Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
File: 3vwmhsKavvGPQLMOfpUTJHpm7xM.mft (raw, json)
Hash identifier: HxzK27VEOMUqrpKuvaGxpVWOohNZXP3hOSeZy3HX5eM=
Subject key identifier: 63:50:4F:3C:B0:49:66:7D:82:D8:F6:14:D8:D4:F1:B8:12:EC:C1:43
Authority key identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
Certificate issuer: /CN=defc2686c29abef18f40b30e7e9513247a66ef13
Certificate serial: 01964556A2388BB3FF04C88F8A64E356D2B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 20:00:27 +0000
Manifest this update: Thu 17 Apr 2025 20:00:27 +0000
Manifest next update: Fri 18 Apr 2025 20:00:27 +0000
Files and hashes: 1: 2jede6KT-wWXlr-gV_HV5g4z3cE.roa (hash: mv6a2TTy4FTvxK1u9z+/AeZmzO5akrk+XnGtMMkB+UQ=)
2: 3vwmhsKavvGPQLMOfpUTJHpm7xM.crl (hash: ArXwXcc3GzE4kuRl34UQUONOR4p60MQbxSove8wD83o=)
3: IJD_U3KWZ58BdYUivTasUkoSb14.roa (hash: QMy/+qKyMyM01JHQHllqOzvjbF1AM/QefZV5csA0T9s=)
4: NxF2Cyt5llnCNI_vXdmc9sDjjDg.roa (hash: R2BQ5eg/vIm8OWNUAn8Iiim/Pq6eL5zypKjZ8nuw8W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:a2:38:8b:b3:ff:04:c8:8f:8a:64:e3:56:d2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defc2686c29abef18f40b30e7e9513247a66ef13
Validity
Not Before: Apr 17 20:00:27 2025 GMT
Not After : Apr 18 20:00:27 2025 GMT
Subject: CN=63504f3cb049667d82d8f614d8d4f1b812ecc143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:58:90:f9:a3:a4:02:0e:b0:2f:a3:ee:52:d8:
15:31:ce:c6:2b:78:d0:4e:20:fa:d9:ed:5a:da:96:
0b:84:84:47:ee:ec:56:1b:93:2f:71:f1:eb:3e:e0:
4f:1f:f0:17:bc:ef:44:56:95:1c:7f:cc:df:a7:61:
b5:55:d9:86:fc:ea:48:e2:f8:51:8b:74:f2:be:ed:
f3:e5:3d:c7:33:c6:15:b7:a4:f6:a1:59:3a:b1:7e:
20:fb:26:66:c7:9b:66:0c:2b:1a:96:af:42:05:05:
99:9f:88:6e:12:30:7a:4e:f4:b6:fb:09:08:37:68:
0b:eb:da:b4:4e:20:33:98:9a:a1:3e:f7:37:82:6e:
49:1e:6b:41:3f:a6:ba:30:f4:da:dd:39:4f:ac:fd:
39:61:af:b7:25:80:1d:5a:65:6e:e5:1e:db:e1:e2:
e4:43:2f:bb:1f:ff:62:35:57:fe:a2:ea:18:ba:13:
03:e0:55:1b:46:4e:4b:bf:2a:ac:76:9f:9f:5b:21:
3d:18:33:19:b0:76:80:fd:e3:3a:1f:50:38:21:a3:
ba:c2:6f:fb:ed:23:1c:b6:09:48:b1:7a:04:68:75:
e4:3b:23:fe:f1:4a:07:71:6d:33:8b:0b:91:60:7a:
d6:94:58:4a:82:bd:5a:c3:bd:f6:5c:79:2f:e0:1b:
14:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:50:4F:3C:B0:49:66:7D:82:D8:F6:14:D8:D4:F1:B8:12:EC:C1:43
X509v3 Authority Key Identifier:
keyid:DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:07:42:e6:97:c4:94:95:dd:91:05:64:3c:1a:4e:5b:4f:14:
1a:bb:a4:48:0e:25:de:37:f9:f4:fc:99:27:a4:b5:a7:e0:2f:
5d:74:5c:68:99:3e:4d:f2:38:b6:51:5f:12:ff:44:86:74:27:
98:1b:33:5c:56:3c:37:71:7f:15:95:eb:ba:60:27:0f:08:7a:
cc:30:65:c0:fd:f1:1c:66:cb:1b:42:dc:25:f1:85:48:4c:1c:
79:cc:85:48:14:6f:8e:5b:d1:bd:65:9a:0b:89:b0:9a:56:1e:
a5:b1:8d:cd:c2:e2:c6:14:e0:36:1e:a9:4d:b2:92:d9:3a:3d:
35:ae:30:a5:8c:f8:1b:e3:55:fa:ad:13:19:ba:ea:89:0e:e0:
e5:43:56:9f:bd:66:6b:3f:46:2c:9f:08:11:23:0c:8b:2e:02:
30:47:f8:6c:ca:aa:4d:74:23:81:f9:ce:0c:d6:1d:bf:e7:69:
d0:4f:61:7e:65:52:a5:55:d6:2c:20:cc:d3:93:50:6c:0f:0b:
4e:e9:0d:88:4e:a7:2a:3b:83:27:1d:6d:1e:12:7f:3a:5a:ac:
51:b0:3f:48:a7:ea:28:44:b9:0f:1e:c0:f2:70:7a:48:96:50:
01:b0:ec:ba:8e:1f:a9:33:00:4b:d1:9a:14:9d:0d:85:d7:8c:
51:36:22:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:15:19 2025 by rpki-client