Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
File: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft (raw, json)
Hash identifier: 5Ve5y/jVDP/0qVE1DqslaWN6GUz9jK8nBVB5IcXO8Sk=
Subject key identifier: A6:6E:F6:4D:3D:C2:F0:21:01:91:DC:8A:35:9C:2B:C2:3D:0E:3D:52
Authority key identifier: DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
Certificate issuer: /CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Certificate serial: 01965914E0097BB81564B15AB19EE91CE7CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 16:01:02 +0000
Manifest this update: Mon 21 Apr 2025 16:01:02 +0000
Manifest next update: Tue 22 Apr 2025 16:01:02 +0000
Files and hashes: 1: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl (hash: TfBrc4SbmaImjAq7SguM6GzNTbztV4db4yMkY/faOAo=)
2: XQd1c0isqEth9h07f_gdrmhW6kM.roa (hash: WoVAodjsDqf5sS0K6LPcCANkMFHDsRKs5Hf+/9kb228=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:e0:09:7b:b8:15:64:b1:5a:b1:9e:e9:1c:e7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Validity
Not Before: Apr 21 16:01:02 2025 GMT
Not After : Apr 22 16:01:02 2025 GMT
Subject: CN=a66ef64d3dc2f0210191dc8a359c2bc23d0e3d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:a7:5f:70:41:45:9f:89:43:83:16:57:09:
75:4b:91:55:52:f3:a2:b9:22:14:3b:c6:34:d3:f5:
fb:e6:6f:02:05:3a:09:63:74:dc:f5:2c:69:14:f1:
43:0a:bd:68:b8:1e:74:86:2c:49:d6:08:fe:80:6a:
17:d8:59:73:f3:5b:1b:f7:4c:27:e6:39:33:af:58:
75:69:7f:74:41:f3:78:ca:21:a1:8b:94:47:77:5a:
5f:66:b4:22:0e:43:ed:00:c4:64:e0:98:98:48:8e:
d9:d0:9c:6c:98:92:c5:b3:5e:4a:70:24:b3:e7:f5:
df:6c:ae:ee:c2:f7:d7:23:3e:79:cc:63:48:e9:b0:
e8:0e:6d:41:58:1b:11:46:77:45:a0:93:a4:76:df:
95:d8:83:97:87:fa:62:69:35:06:8a:2b:b4:f1:88:
68:79:7c:8a:f9:24:06:fd:ed:1a:98:ef:8e:e1:26:
6f:d2:58:63:16:96:44:5c:67:a6:da:61:32:6a:11:
6e:80:4f:c7:5f:06:35:c7:a0:d8:e1:54:24:ab:76:
3d:96:dc:fd:a7:8b:fa:65:bf:73:15:fb:d2:80:8f:
ed:1d:6b:59:00:0f:1e:e4:22:2d:70:07:06:3e:29:
a7:2e:26:a3:c4:ea:08:b6:80:bb:ac:43:12:a9:5f:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6E:F6:4D:3D:C2:F0:21:01:91:DC:8A:35:9C:2B:C2:3D:0E:3D:52
X509v3 Authority Key Identifier:
keyid:DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5d:97:07:10:89:0a:ff:96:bc:dd:f9:79:12:77:22:b9:62:
36:8c:73:d2:d6:f6:2d:f7:e4:c6:e4:ac:8e:45:8b:51:c4:3f:
23:a5:14:4e:37:52:5a:cd:d8:a8:57:5b:42:51:29:63:ff:00:
4e:09:fb:3b:0b:c8:c6:0c:f3:3a:0d:be:df:da:22:b7:0d:08:
8f:7f:46:bc:05:10:87:f3:95:d0:a8:9f:2f:6c:44:6f:0e:18:
86:57:b0:8d:d1:5c:08:25:c3:3b:04:c9:b2:bc:c8:45:78:f8:
df:7e:44:87:6e:90:56:0c:f4:b3:7c:0d:20:34:a3:fa:cc:fc:
1a:7d:d5:5d:c6:78:97:bc:5b:15:e2:8f:ee:3f:e7:da:31:38:
e5:c9:6c:ff:a9:7d:f5:07:77:53:35:7f:44:3f:eb:af:df:fa:
36:ba:34:07:ca:07:54:55:b7:b8:d3:74:3f:90:5a:20:64:9b:
e4:63:b3:55:16:d9:f2:ee:7a:e1:5b:24:b3:bd:6e:c7:dd:61:
87:d4:00:65:9d:99:38:ca:34:8b:68:9e:c0:65:90:8b:15:0e:
b5:27:31:fd:bf:26:ea:a1:ba:c1:fd:1e:22:fd:f9:72:35:ab:
61:c1:1a:a7:96:2a:0f:24:80:fa:d6:d3:86:fb:03:e9:26:1c:
af:e3:d8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:26 2025 by rpki-client