Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
File: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft (raw, json)
Hash identifier: pRYYgXf875Hwwa9CArqptRGfbircj6XLX8f43IcwUQ4=
Subject key identifier: E0:4A:D0:33:3C:3F:35:F9:B3:E6:46:80:D3:F1:B2:EC:61:1A:A0:0A
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 01965982315DEE96D31B60BED01BE4A81222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
Manifest number: 145B
Signing time: Mon 21 Apr 2025 18:00:26 +0000
Manifest this update: Mon 21 Apr 2025 18:00:26 +0000
Manifest next update: Tue 22 Apr 2025 18:00:26 +0000
Files and hashes: 1: 1-7jWzqH7wT1n-L8XkfK1kEabKfA.roa (hash: qrQpcX8LTv3WT8M/1yXwPjm8/udCR9jmZNcZtjA7oMg=)
2: 1ciAIP4p2-wqjGWDrjgweJTl63I.roa (hash: RB/2tnRmdGmG5VvdVWN1ncpG5RZ12mQa5BkOl0WIoTA=)
3: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl (hash: caAK2lhYtsVer43Qu1trt2VVn594X32sGoEtIzsagtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:31:5d:ee:96:d3:1b:60:be:d0:1b:e4:a8:12:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Apr 21 18:00:26 2025 GMT
Not After : Apr 22 18:00:26 2025 GMT
Subject: CN=e04ad0333c3f35f9b3e64680d3f1b2ec611aa00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5d:0a:d2:89:44:b5:d0:1d:79:b5:77:ab:f0:
c0:33:d2:66:fc:3e:c3:77:9a:db:12:15:18:67:4a:
44:06:28:fc:14:14:f1:fd:ea:52:b5:e4:a0:cf:00:
24:1d:df:8d:0a:dc:03:19:69:5b:2d:55:e7:d8:cf:
43:dc:20:43:f5:79:b1:c0:5b:be:af:86:ca:15:29:
ba:d4:93:fc:3b:f8:92:4f:c0:87:97:80:a1:ee:3e:
76:54:2d:3a:9f:9d:a8:23:7c:e4:df:90:7f:ce:2c:
2a:49:4e:68:20:59:8f:10:c3:69:37:de:1a:9e:6c:
3d:96:39:d4:ed:1f:60:d7:3c:af:18:61:0a:d6:8f:
9c:5d:71:a6:6d:08:ee:57:38:1d:68:40:0f:fc:49:
12:c4:df:5a:ef:9b:65:0c:cf:3b:e0:4d:6d:11:a6:
65:53:c1:c2:2b:2c:89:26:30:9c:7e:a5:e2:64:53:
6e:9f:c5:62:a8:4c:69:d4:82:cc:43:77:71:d3:a9:
10:16:18:67:7d:b3:43:71:01:a9:33:e5:f8:6c:81:
41:4b:8e:58:0c:09:2f:e0:97:96:aa:41:d0:25:9d:
d4:39:17:d2:c9:3b:bd:55:93:d2:eb:4c:5c:1a:9c:
c6:e5:08:df:2e:0e:6f:10:6c:f7:75:c9:7d:f6:11:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4A:D0:33:3C:3F:35:F9:B3:E6:46:80:D3:F1:B2:EC:61:1A:A0:0A
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c6:71:10:5a:cc:8a:a9:31:4f:7f:e7:ca:43:bf:be:b1:b5:
77:61:91:65:cd:45:b1:cf:f6:cf:3d:28:d3:b2:23:6e:3d:ec:
c5:37:27:fb:ee:2f:35:53:95:ac:0b:2f:3e:1a:5a:52:86:cd:
55:6d:45:f3:a9:4f:2a:42:d4:d1:0b:1d:11:c7:10:6b:e3:fe:
bb:a2:3d:9c:74:26:e1:b4:db:09:9b:f8:06:77:14:74:32:c4:
d0:78:6b:3e:aa:66:d0:07:a7:50:55:95:36:12:39:f3:12:ae:
26:38:b5:32:ea:45:30:20:a3:d0:05:68:d3:8f:50:dc:ef:3c:
f3:96:b4:70:5d:fe:72:0b:48:d5:3b:d1:ca:a2:a2:80:c0:80:
c6:92:0f:43:fe:89:25:be:d8:4e:de:56:78:a1:66:06:0c:ca:
b2:90:58:5d:b2:23:30:0b:19:83:45:08:50:ff:8f:36:15:0f:
9b:06:d9:5d:4e:bf:d4:bb:55:80:f4:a1:0b:d7:b3:4a:a1:0a:
b5:c9:6c:75:f7:c2:a2:b0:9a:38:d4:10:9d:98:ba:e1:89:77:
09:93:8c:7b:fb:08:fd:8e:1a:79:4a:5c:23:a8:1a:e2:71:5e:
f9:04:6c:8f:89:b0:d1:0e:e2:68:d0:e3:ea:e5:91:28:6a:02:
09:35:f3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:31 2025 by rpki-client