Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
File: 3hgnB8REwxBksYmcWX6e_XNDj5I.mft (raw, json)
Hash identifier: FV3wX1KH32OlDj3JXUypU5o58wye7hgAULfgPDxx/hY=
Subject key identifier: 5E:EA:5D:53:79:EF:0D:58:5D:85:B6:CC:05:66:41:81:AB:A0:D3:71
Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
Certificate issuer: /CN=de182707c444c31064b1899c597e9efd73438f92
Certificate serial: 0196CA294EB84C1972650BCE1538126666C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
Manifest number: 04A2
Signing time: Tue 13 May 2025 15:00:26 +0000
Manifest this update: Tue 13 May 2025 15:00:26 +0000
Manifest next update: Wed 14 May 2025 15:00:26 +0000
Files and hashes: 1: 3hgnB8REwxBksYmcWX6e_XNDj5I.crl (hash: kXfLj1V/KaH0Ny9X85386pZUvAnkXfdgO1coey8+R4w=)
2: S2et9u3-k4c1RbSQYpZyfZKneKE.roa (hash: Ha/+fD6TOAGH3fDS11rGJPIxFiX3z4IR9RxVgbeKPDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:29:4e:b8:4c:19:72:65:0b:ce:15:38:12:66:66:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de182707c444c31064b1899c597e9efd73438f92
Validity
Not Before: May 13 15:00:26 2025 GMT
Not After : May 14 15:00:26 2025 GMT
Subject: CN=5eea5d5379ef0d585d85b6cc05664181aba0d371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6f:83:d8:d1:26:89:55:81:1c:d1:52:e3:32:
7d:0c:19:3b:71:e5:02:46:b6:63:73:b2:5d:d4:6d:
0d:47:c0:a3:9b:7f:d4:66:69:bf:73:d4:b9:54:ae:
e8:35:3a:80:b6:69:8a:20:96:fc:ba:25:09:90:bf:
70:d0:11:c9:08:b9:bc:e1:06:48:bd:0e:ac:d5:58:
55:2e:1d:ec:4a:9c:67:e7:f1:dc:48:ea:8a:db:39:
5a:99:13:d8:2f:25:c6:ea:c2:91:64:46:5a:96:92:
32:01:be:46:00:2e:8b:9a:a8:f0:2c:d1:de:96:83:
34:49:6b:07:01:b6:02:42:b1:5a:e7:8d:a9:04:b5:
2d:30:64:57:a6:23:ab:02:9c:14:f3:76:33:7f:eb:
1d:cc:10:f7:62:7b:0c:32:f1:fc:12:9e:a5:fb:23:
ca:d2:05:92:71:ee:49:61:a3:32:55:ee:d9:fd:d8:
03:e3:e0:02:e5:b3:d8:a9:2e:ce:4f:1f:62:8c:1b:
87:99:47:44:26:ea:0b:7e:67:cb:b9:0d:12:32:12:
16:45:d5:11:a9:6a:67:6c:ef:12:c7:c0:06:9c:cb:
48:af:a2:7d:17:5a:a7:93:ba:97:ca:c7:35:d2:4c:
55:af:c9:7d:bd:57:30:97:56:3a:fa:9e:81:4a:9b:
37:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EA:5D:53:79:EF:0D:58:5D:85:B6:CC:05:66:41:81:AB:A0:D3:71
X509v3 Authority Key Identifier:
keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:31:ea:4d:90:f4:12:74:b2:34:9a:26:18:07:28:93:18:4c:
88:6e:a4:8e:22:f7:69:1a:55:6c:7c:ea:c5:3d:1f:26:be:ba:
15:b8:6b:df:f4:72:d0:b0:3f:79:8e:2c:08:81:e6:87:02:3d:
02:ec:f2:5f:36:0b:9a:22:cc:7b:72:2d:ca:96:c7:af:9e:cc:
0e:26:1e:06:76:f5:78:52:50:73:11:71:f5:d6:83:cf:61:8c:
8e:cb:80:e8:d6:9f:cd:e0:23:c7:58:d1:22:e5:6e:52:1f:51:
27:cf:08:b9:80:31:91:e6:86:1b:aa:43:26:2a:59:60:85:8e:
0d:07:2a:c0:89:2b:5b:aa:54:fb:7b:b9:dc:bc:be:35:4c:c7:
e6:93:f3:29:25:0c:68:de:1a:3f:34:9e:9b:f2:7d:6b:cf:8f:
c9:e8:45:ef:d9:a4:0a:a4:59:06:00:87:0e:26:9f:ff:4e:c6:
29:46:e0:1d:fd:1f:3b:5b:50:73:4c:f5:33:cc:92:10:33:a5:
35:17:c3:c3:16:d0:9c:15:9b:75:36:0f:42:3f:86:92:4e:ac:
22:ff:a6:84:c4:85:10:44:6a:ba:65:3e:42:7e:2f:af:2d:3a:
21:d1:4a:d7:01:53:c8:78:9d:8a:81:9a:cf:c7:da:72:de:8d:
76:48:99:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:54:02 2025 by rpki-client