Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier: 0NVl4yCLXXJuJZqx8syQ9yg7vt12p2yex61iu3a0QLM=
Subject key identifier: 6E:04:00:14:F3:ED:98:34:C5:8E:A1:44:39:5A:E7:9B:47:AD:4F:28
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 01965A94F06960BA66A6DE191CE5C797F9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number: 1506
Signing time: Mon 21 Apr 2025 23:00:32 +0000
Manifest this update: Mon 21 Apr 2025 23:00:32 +0000
Manifest next update: Tue 22 Apr 2025 23:00:32 +0000
Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: Els4xBFl/oeM8TbExeevNM7hLi/ZBF4S1pIYopiFJ/k=)
2: ZJCu1yU9m3Cq5WWLkeWOotibU-k.roa (hash: km1a7hNobV+/Bq/2l3UQLOxoqTuuQQAxWKpbP+WCwQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:94:f0:69:60:ba:66:a6:de:19:1c:e5:c7:97:f9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Apr 21 23:00:32 2025 GMT
Not After : Apr 22 23:00:32 2025 GMT
Subject: CN=6e040014f3ed9834c58ea144395ae79b47ad4f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ee:08:69:8c:d8:fe:9a:9b:5e:f9:f6:af:f4:
ab:6d:08:0f:66:73:31:6d:f7:4c:8d:07:19:2f:ec:
ca:fe:e1:eb:24:6f:78:fe:ba:8d:f0:89:8b:c0:ae:
d8:c6:ba:2b:62:cb:5d:24:f7:2b:4e:de:41:69:3f:
e6:f6:41:2f:2d:ab:94:e8:1f:75:7b:d2:4c:c1:11:
8e:ad:80:d1:bf:e3:82:ed:46:63:17:cd:0c:1f:86:
b0:c4:72:71:9e:92:f8:d4:3f:23:27:95:3e:d9:a6:
3d:6f:d3:a8:63:26:b6:00:38:f9:6f:c7:77:31:13:
29:f3:c7:72:7e:67:a8:32:aa:24:74:12:1c:64:66:
f1:02:de:a3:d9:58:ff:4e:9d:60:d1:b5:35:6f:a0:
f2:7e:89:2f:ff:3d:34:3e:fd:a7:30:6e:30:a1:bc:
b1:15:14:04:9e:65:b9:04:5d:46:86:7c:94:2a:d7:
59:63:90:a3:e6:3b:f4:a8:d1:2c:b4:9e:d8:07:f4:
08:03:5f:5e:92:74:a1:e5:10:bf:df:7d:3b:98:b6:
19:1b:14:a8:57:c1:ea:e4:f8:89:5c:d4:e6:04:c4:
72:c4:7a:3f:f6:56:e4:58:d7:66:fe:c0:b2:0d:05:
07:aa:1a:76:ce:d4:41:eb:0e:cd:65:63:02:5d:6a:
71:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:04:00:14:F3:ED:98:34:C5:8E:A1:44:39:5A:E7:9B:47:AD:4F:28
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:18:f0:d8:59:68:b1:e3:9e:9b:0d:9c:d3:5f:26:a8:61:2e:
e9:e3:9a:4f:6f:2a:8d:d6:67:6e:d9:18:74:18:cb:a0:e3:fd:
d0:aa:d2:93:5e:9a:0e:00:74:e1:20:e6:8d:00:1b:5f:a5:5d:
11:4e:ba:4d:b1:b4:50:d2:be:7b:e4:69:02:6c:79:37:09:03:
3d:68:90:09:22:ee:6b:2d:59:e0:96:0f:d2:fc:4a:2a:db:25:
eb:22:03:c0:62:d9:31:45:63:36:e2:06:d6:bb:19:d1:85:12:
51:e2:41:1d:71:48:2b:6f:ac:41:37:7a:85:25:32:ba:7e:b1:
77:c7:41:3c:68:fe:24:72:60:95:41:bd:9f:df:a0:b9:41:64:
4c:29:e3:fa:78:a7:b1:5e:b1:a3:e8:8a:34:c4:2c:fe:e7:22:
55:b0:49:be:f4:ce:00:e2:ef:ce:b3:ab:ed:5e:a3:b8:97:95:
44:fa:cc:89:54:b0:5f:53:24:a2:f2:6e:9d:26:71:18:2e:98:
1d:f0:85:37:6d:ce:72:72:04:d5:2c:c2:32:5a:40:5a:4b:a4:
eb:d5:1a:d1:16:0d:d7:6c:81:1c:d2:4d:ca:46:2f:a8:fd:e4:
33:30:8e:8f:f6:eb:a5:48:00:6e:2b:52:7f:f0:c5:b2:1e:9a:
da:fa:c9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:04:41 2025 by rpki-client