Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
File: 3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json)
Hash identifier: XSmRrWCCEdQ6UPCWZdzQKJTnXAaFpnsPi9dpVbMy32k=
Subject key identifier: FE:E9:47:2F:E6:DC:D7:9A:A7:E2:FD:6D:17:D0:01:66:81:A0:50:36
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial: 0196BF6F7D1BBA149213407DE6D9D3D17491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
Manifest number: 0C6B
Signing time: Sun 11 May 2025 13:01:16 +0000
Manifest this update: Sun 11 May 2025 13:01:16 +0000
Manifest next update: Mon 12 May 2025 13:01:16 +0000
Files and hashes: 1: 3f1U8HcG3gg1d7c-AMV0OeLqnk4.roa (hash: 6g/YiGFM7SXH1avma+AWhdPQYeSM8xFquer6wIrnMrw=)
2: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: RCfvwLPYXg+i0G22AFYr0xG2e6XZQfIKBCAWIosJ+mg=)
3: LKSIMzg2qS8EWL02SO5YPjrz_I0.roa (hash: ZtwqDuK6zfdHnP5iApdAnlCr/naZTEL8mOtuOOiHgUY=)
4: uKO3HquanWKUmJ90M8YK1DIe1PA.roa (hash: XUrZ548wn+DveWLDDAs++NbjxnozKfTkNs4dRtLEX4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:7d:1b:ba:14:92:13:40:7d:e6:d9:d3:d1:74:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
Validity
Not Before: May 11 13:01:16 2025 GMT
Not After : May 12 13:01:16 2025 GMT
Subject: CN=fee9472fe6dcd79aa7e2fd6d17d0016681a05036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:a7:77:1d:7c:60:6d:e3:09:14:20:de:d8:
73:08:89:2b:08:22:cb:34:3d:39:c9:ea:eb:0d:78:
f3:85:8e:bf:4a:be:44:ac:fa:c7:eb:7e:12:7c:15:
14:df:8e:fd:e4:a8:38:65:3d:3d:3f:1a:4d:a4:11:
78:01:9a:92:2c:f4:f3:ff:65:54:5a:f4:2c:05:59:
cd:d8:f5:5f:d1:3f:01:26:c3:c7:d9:c4:20:45:1a:
1e:b1:45:66:e9:c8:ec:a3:6e:4a:6e:c7:a7:51:11:
52:fd:67:97:af:73:f8:d5:47:47:68:12:aa:3c:f1:
d8:a9:41:66:9a:d7:77:c9:34:73:00:5b:ef:9b:b1:
23:69:c7:7e:05:60:39:b5:28:18:32:fb:36:d7:46:
8f:9f:24:d3:0f:e2:48:2a:38:60:d6:df:fe:80:3a:
ad:0b:05:64:f3:02:b0:97:7b:d7:d7:48:90:14:55:
ca:4f:88:91:be:5d:f8:42:67:c2:94:3a:94:14:7b:
bb:e6:6a:28:ad:5e:f7:eb:1f:80:0d:8a:dc:85:7b:
d1:68:fa:69:97:80:03:b1:f4:35:de:ef:46:a4:71:
f6:1a:55:9f:0a:0e:ef:75:e1:c9:54:2c:31:dc:dc:
b2:56:d4:92:e9:76:69:d2:cf:30:a9:2e:ef:fe:69:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E9:47:2F:E6:DC:D7:9A:A7:E2:FD:6D:17:D0:01:66:81:A0:50:36
X509v3 Authority Key Identifier:
keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c5:e8:16:a3:4f:68:bc:b7:b7:31:7e:84:98:84:bc:65:90:
cb:f1:17:40:a5:c1:f0:57:23:79:f9:c3:1c:03:4e:d8:ca:bf:
f6:bd:fd:84:51:23:d4:0b:eb:15:d9:c7:8b:7b:57:6b:65:6f:
d0:10:1d:8e:a7:f0:e3:c7:47:77:0d:bd:a5:21:90:a6:84:df:
bd:69:13:a6:a3:f2:61:7e:e4:a9:4f:4f:26:4f:4b:6c:ce:13:
66:e6:8f:6e:31:e8:cf:ee:8c:54:52:d4:dd:70:53:5f:5c:33:
2a:68:81:d3:bd:ee:cd:e5:ae:36:b2:f7:d7:bd:81:15:ec:35:
9f:63:e7:a3:74:eb:5c:0f:0e:bb:cd:3d:67:a8:42:dd:a3:49:
48:1a:c8:da:a1:36:f5:b8:b0:f0:fa:92:8e:7a:f8:02:01:66:
66:61:09:8b:48:1b:92:20:c3:02:ca:17:51:d3:6f:78:53:7e:
ad:7b:9e:de:7a:a5:5c:43:ca:ea:80:05:b8:19:d9:9a:24:6e:
0b:3e:3a:25:59:f5:2c:e5:de:78:0a:98:68:7d:37:79:98:25:
00:ac:dd:fe:f8:fc:1a:ae:e1:56:39:84:80:7a:3a:92:e8:28:
b6:1f:2a:76:15:07:02:ae:99:84:70:f4:36:a9:fd:df:60:00:
56:2c:ad:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:06:18 2025 by rpki-client