Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: TZ+DqA4LO9GMJj52As7jf/cbmEUn6UHAEWHYJm4Pni0=
Subject key identifier: 14:4A:1D:B2:89:CF:44:AC:49:C6:18:46:E2:9B:37:79:CC:71:E5:19
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 0196BCA49F87DE271F2F3534638BBE63A88F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 0520
Signing time: Sun 11 May 2025 00:00:27 +0000
Manifest this update: Sun 11 May 2025 00:00:27 +0000
Manifest next update: Mon 12 May 2025 00:00:27 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: H7W5psACXaN11smNYJJtVwagFD3m9CISKpVrnGZf/pM=)
2: w0q3VjpYAA26KoKS-OoF_EY4OL8.roa (hash: NjcgvyEw+m9zGeB1dD1onCDET/1Ymu7yU7l0wd7sHLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:9f:87:de:27:1f:2f:35:34:63:8b:be:63:a8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: May 11 00:00:27 2025 GMT
Not After : May 12 00:00:27 2025 GMT
Subject: CN=144a1db289cf44ac49c61846e29b3779cc71e519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:5d:7d:21:61:86:66:f5:2b:4b:1b:d8:db:
43:1c:0f:68:04:76:f3:ce:b6:32:0b:67:f3:2a:21:
53:6c:c5:72:62:f4:c6:44:05:93:c7:14:0b:03:21:
8f:75:d3:02:32:00:fc:7b:f1:3d:a7:2c:2d:74:a9:
4c:22:4a:7a:52:df:a3:3d:c3:31:2e:8f:3c:60:d4:
c6:ed:ce:57:8f:34:9e:db:f6:9b:ba:f2:b4:fe:df:
6b:a3:05:00:7f:53:79:9e:cd:c8:c3:c8:92:7c:50:
8a:66:a3:a2:17:99:3e:73:14:2a:51:ba:c2:a4:db:
27:5f:d9:f7:20:2b:47:5d:a1:33:d1:98:ec:a0:5d:
7d:35:b9:cc:6b:95:2e:90:7d:70:64:6a:c8:c1:12:
b3:ff:bf:77:89:a4:a0:be:ae:2e:d0:ce:cb:42:17:
6e:c9:40:74:12:37:f6:04:32:9e:83:fd:fc:f0:d6:
08:9c:b1:3e:53:31:d8:13:65:85:00:0a:40:26:fe:
1d:88:33:f5:c1:b3:10:83:fd:f9:a7:aa:14:96:99:
3e:9b:e4:3b:92:52:63:52:ac:17:5e:1f:ad:bb:d4:
54:15:87:24:15:28:33:a5:de:96:62:f9:93:3f:a4:
1b:49:c2:7d:7c:4c:f0:11:44:d6:e0:87:d0:96:78:
82:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4A:1D:B2:89:CF:44:AC:49:C6:18:46:E2:9B:37:79:CC:71:E5:19
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:9b:de:60:44:52:04:1e:fa:cf:22:c8:91:53:14:2f:fd:f5:
c6:97:ed:5e:01:9e:97:5b:45:26:4d:bb:3e:47:77:16:7e:c1:
ea:6c:f2:c0:92:32:b7:48:b6:01:39:1d:06:ca:b5:d8:e9:7d:
21:79:00:a2:31:2c:8f:4e:16:56:3a:ae:98:b2:e0:7a:38:ea:
08:e5:47:17:97:c0:65:7c:e4:78:db:c0:a5:0b:91:f4:da:59:
01:ca:9d:ff:c5:3b:d1:92:0a:c3:7f:a4:75:92:c7:cc:d7:88:
bf:12:d1:e8:0b:c6:88:e9:04:d2:04:e3:59:bb:7a:a2:54:e6:
6c:e9:96:82:22:75:78:6f:19:9b:ac:c3:c9:d4:8f:98:71:83:
08:8c:5a:5b:15:6d:42:26:93:b8:78:a6:16:66:52:9d:49:e4:
51:45:2e:90:12:0f:a9:28:6b:1c:96:85:42:38:53:1a:ca:ab:
91:ab:d4:4f:02:2e:19:61:38:a0:7d:20:6f:cc:b4:ec:86:de:
5e:b6:e8:c3:79:df:db:f8:dc:70:a6:cb:47:c9:e9:77:59:e0:
06:87:d4:0e:2b:28:1b:e2:32:45:15:0e:d0:83:e2:9f:6e:3d:
cd:db:d1:e2:26:86:53:89:c8:0a:b3:63:79:7e:73:0e:63:38:
56:cf:ce:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:06:27 2025 by rpki-client