
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier: d7JZ3VVmePRKArBiYQDxUTnuhH9cPgpiyrS353y6dYM=
Subject key identifier: B7:2D:B5:EE:FD:A1:4B:72:CB:30:0F:67:5E:4F:E0:10:B2:71:46:BD
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial: 0196C94DE3942B41CBD143563B29DDC5189A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number: 153E
Signing time: Tue 13 May 2025 11:00:46 +0000
Manifest this update: Tue 13 May 2025 11:00:46 +0000
Manifest next update: Wed 14 May 2025 11:00:46 +0000
Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: KZxSvCT/NtytllVR69yAYjxdXPESljz646qmpyltZ1g=)
2: CgFc8x26QM3VY1KiLgccdsxhrXo.roa (hash: P9EWdQX/EOCp7WZ5gfsQmoM4qU0udbuMuOqDFw597IY=)
3: O-XPeQu-YyLqAWSz1Ih5K-O-Zn4.roa (hash: qt91w+3/S+Ea26JEVNOvOodxAMoUk0pySpCeuSElj44=)
4: RonOUjE1P34U6vbbFs9w9AsGyN0.roa (hash: fOrx68LqSTvTWV0sMnHRK4WODfXfA787GTb+IyVk3b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:4d:e3:94:2b:41:cb:d1:43:56:3b:29:dd:c5:18:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Validity
Not Before: May 13 11:00:46 2025 GMT
Not After : May 14 11:00:46 2025 GMT
Subject: CN=b72db5eefda14b72cb300f675e4fe010b27146bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:48:ee:19:8e:b9:74:5c:0e:4f:f5:80:b0:6e:
69:e9:48:f4:b7:46:cb:40:67:84:be:af:8b:11:9d:
96:5c:c1:f8:90:9c:3f:be:23:83:57:04:1d:e2:e6:
08:36:f7:3f:5b:c4:5f:e0:74:ab:2b:d6:c5:33:21:
68:f2:83:e8:16:9e:5a:8f:e1:9c:10:2c:6e:40:d8:
44:41:5a:5b:19:31:e1:40:0f:a2:48:7e:60:df:da:
ac:f0:ed:e3:37:3a:97:be:96:2a:71:5e:0d:db:ef:
72:05:a0:4d:0f:d7:8c:b9:5b:23:c8:7f:e5:91:ff:
14:79:69:43:5b:4f:2a:2e:82:c0:a2:11:68:08:64:
e6:36:1d:e0:0e:92:8a:23:5e:57:1c:30:f0:62:f9:
e7:f2:a0:51:fb:ea:04:89:77:51:9f:b6:89:bb:88:
2a:95:f2:b8:36:ce:a6:0d:fd:8e:44:21:cd:ae:b6:
1c:e7:ef:88:59:90:4a:45:c4:1d:b1:a2:82:ae:26:
46:90:46:8b:a1:fd:9b:54:25:3e:67:98:e2:59:a6:
c3:f4:22:54:a8:ab:07:4f:ee:6e:20:23:1b:f9:75:
d4:c7:57:04:39:fa:e9:9c:72:d9:19:23:9d:c7:45:
19:29:12:b9:cc:51:f1:1d:00:b4:b8:c7:b9:a7:ce:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2D:B5:EE:FD:A1:4B:72:CB:30:0F:67:5E:4F:E0:10:B2:71:46:BD
X509v3 Authority Key Identifier:
keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d1:d8:a0:9f:8c:a3:d8:05:20:eb:90:4d:ca:20:d2:2f:cf:
57:4c:b7:12:9d:2e:eb:7b:8c:fc:a6:e0:d5:b2:1f:2f:49:eb:
e7:72:15:a8:08:55:83:2e:f1:2d:d0:8d:1b:54:d6:14:f7:eb:
ab:a2:32:4d:11:85:f3:29:90:a0:02:a2:bb:61:c8:30:d5:c3:
52:81:f3:49:e1:90:c1:78:d7:ef:51:13:0e:39:fc:5b:41:1e:
15:45:fe:8f:da:0a:db:13:fa:5e:88:0e:63:2b:5c:98:b9:2f:
d7:01:74:62:33:7f:33:bd:67:69:d9:06:7d:79:01:f1:f9:bf:
4e:fd:e6:7c:1d:b5:86:9a:ea:46:18:a3:64:f7:26:56:6b:23:
af:d8:c4:b8:c0:43:2e:7a:19:ca:da:66:5d:c4:b9:07:71:a9:
83:4a:f5:4f:a3:2c:41:e8:89:21:cc:6e:a0:a2:9d:25:3c:cc:
e8:a6:bc:94:0c:c2:7a:ff:14:34:0f:88:52:7a:32:a1:c1:87:
86:eb:a5:30:fa:bb:22:56:8f:4c:12:93:6d:46:e2:95:11:74:
c6:e8:f5:94:49:d1:84:40:db:3c:f0:ee:b7:58:9b:29:05:fa:
ee:99:3a:2f:33:d7:41:9b:50:1d:97:84:4c:8b:3c:41:64:eb:
0f:36:b1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:35:26 2025 by rpki-client