Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier: O7Kzs8+fjT4ACikttI1OV4dBYOMXHNYNTGoLNp7sEMU=
Subject key identifier: B8:72:44:6E:A4:76:05:7E:CA:FE:BC:EE:14:2F:BB:29:9E:7A:3F:73
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 0196594B8418072231A1BBA196DE47DCC19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number: 0EE6
Signing time: Mon 21 Apr 2025 17:00:43 +0000
Manifest this update: Mon 21 Apr 2025 17:00:43 +0000
Manifest next update: Tue 22 Apr 2025 17:00:43 +0000
Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: 5t3bpKJ5M6F98DNkHPPqhVyV4KM4G0NwWc6yA2apBhw=)
2: HbrG3H8i4MVchy7ux-rBNewfgN4.roa (hash: ZEnkqludW6ORRLo4vaUnR4azLQNvPJWfXdiBq5telHQ=)
3: eqT6wyPQANegQWczS_E8NsRIGH0.roa (hash: uVTDWyi87OupvvigMLyo7l17Ar6OD8Dv20/y/RB28lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:84:18:07:22:31:a1:bb:a1:96:de:47:dc:c1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: Apr 21 17:00:43 2025 GMT
Not After : Apr 22 17:00:43 2025 GMT
Subject: CN=b872446ea476057ecafebcee142fbb299e7a3f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:12:8d:19:90:91:74:b6:56:26:0d:3f:00:36:
96:b7:9c:84:c1:08:ab:40:b7:3c:b7:17:54:21:b7:
00:17:aa:b2:65:74:b7:94:08:7b:89:9c:34:c4:a5:
6d:e4:5b:80:97:80:fc:ec:7e:bc:fc:b7:3f:a2:40:
fb:11:2a:2d:75:51:90:dd:c4:e0:b3:99:49:98:4a:
b3:5a:2b:10:7e:cd:aa:0d:fa:ec:88:57:70:68:c3:
9f:32:2c:41:a3:13:9c:41:23:a9:36:65:00:ef:94:
ea:02:66:21:71:7f:e8:ca:33:4c:0e:58:d3:0d:10:
3e:fb:39:ed:9a:1d:48:a9:54:cc:05:2a:42:c4:d9:
4a:43:54:9f:dc:d7:1d:d8:c8:a6:3e:66:2a:1f:05:
eb:ef:ee:b5:f9:25:1b:54:a2:cb:b6:cd:b6:59:02:
b7:67:a1:10:ef:9f:c3:a2:bf:79:5d:35:d3:6f:67:
bb:79:49:ce:3a:17:94:c7:a2:1c:34:8e:ae:28:45:
0d:4d:19:2a:73:f1:6e:10:2c:d9:6a:2d:76:88:08:
fd:fb:69:95:7e:8b:f7:40:5f:31:3c:b3:06:dd:db:
c4:e2:6b:02:fa:a5:50:01:60:7d:52:19:62:19:3f:
f6:d7:fb:dd:5d:41:4b:ea:7a:49:f1:fa:8b:47:e7:
53:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:72:44:6E:A4:76:05:7E:CA:FE:BC:EE:14:2F:BB:29:9E:7A:3F:73
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e5:5f:93:80:0b:c2:14:7e:91:f0:8c:43:19:33:42:b5:d3:
d1:b8:f5:36:96:26:52:46:c4:13:a0:8f:a8:97:32:ab:84:d0:
db:ab:2b:ce:c5:e8:a0:f6:be:cc:4a:03:0e:ae:4f:30:af:f0:
84:ec:7e:6b:c8:a4:c6:55:a8:15:6f:1b:e1:73:d1:16:0e:e1:
c4:b9:e4:92:a8:17:5c:6a:07:a1:ed:91:85:23:ad:4b:78:99:
6c:f7:81:ce:da:d3:a0:66:04:3a:7d:cf:01:62:5b:e1:74:d1:
da:99:24:c1:12:8a:ca:a0:18:81:00:43:c1:41:a6:47:11:9c:
6b:25:50:ff:ca:e2:82:4d:37:d6:bf:6e:a9:3c:bb:5f:45:ea:
3d:e3:88:b2:80:e1:03:77:0d:6b:67:af:b4:70:5a:51:f2:77:
07:68:66:64:e3:de:d6:21:7d:ec:62:4d:ce:f8:1f:f5:c3:b5:
08:d5:6d:18:33:93:13:d7:fc:2a:83:11:0f:05:ee:f3:0d:ca:
17:41:a2:91:94:88:80:fa:15:39:ef:17:08:64:9d:0d:5e:b0:
48:6b:2c:48:e3:4f:31:1d:d3:b0:de:b2:93:21:31:a0:8b:58:
a0:93:dc:df:e5:19:b9:a6:a7:1e:22:6f:ea:3c:71:3d:1e:17:
a7:7e:b7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:31:09 2025 by rpki-client