Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
File: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json)
Hash identifier: m4fxTBuHqCN0ZMBW5mLfhLer5TDKUR8KGuhNi69XQ0k=
Subject key identifier: 31:51:09:5B:B5:3F:80:0B:54:83:59:47:1A:CA:AF:81:DF:D4:97:63
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Certificate issuer: /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial: 019655381357B1C5032E43F1ED4A70CB2278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
Manifest number: 11D4
Signing time: Sun 20 Apr 2025 22:01:00 +0000
Manifest this update: Sun 20 Apr 2025 22:01:00 +0000
Manifest next update: Mon 21 Apr 2025 22:01:00 +0000
Files and hashes: 1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: TPqOIjrBtI8xcks1J2zpdWr4gsqbFIj1D9YvQoCmCZk=)
2: K668RnN8R9Zt_BhcvITxrQRhBNs.roa (hash: 8wo0Wz+L+phQUblwdU8c4kneYF4uQyTcefZ7CpD7SsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:13:57:b1:c5:03:2e:43:f1:ed:4a:70:cb:22:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
Validity
Not Before: Apr 20 22:01:00 2025 GMT
Not After : Apr 21 22:01:00 2025 GMT
Subject: CN=3151095bb53f800b548359471acaaf81dfd49763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:f8:29:87:3d:87:e2:4f:4d:ee:99:b0:fa:
e1:e0:ee:68:87:2e:c7:1b:99:d7:b2:0d:69:20:d9:
a4:82:a4:ba:0f:67:7a:b2:c3:68:a7:d8:8d:13:cc:
24:ae:c3:c9:89:4f:8b:88:d6:f0:55:dc:ea:35:19:
6b:82:13:c7:00:d1:00:39:eb:db:18:67:ef:f8:7e:
80:f1:d0:b7:ca:bb:d3:45:ae:16:eb:9f:e4:87:52:
9f:b7:24:5b:b4:46:eb:ea:46:96:f3:ad:17:47:dd:
a6:69:06:7b:68:1c:44:90:33:bb:ff:20:7d:a4:eb:
bd:52:db:c9:c0:d2:f8:00:cb:ef:7f:ac:bd:c0:5d:
d8:3c:64:96:8d:72:d1:4b:40:82:f2:db:8e:df:b9:
15:53:6c:93:03:06:f5:00:2d:98:2b:f8:a8:c5:f0:
48:07:bb:e4:60:56:2c:5a:d9:c1:e9:aa:99:08:10:
27:83:ff:a2:c2:12:a4:6b:d9:3e:64:6b:c6:a7:5e:
d9:37:bb:39:7d:40:9e:10:41:af:dd:7e:f4:65:63:
85:ed:85:f9:94:03:bf:4f:67:73:58:ab:79:55:48:
61:3e:3d:06:17:68:87:27:dd:c0:de:66:33:31:6d:
de:bd:1a:4c:72:66:2c:40:5a:7e:eb:89:a7:27:fe:
ff:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:51:09:5B:B5:3F:80:0B:54:83:59:47:1A:CA:AF:81:DF:D4:97:63
X509v3 Authority Key Identifier:
keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1c:47:6b:e4:b8:ac:e3:3c:49:63:86:d0:b6:14:25:75:46:
f6:e9:dd:60:ca:bf:4f:28:aa:19:b4:2b:02:6e:7f:ec:4c:81:
d5:76:a5:bd:f0:dc:47:19:db:53:f4:a2:c6:da:47:22:c6:26:
65:67:33:4c:7d:87:de:71:b1:5a:f1:19:d7:69:e4:92:24:e4:
94:b9:5c:86:0b:42:7b:a9:4a:c4:86:c1:c9:72:c8:d9:53:e3:
7a:84:da:06:56:1c:d6:d1:c3:30:04:e1:e7:08:e4:5d:2e:ff:
cc:cb:ef:3e:80:8d:ab:63:34:11:2c:62:99:c3:74:0a:4e:11:
a4:5a:5a:82:fb:07:65:6b:12:00:16:b1:53:04:9a:d1:0d:69:
38:58:70:31:b1:e7:7d:bd:30:df:9f:bb:c8:0f:fe:1a:ac:b9:
1c:d2:70:1d:b5:61:a2:a8:9d:d0:0c:48:96:12:83:b6:34:18:
bf:2f:7e:3f:c8:4a:ab:24:b9:71:a0:74:d6:c5:3a:43:cf:b9:
61:d7:4b:c7:7b:77:63:e2:24:44:81:d1:c7:0a:9b:4e:25:e4:
ef:e1:c4:84:c5:26:05:f5:53:ea:6b:43:a7:ba:bc:e4:6e:94:
f7:83:d5:7f:0a:09:75:51:f4:b7:26:1a:c2:2e:b2:b6:4f:4f:
49:a8:66:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:43 2025 by rpki-client