Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
File: 3AveFGeJXG86Rxl-rFjKE65Lt40.mft (raw, json)
Hash identifier: dCRzX88vAfdsfnTk32QGBu2RjPSOvtkI287akeFrB2g=
Subject key identifier: FE:C6:7C:82:E8:6A:FC:1F:34:3F:EE:8F:1F:F5:13:6F:D9:39:AA:7A
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial: 019655DCC273B77E1700D433021D57E573E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
Manifest number: 0389
Signing time: Mon 21 Apr 2025 01:00:53 +0000
Manifest this update: Mon 21 Apr 2025 01:00:53 +0000
Manifest next update: Tue 22 Apr 2025 01:00:53 +0000
Files and hashes: 1: 3AveFGeJXG86Rxl-rFjKE65Lt40.crl (hash: 5VNoHkAc7vYlydZYIkndJ6uBpHfhpCTj/9N7NSoQwoA=)
2: EZxzjJ6XhYd6ltYTmizd41s0hPw.roa (hash: JYFppnIvAuxE4lEcobv5nYUUPDwGguXkpkPpHyixP6g=)
3: NGkgR_rl3fLugEg3BgzB-iR4GzY.roa (hash: /ZmEtv61Y7p4XUZGiWjRkOyM1ttDKeEvzWRAeWuz5J4=)
4: ducUWn7SmjDXSD2XK_HAZ4X-w1E.roa (hash: QsOlqkwJkHZw/RVRRDiq/I4YTQ51hDfHFRswj0zjjww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:c2:73:b7:7e:17:00:d4:33:02:1d:57:e5:73:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Validity
Not Before: Apr 21 01:00:53 2025 GMT
Not After : Apr 22 01:00:53 2025 GMT
Subject: CN=fec67c82e86afc1f343fee8f1ff5136fd939aa7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:81:e4:7b:0d:1c:25:29:f9:eb:9c:dd:9d:
4a:1f:71:a5:da:6d:62:6c:12:02:18:67:71:41:e3:
0c:2c:11:dc:0e:9d:78:87:e6:ec:1f:c3:55:2e:44:
30:b1:8f:ff:43:36:53:20:2f:9d:8c:46:b2:e6:27:
8e:20:72:c0:38:91:4f:90:f4:b8:fb:c0:dc:b9:f0:
36:21:cc:ab:cb:89:43:ed:12:02:37:77:3a:14:4c:
3c:4a:15:00:47:43:45:df:50:0d:e3:c6:dc:b7:51:
30:1b:e9:e6:47:b7:c0:63:24:93:6e:15:0e:87:6f:
38:cc:21:96:25:78:0b:f5:ea:b4:8d:7f:24:20:c3:
25:1f:1a:d7:16:d5:10:8e:9b:73:81:49:a9:cf:82:
45:bb:a2:4c:7a:1c:ca:18:cc:68:09:7c:75:21:04:
5b:8a:7b:02:45:f1:c2:db:50:34:d8:bd:37:8d:3b:
0c:bd:3b:11:cb:2f:97:58:a5:3e:26:57:2c:f0:2c:
7c:a5:73:75:2e:bf:34:0c:ca:83:6c:f4:96:03:d9:
8e:33:60:6c:2e:8c:a2:32:40:e6:e8:e4:a7:00:11:
be:a7:d0:f7:ec:fc:e4:9c:a3:5f:e7:83:2a:37:d7:
63:36:ac:f2:82:5c:b0:8d:bc:5c:16:4f:91:d1:59:
3e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C6:7C:82:E8:6A:FC:1F:34:3F:EE:8F:1F:F5:13:6F:D9:39:AA:7A
X509v3 Authority Key Identifier:
keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:7a:29:59:02:6f:df:3c:40:f6:1c:79:c0:b0:a8:a4:bd:6f:
01:5a:e3:c5:60:d3:3d:45:e3:f3:46:68:8c:6a:6e:69:c1:2c:
0d:c0:8d:de:df:f0:38:e9:f1:f4:18:1d:9b:a3:51:78:d0:88:
2d:73:b7:e1:16:f2:19:73:4c:65:75:6c:1a:43:79:42:8a:a2:
98:ce:19:32:f2:de:51:a1:57:40:69:7d:51:87:a9:af:96:b8:
a0:7f:b6:1d:cd:3d:7d:59:3d:73:70:8a:42:fb:cd:5e:2d:63:
31:05:a2:2d:9b:fa:c8:05:63:6e:b2:ab:3e:04:2d:7b:45:75:
f3:5f:76:2a:89:de:06:ca:03:fe:d8:34:ce:ca:94:69:ef:12:
68:2a:f7:2e:55:16:28:ab:1f:15:e7:70:d4:bd:c6:7b:f8:4f:
e1:f5:12:c7:a8:30:37:18:9f:35:0d:21:78:cf:46:72:81:b4:
d7:6b:da:3e:a3:29:c4:b2:9a:2b:76:62:45:bb:bf:c5:c9:46:
1f:42:e2:08:6f:53:02:18:94:39:ff:7e:6f:30:1d:25:7c:86:
08:f0:69:61:b3:92:5a:93:46:96:c8:c2:fc:bb:8f:ca:1f:57:
02:94:cc:c1:6b:5d:9c:0b:8a:38:5f:f3:3d:85:fe:85:f7:99:
37:7a:2a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:51:07 2025 by rpki-client