Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
File: 3mxgNQQsxTJRbrwZaPQb__S4U34.mft (raw, json)
Hash identifier: Z/Pc87gDcMb6Yl1Xx5s6rHtTB9yFbK2Ntc90oBHa/cs=
Subject key identifier: 83:4A:84:2F:B4:C6:C4:9A:49:D5:40:A0:C6:C0:8E:9C:42:48:AD:62
Authority key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
Certificate issuer: /CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Certificate serial: 01965CB9FE0F7BA8F4C2E0C36963C09F284A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
Manifest number: 114A
Signing time: Tue 22 Apr 2025 09:00:15 +0000
Manifest this update: Tue 22 Apr 2025 09:00:15 +0000
Manifest next update: Wed 23 Apr 2025 09:00:15 +0000
Files and hashes: 1: 3mxgNQQsxTJRbrwZaPQb__S4U34.crl (hash: djYlAkm6zHqpBo8GmjsVMFe1YZIiA793aa2/LF5OcPM=)
2: qlMHdAg_ZeG5jpZEikZxyiq5rOM.roa (hash: r9NbCVDLWns0v6U+hfflkmDI70L6VCrJW0Q5+div1jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:b9:fe:0f:7b:a8:f4:c2:e0:c3:69:63:c0:9f:28:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Validity
Not Before: Apr 22 09:00:15 2025 GMT
Not After : Apr 23 09:00:15 2025 GMT
Subject: CN=834a842fb4c6c49a49d540a0c6c08e9c4248ad62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:b6:4b:4d:df:53:39:72:7d:49:33:c5:88:
ed:07:1d:4a:f4:ee:46:83:93:fc:ed:be:71:73:f3:
5f:65:3f:2c:f1:a3:e4:50:e2:f4:aa:b2:ae:a6:45:
df:59:56:7e:40:c8:53:20:80:e0:68:96:2d:8c:61:
4e:29:31:00:1d:57:7a:97:03:4e:1e:0b:a3:d7:f1:
06:85:b7:5e:1b:7b:89:17:6a:b7:12:20:75:39:0d:
d8:46:4c:77:5d:dd:7b:bc:ee:c4:6a:ee:77:66:7a:
df:ec:94:36:91:0b:4a:16:ec:37:57:10:f0:83:36:
ee:8e:9d:5b:4b:6e:b5:b7:5d:1d:c6:8a:f7:27:24:
50:e1:be:33:a6:54:a7:33:03:79:0f:f1:b7:1b:dd:
6e:94:32:30:9a:fe:80:f1:91:ad:1a:a1:00:8b:79:
91:e3:1a:81:e3:d9:28:ea:0e:fc:51:52:12:8b:60:
11:d7:a2:68:c5:a6:8f:b9:72:b3:5b:a4:83:cf:37:
44:78:49:88:b6:1a:12:f2:09:d1:e2:6b:0b:6b:a9:
7a:30:f5:34:0f:47:0b:00:31:26:d7:39:1f:e3:1f:
9d:3b:6f:d1:42:82:29:b4:2c:60:4d:07:93:58:f0:
bb:bd:15:49:a3:e3:73:fa:95:de:e1:6b:d5:f4:d3:
01:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4A:84:2F:B4:C6:C4:9A:49:D5:40:A0:C6:C0:8E:9C:42:48:AD:62
X509v3 Authority Key Identifier:
keyid:DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:36:9c:c2:d1:39:37:db:c8:e5:99:2d:d0:f9:dc:67:0e:b0:
c6:6c:41:90:dd:b5:71:be:23:2c:aa:74:cc:50:b4:31:2f:de:
57:dc:00:7c:0c:a5:fb:2a:06:e4:ef:3d:a7:5e:81:86:1a:1c:
1d:ab:e0:75:d6:29:f7:b6:a3:e0:96:98:4d:1c:2d:09:5a:ad:
ad:5c:7b:dc:7f:12:55:66:3a:8e:57:cc:c3:2c:03:6d:21:f6:
ba:9c:e6:fa:3d:af:9d:86:8b:b3:06:6f:08:a2:ef:d7:f2:ae:
d9:ed:13:e9:3f:f3:cf:b2:95:cf:c4:b9:20:85:f8:7e:03:81:
ae:e6:5e:12:54:69:55:20:6e:42:ee:c7:4c:0f:04:7a:ff:83:
f9:72:4f:a9:54:84:6f:e9:51:cc:f2:75:6b:66:98:fd:2b:ff:
fe:4a:f2:77:bd:30:98:f9:66:a8:69:6f:67:f6:3f:54:f2:34:
9a:f5:59:57:46:01:1a:d5:62:c7:11:03:c3:ea:46:5e:99:f6:
d5:a8:a0:b7:c7:94:ba:75:30:d5:1d:d3:b2:bd:e9:d6:c0:b7:
3e:24:71:95:01:23:5d:64:a1:e6:27:9c:55:61:2a:21:a1:ec:
86:15:e5:da:26:82:cc:a4:4e:3d:e2:04:23:7b:f3:2b:7f:70:
38:b6:ab:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:34:22 2025 by rpki-client