Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
File: 3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json)
Hash identifier: NTjd/rzspPKcDd1pGSYCkvE60A3EmRAPh+FogTSNous=
Subject key identifier: 29:1C:6A:57:A0:BE:57:CE:E5:CF:69:E1:9A:0B:E9:89:A7:AA:0B:0B
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 019655DC935C8F6147208FE055322D9AD994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
Manifest number: 0F14
Signing time: Mon 21 Apr 2025 01:00:41 +0000
Manifest this update: Mon 21 Apr 2025 01:00:41 +0000
Manifest next update: Tue 22 Apr 2025 01:00:41 +0000
Files and hashes: 1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: jlmBHj9cXRjexTMwcQt9TEeG8TwYqV2Q7rCYyWY0n60=)
2: a7DppR8a_zPl6np7nOEfJXryakA.roa (hash: wU3AghxluRA4zWm18LLUP4eLKYWVDAXfgoTV1mFNROs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:93:5c:8f:61:47:20:8f:e0:55:32:2d:9a:d9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Apr 21 01:00:41 2025 GMT
Not After : Apr 22 01:00:41 2025 GMT
Subject: CN=291c6a57a0be57cee5cf69e19a0be989a7aa0b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a1:86:22:94:3a:57:71:46:aa:44:d4:d7:a5:
0e:98:fa:ed:e7:9e:76:be:a1:c3:4b:bf:0c:2b:bc:
b6:af:e4:66:ac:fc:d9:a0:09:22:ed:6c:3c:c2:48:
dc:4c:6a:12:46:7a:da:63:5f:8a:65:90:02:d1:61:
b2:6c:e1:dd:9c:a1:e2:ed:8a:20:dc:d2:18:1f:e4:
86:f2:8b:df:a7:9e:ce:35:e4:7b:10:29:dc:8f:7f:
28:35:0b:99:f7:a7:ba:b9:28:bf:98:ff:1a:26:55:
28:8b:4f:f5:1d:47:6d:6a:67:e1:c8:c9:41:cc:f1:
d0:38:bb:50:04:95:0f:01:1c:52:1d:1d:be:e0:d9:
13:bc:99:70:78:87:09:2d:6e:23:11:0a:ba:c8:cb:
4c:a1:a1:72:81:05:e3:9b:0a:83:be:d1:e7:cf:b5:
87:43:79:de:04:ad:66:56:dd:83:c8:37:f6:92:62:
e6:b4:97:2d:9d:7c:76:c3:b3:90:2b:db:c0:5d:1f:
a8:2a:c2:83:60:c0:81:26:0e:ca:a9:aa:36:f7:eb:
74:76:87:10:4d:61:3a:3b:36:60:4b:e2:d4:d5:a9:
15:7b:42:cd:3f:eb:29:ca:0f:bb:f7:9d:3b:84:d2:
98:00:f4:83:14:e1:96:aa:d4:3c:b3:5e:58:cc:12:
0e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1C:6A:57:A0:BE:57:CE:E5:CF:69:E1:9A:0B:E9:89:A7:AA:0B:0B
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d7:70:58:7c:01:ec:0e:58:fd:11:96:f8:49:af:4f:98:7f:
34:7b:9a:58:f6:5a:4f:32:77:24:71:8a:b9:20:d7:21:c5:8c:
d4:ff:e6:1a:be:08:3d:63:e9:2a:69:b5:60:5c:ee:7d:71:48:
f3:20:10:f5:da:d9:97:94:6f:fb:85:ff:b2:bf:7a:1b:ba:1b:
9d:f7:b8:7d:df:ef:e2:aa:0b:38:cc:7b:29:51:8e:88:03:90:
d2:02:bd:76:e8:9e:f0:5c:e2:60:1b:aa:6b:2b:30:2a:aa:16:
7f:81:f5:8b:4b:77:ce:72:e3:2e:75:e2:79:d5:a0:2b:4a:d8:
a2:82:18:7c:21:f6:88:ce:87:9e:68:30:6f:3e:7d:d4:19:a9:
68:44:c0:e7:c3:26:aa:79:fb:97:af:26:33:02:0f:ed:4e:14:
6b:50:7a:13:2a:dd:e5:37:d8:7f:45:d1:65:12:41:2c:b2:89:
ad:1c:db:ef:bb:f9:e8:a8:b7:45:73:2b:26:0d:37:33:2f:d2:
62:95:37:81:c5:a5:ff:e0:68:68:49:ca:54:9b:a6:c9:42:ef:
f4:ab:c9:56:b0:3b:b5:be:16:de:f7:e4:e4:85:9c:48:32:ec:
72:9d:8f:0a:1c:2a:51:e7:5e:b9:e1:c6:d2:16:90:f8:12:ac:
0c:45:a9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:37 2025 by rpki-client