Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
File: 3t-aZxvPF4nBtaw2MMdBvlYNraA.mft (raw, json)
Hash identifier: ZbxhUEhSktNpH0GGlpyCst5SWJ82cx/4QdcQYVqCYk4=
Subject key identifier: 61:F4:1E:52:A5:30:30:59:F9:33:43:E2:64:08:87:A4:F1:E3:73:B2
Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Certificate issuer: /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Certificate serial: 0196564A4B2B6762186974933A6F118D40AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
Manifest number: 1075
Signing time: Mon 21 Apr 2025 03:00:31 +0000
Manifest this update: Mon 21 Apr 2025 03:00:31 +0000
Manifest next update: Tue 22 Apr 2025 03:00:31 +0000
Files and hashes: 1: 3t-aZxvPF4nBtaw2MMdBvlYNraA.crl (hash: abXWXAx1MfrzZulbXWaSLMmGCXuWraBYKTsjBYbk00E=)
2: RNkRhX3yK-TkHlh9YWWsykby_Dc.roa (hash: vp+4Wych+XwTPbr9Bjf9hawO/Jnhv86eVFw3KntPsww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:4b:2b:67:62:18:69:74:93:3a:6f:11:8d:40:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Validity
Not Before: Apr 21 03:00:31 2025 GMT
Not After : Apr 22 03:00:31 2025 GMT
Subject: CN=61f41e52a5303059f93343e2640887a4f1e373b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ac:08:ba:11:c2:48:d9:a9:c7:d1:29:9d:71:
44:38:02:ca:b3:90:e9:01:54:b3:2c:9a:47:42:86:
16:48:48:31:cc:3f:ee:44:dd:eb:e8:cb:74:7c:71:
8e:31:e5:d4:e5:4c:bc:10:2b:7f:de:66:a8:32:4c:
5f:b3:a7:47:b1:e6:af:23:07:01:12:45:73:30:6e:
0d:9a:27:20:ba:e1:1e:b9:88:34:17:ab:37:0c:a2:
17:40:90:ac:2d:33:93:77:07:ba:f8:de:ff:88:11:
00:8f:e8:a8:c9:7e:43:2e:ef:6c:36:fb:e8:4f:93:
11:91:c9:9c:36:ff:4b:4a:1c:17:c5:2a:42:50:33:
d8:d1:b3:51:7f:3f:ef:a0:3e:64:a8:ef:a4:55:4c:
da:bb:59:13:1b:0f:78:09:97:fe:cd:7b:54:a1:f3:
13:fc:c1:bd:14:ab:7f:0a:0c:1b:19:2c:ee:e6:e5:
14:58:ab:e0:35:06:56:ea:b7:9c:ba:e7:0d:3f:5c:
21:72:77:0b:3b:dd:20:f4:5e:fb:0c:18:84:ee:42:
9e:0f:2b:a7:01:19:0b:cd:b9:a5:66:d3:07:ec:cf:
6e:be:08:90:71:cc:83:37:e6:37:ea:77:19:6a:b1:
10:8f:e2:70:31:63:f1:3b:72:42:36:5c:fd:60:0f:
8a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F4:1E:52:A5:30:30:59:F9:33:43:E2:64:08:87:A4:F1:E3:73:B2
X509v3 Authority Key Identifier:
keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5c:2f:72:1b:0b:e2:6c:1f:b1:52:1b:06:14:c0:28:65:8e:
c5:60:f8:9d:e3:55:03:a0:d2:42:8c:b3:d3:ce:eb:ef:a7:cd:
b4:17:d2:58:72:b0:50:17:de:a9:8a:53:4a:9c:f4:40:58:25:
54:4f:25:f2:ec:a4:ad:fb:d9:18:46:f4:0a:a8:82:64:f5:13:
3c:c5:7e:0b:76:58:af:08:f9:4f:3b:34:cc:2d:30:fd:ae:4a:
1e:af:98:d8:2a:e9:b8:43:b9:78:eb:8f:ad:32:fa:d5:9b:f4:
d4:89:c2:17:c0:09:70:18:11:06:37:c6:a1:05:b7:2e:61:30:
73:b8:53:33:92:8e:98:ff:03:72:e6:6f:e5:a6:cb:9c:01:72:
9e:eb:34:a5:ec:6a:61:fc:f6:c3:61:d8:e5:47:d0:54:0d:f3:
c9:78:f6:ca:9d:9a:c4:93:c3:30:05:06:7e:4b:00:a8:a5:b0:
8a:e2:e6:c6:a0:1d:c0:5f:d2:7d:17:f5:31:ec:7a:4a:c1:21:
82:f7:fd:27:0a:c4:3d:c4:15:2e:44:d1:ab:5a:62:f3:7f:a9:
6c:5f:49:ab:f9:b9:07:1f:03:6c:38:cd:a7:45:8a:17:35:d3:
ff:c9:ee:4c:15:91:52:02:ea:a6:69:5b:ec:f5:a9:5e:7b:35:
1e:13:9a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:13 2025 by rpki-client