Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
File: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft (raw, json)
Hash identifier: 4zwMsjtwGHfCSuOyeMexwZZ1Eqc98mpsjPw9eH05ETk=
Subject key identifier: C5:FC:39:66:9D:63:49:EF:C6:3D:B9:D8:AC:3A:14:DB:24:39:27:41
Authority key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
Certificate issuer: /CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Certificate serial: 01965A26E90F2DED39369FB0E3513B698C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 21:00:21 +0000
Manifest this update: Mon 21 Apr 2025 21:00:21 +0000
Manifest next update: Tue 22 Apr 2025 21:00:21 +0000
Files and hashes: 1: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl (hash: aScY3d2haHjGIlB5dyiRwAhzKL3TrGP9hpJyh7u3Cvg=)
2: W1OC8DXA-JBLcfhFPFVeaJnmF2M.roa (hash: Bn11GLaQo8vWxTsyNwP3g7O7jm760Wf0FQskPZIbPmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:26:e9:0f:2d:ed:39:36:9f:b0:e3:51:3b:69:8c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Validity
Not Before: Apr 21 21:00:21 2025 GMT
Not After : Apr 22 21:00:21 2025 GMT
Subject: CN=c5fc39669d6349efc63db9d8ac3a14db24392741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:3a:04:41:14:b2:d7:f6:27:de:65:04:ac:
ef:a4:d8:06:55:4a:dd:51:97:6c:62:2e:13:8e:f5:
44:b1:0a:f5:ee:46:d0:2d:44:38:08:ac:11:55:c6:
b2:8e:95:95:6d:17:8c:99:88:04:29:5a:c0:3b:2e:
f2:e2:df:20:ed:fb:00:68:a0:b1:34:fc:d4:ed:a2:
f7:51:b3:e6:00:47:d3:34:b5:c7:c4:f4:26:7a:55:
d5:e5:3a:2f:e6:f8:d6:da:0d:48:45:a2:db:4e:d6:
a3:14:29:34:60:fc:8c:7c:b8:51:cd:19:09:56:37:
fa:09:dc:2f:21:1f:64:74:1f:73:2b:38:4a:14:6f:
00:5a:2e:f2:f4:20:db:7e:df:68:41:c0:8d:55:9b:
9a:fe:4b:b6:ec:23:95:23:3c:b2:27:76:ec:0c:ff:
19:6d:f2:25:95:e6:89:aa:b7:3f:6e:01:7d:98:ed:
af:ee:90:78:70:59:48:d5:f0:cf:2f:c3:c2:1b:b5:
8c:d5:f4:db:06:94:66:da:de:76:e7:a0:6a:9a:c5:
0c:31:37:5e:dd:69:c7:23:d6:01:91:b6:a9:ee:80:
9e:4e:25:14:10:e6:20:95:eb:35:99:08:bc:1b:59:
fe:50:e1:8e:9d:cd:30:be:4c:ba:db:ae:39:ac:fe:
f4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FC:39:66:9D:63:49:EF:C6:3D:B9:D8:AC:3A:14:DB:24:39:27:41
X509v3 Authority Key Identifier:
keyid:DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:37:7a:4b:4a:fa:b8:03:7f:6c:4a:f4:1e:13:13:26:76:b8:
f9:39:d2:af:ef:e4:2b:a2:36:18:a4:9e:ca:fd:11:49:52:c7:
5c:74:d6:27:2c:83:ec:2a:fe:dc:58:84:2b:b4:f1:cf:24:e8:
68:a0:f3:4f:e9:bb:21:31:57:0d:5e:3f:2e:b7:47:e2:c5:12:
0a:ba:c2:60:f9:5a:67:e7:ad:c9:ee:bb:ca:05:ce:ae:03:84:
c7:d8:ef:cf:01:02:3d:2f:22:cc:d0:a4:20:be:24:a3:6f:72:
3c:89:62:f9:ab:6e:70:82:0a:3f:a8:6e:c9:1b:3e:e5:be:58:
af:ab:2f:52:3a:28:0e:bc:2c:7e:94:b0:51:1b:c7:88:80:b5:
5c:e1:69:e0:18:e5:7d:8c:85:fd:c1:c9:13:13:2c:f6:c1:b5:
d4:c3:04:ad:3f:8b:34:8e:79:fd:c2:d7:87:65:f0:98:91:41:
69:b6:2a:8b:2e:8e:4c:42:66:82:a7:cf:6a:7f:a1:3e:0e:c8:
4d:fb:4e:4d:e3:a2:12:57:aa:c9:da:ae:16:87:8a:34:a1:2b:
6d:2a:6a:d6:53:ed:64:84:cb:6a:86:81:64:5c:50:2a:65:98:
5a:ce:a0:19:c7:fe:7c:7d:9e:2c:41:f1:11:6d:e1:84:d4:1f:
e0:cf:8a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:47:19 2025 by rpki-client