00:19 +0000
Manifest this update: Sun 04 May 2025 23:00:19 +0000
Manifest next update: Mon 05 May 2025 23:00:19 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: zgDCIhmCMaZVMZ4UukdH3QHGt5xn9HORwVIU6Ysehro=)
2: GJgS7xgFqg_T1Brv5T3Z3VSHSQs.roa (hash: qcKfQ/V3fbXzE7gbTkc10cKeggN9uhLupcmee0zeuj8=)
3: gDn1RHCMxQyNW_pGfUDeAoFsteY.roa (hash: aOveJJ3ah1WLjPcvfI87OOrTavXERjpgS9XWi0GEgq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:6b:6e:c9:be:a0:f3:d1:69:18:62:4d:c9:c1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: May 4 23:00:19 2025 GMT
Not After : May 5 23:00:19 2025 GMT
Subject: CN=3fba4aacd8940c5073ae22dcc4e81c09616647db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fb:4f:15:da:d8:4c:88:0e:13:cd:d7:4e:bc:
3d:0d:e5:a0:56:ee:fa:f4:9f:c3:fa:61:7d:76:6f:
10:65:b3:70:68:32:a3:d3:c5:78:88:4c:b8:f3:aa:
78:17:d2:e8:34:35:2b:7a:31:2b:b6:06:3f:d6:99:
10:da:37:3f:79:81:c5:7b:c1:f3:ac:49:ec:cf:b3:
d6:c9:50:f6:a3:95:bd:97:50:c1:fb:ff:39:4f:ad:
75:42:02:75:e8:91:88:7f:ad:8f:b5:88:83:23:40:
28:18:09:4a:03:42:e0:98:e5:9a:04:a8:6c:01:2d:
27:85:62:c1:13:a0:e2:f3:db:99:fd:88:10:f5:70:
a7:1a:fb:61:c4:8c:d7:f7:92:4f:99:4f:7d:8f:d8:
06:bf:77:71:c8:23:a0:63:14:00:c4:7d:3f:81:12:
2d:17:48:6c:5d:8c:5f:03:7f:1a:e9:cf:56:ae:72:
75:e8:26:a4:20:32:45:c2:14:6d:00:da:98:81:b5:
f3:0f:bc:06:71:a0:2f:45:e9:dc:6c:8d:eb:c7:07:
b9:a2:cd:83:62:c3:dc:72:b6:24:cd:5e:c6:1a:04:
21:33:81:46:f3:3c:79:0c:95:f5:aa:c2:7e:09:55:
e9:3e:fd:7d:22:92:6e:fb:ad:88:be:f6:b9:e8:4f:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BA:4A:AC:D8:94:0C:50:73:AE:22:DC:C4:E8:1C:09:61:66:47:DB
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:84:77:ca:13:6c:8b:c5:6c:22:99:2c:b7:a8:12:18:46:1e:
08:74:00:ee:d9:9d:65:7e:ab:da:ba:f5:38:31:03:af:c5:33:
a2:8c:51:53:64:c2:07:39:cc:ae:d1:e9:15:84:22:f0:67:97:
48:93:81:09:91:b6:b8:9c:a1:ba:66:51:11:d1:32:30:b1:62:
29:f7:6d:36:b4:8d:bd:83:34:1b:ea:de:12:b9:de:31:4e:df:
2a:79:a0:6f:15:b6:f7:bf:9c:70:21:fd:eb:9d:e5:70:7b:2c:
56:a5:f8:ae:44:e6:a5:ef:a7:f6:e2:fa:8e:ae:ee:af:d9:c0:
bc:2d:d6:e9:e1:f8:c4:70:a0:ca:da:55:dc:91:68:90:cd:e6:
9f:44:f7:7a:a3:de:56:7c:30:1e:f7:14:3b:5c:09:cc:33:7e:
e0:de:5b:f1:f0:57:ae:20:db:e2:5f:69:00:6b:9b:4d:8f:37:
c1:60:96:64:c7:e8:7e:b8:67:27:33:6e:f1:f0:1f:ea:61:db:
e1:10:05:e5:d4:89:a2:bb:72:29:92:3c:50:95:26:66:01:4e:
d7:10:c0:4e:3e:c6:92:c3:43:11:b4:6b:24:7f:5a:f7:dd:45:
ab:07:20:a2:9c:7b:52:06:07:04:23:71:ec:60:06:73:d3:c5:
24:23:42:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:22:51 2025 by rpki-client