Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
File: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json)
Hash identifier: 9kXl61xbZOB+QSMW0NAEV5BV46iFAwFaKwkfbyG8p+0=
Subject key identifier: B3:EB:D3:53:AC:04:13:9C:F1:0F:E8:D3:BF:72:83:E5:22:9A:71:69
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial: 0196B9A3A76DB0C4D025612023893E10329B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
Manifest number: 13B1
Signing time: Sat 10 May 2025 10:00:32 +0000
Manifest this update: Sat 10 May 2025 10:00:32 +0000
Manifest next update: Sun 11 May 2025 10:00:32 +0000
Files and hashes: 1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: Yh3u4yU/vhoOIt+3v7LFbEluASd4HXZoDbpUQD8gUG4=)
2: jzen_y9MjkJUaSD6dgV7vhjezg8.roa (hash: D4rABI9YVwiue3KhIMfk5XfCTjj00ChB0kZlnVkANPc=)
3: ubC4YR8LUreDrke7vt8D90oUEcs.roa (hash: LCwRufW+WvIFqYnHC7mj/baN3D6jpURUt0hIyn+G++0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:a7:6d:b0:c4:d0:25:61:20:23:89:3e:10:32:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
Validity
Not Before: May 10 10:00:32 2025 GMT
Not After : May 11 10:00:32 2025 GMT
Subject: CN=b3ebd353ac04139cf10fe8d3bf7283e5229a7169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:72:11:82:3a:52:46:4f:b3:2b:01:44:9c:75:
90:ab:ce:c8:8a:c2:50:a6:28:1c:23:ff:2a:9b:9c:
ef:68:de:9b:e0:a7:92:cf:ab:cb:34:a6:59:88:38:
41:f5:1b:f1:f7:ad:78:80:6d:83:0f:b3:ee:86:df:
da:c5:b2:92:9d:0a:79:32:12:44:af:11:e1:6b:dd:
77:88:ad:15:67:86:8e:b2:52:08:ec:ee:62:d8:c8:
4f:d0:33:d6:8a:54:0e:85:64:6e:13:b7:5c:20:1f:
77:6a:e2:63:c4:3e:ff:a9:db:03:73:a8:94:6b:75:
b5:6c:71:4f:3e:1c:02:b8:8e:3f:fc:5a:5d:9d:b3:
8a:96:67:21:12:7d:ea:b7:3d:cc:e7:78:4f:9d:42:
86:12:a4:19:01:f3:26:48:73:9d:a7:ee:3e:b9:e7:
da:8d:9a:3d:35:39:67:ee:72:20:e6:e8:a8:47:23:
bc:f8:fa:4b:b3:cc:7f:d2:67:c6:14:fa:4d:3d:81:
9e:c9:9c:0a:bb:89:5c:9d:7c:38:ef:7e:f9:db:d5:
ff:fd:9b:ee:6d:6c:7b:49:91:62:d0:f0:18:ab:6d:
f4:4e:e0:6f:42:f4:02:10:55:0b:63:a0:7c:8d:bf:
6e:ed:1d:e5:0a:b4:48:a9:88:9b:65:ee:03:d9:5c:
98:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EB:D3:53:AC:04:13:9C:F1:0F:E8:D3:BF:72:83:E5:22:9A:71:69
X509v3 Authority Key Identifier:
keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c2:bd:77:d0:a6:de:9b:a2:4c:3f:69:50:fd:12:61:a4:c3:
69:23:be:95:63:54:bf:18:b5:72:e4:8b:13:d5:5e:23:c7:42:
19:c8:4e:30:91:46:b2:f4:ae:29:25:16:65:ec:53:62:00:16:
32:dc:93:fb:01:35:ff:c0:a9:e8:7a:ee:d0:46:25:33:6b:ab:
6d:ae:e2:ca:ac:d7:ea:a1:0e:2c:c0:cd:ba:be:a1:a1:af:7e:
4f:3b:a0:82:7a:82:7c:a4:92:7d:b3:51:35:c9:57:7a:e2:94:
2d:67:17:68:a4:8d:ff:76:f5:a1:d9:b7:5b:aa:01:a1:08:a5:
62:c3:47:6a:d7:e1:bf:d1:87:e0:45:d7:c9:ed:55:c7:dd:e2:
80:a5:eb:10:2f:e2:04:a1:b4:86:ae:5e:4f:a7:7c:03:8a:6f:
39:c0:02:54:aa:5c:e3:f2:29:8a:87:e1:04:f7:58:30:3d:1a:
3e:28:30:1f:5b:97:f2:6e:12:d4:43:ae:ef:96:86:ea:3d:d6:
05:3b:1d:36:80:c8:e0:7f:61:6b:08:7f:c4:55:f7:a2:2a:14:
80:81:b1:83:b4:f0:2c:7d:76:c7:67:b5:31:da:24:dd:cf:f7:
e4:4d:fa:9a:6b:2c:a7:b8:43:97:3e:ed:9b:48:e8:ba:59:7b:
74:7f:98:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:12:37 2025 by rpki-client