Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
File: 3KonREWCbj15XD7RjCdwDurBymI.mft (raw, json)
Hash identifier: 3x5FrYN4tM0xmdeByJCbUVorFsJwSpOfYsUmvDQ/+Ns=
Subject key identifier: 3E:E3:1C:80:B0:D3:83:37:A1:69:B7:8C:B2:39:86:28:02:CF:24:0E
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Certificate issuer: /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial: 01964AB3E67A098CB8C7C1F17D9684B92542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
Manifest number: 0C34
Signing time: Fri 18 Apr 2025 21:00:25 +0000
Manifest this update: Fri 18 Apr 2025 21:00:25 +0000
Manifest next update: Sat 19 Apr 2025 21:00:25 +0000
Files and hashes: 1: 3KonREWCbj15XD7RjCdwDurBymI.crl (hash: XecXTVDqOKeCj3/DeniRs7/g5AT1oixxGNX/zr2z4BM=)
2: gR7sUG_8lonr2gVlkEM1ADj5WcE.roa (hash: UjAmmUt2kVRUK4S0rWxF0FYuOfHn0p6w6/7yryAGIf8=)
3: x5BcxByiZpVNAIlZM7Ls67DF_VI.roa (hash: JHq7GmHRUBUB9iENpddREelx6fHNpJzwzmpidFpFMBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b3:e6:7a:09:8c:b8:c7:c1:f1:7d:96:84:b9:25:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Validity
Not Before: Apr 18 21:00:25 2025 GMT
Not After : Apr 19 21:00:25 2025 GMT
Subject: CN=3ee31c80b0d38337a169b78cb239862802cf240e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5f:a3:1e:14:db:1a:dd:42:c2:7e:af:b2:dc:
42:ae:4a:62:64:85:67:6a:2a:0e:56:a9:4f:87:38:
f8:a8:21:a1:57:8e:13:b7:1f:f3:94:ee:2b:59:2f:
94:92:91:5a:98:4e:1c:34:8c:82:f4:8e:a5:a1:4c:
1b:61:f0:c8:8a:73:6f:9b:8e:20:21:fa:b3:48:5c:
d0:19:f3:07:5c:c4:eb:7e:a4:b7:c3:4d:18:4b:0c:
ee:d5:9d:cb:17:d0:2e:3f:21:68:36:12:69:9d:64:
cd:68:b8:1b:e8:7f:73:be:9f:bc:03:84:ad:57:e2:
10:4b:44:f0:0c:d8:68:b0:81:4d:3c:4e:ac:4d:4a:
45:9c:40:db:27:86:47:50:22:b0:9f:3e:ba:a8:a2:
6f:16:3e:12:ac:dc:3e:38:c7:b7:8e:b4:6c:54:2b:
d7:3e:b6:44:b7:c6:54:e3:79:ff:e1:44:4b:84:25:
99:c7:9e:d6:59:74:a7:fb:c9:9a:ec:83:12:b1:45:
d5:93:7c:19:91:55:7b:fd:16:8b:ff:59:df:71:a7:
4f:70:0c:69:b8:1b:44:0c:aa:64:ee:02:ec:29:0f:
84:30:1c:5a:56:91:49:7a:89:37:c7:bd:81:41:df:
04:6a:f3:c8:00:45:56:c1:c9:71:a3:c6:d7:a0:a2:
50:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E3:1C:80:B0:D3:83:37:A1:69:B7:8C:B2:39:86:28:02:CF:24:0E
X509v3 Authority Key Identifier:
keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:9f:d8:35:f9:1e:fb:3d:e2:58:ba:e9:b8:a2:2a:c0:73:3b:
cb:2c:7e:4b:bc:c1:84:1d:a3:f6:fd:c3:e8:e5:87:c2:90:ff:
e0:7e:66:3d:1a:07:e2:c9:1e:95:85:8f:5f:19:57:3d:50:08:
8c:e7:51:25:a8:c8:2e:62:76:0f:b3:18:72:ea:81:70:09:85:
52:a0:03:95:4c:1f:35:2a:8d:05:2b:21:f5:8a:bd:6f:6f:f0:
3f:3d:81:07:08:0e:af:3b:d0:12:23:49:cb:b9:8a:6c:26:e2:
47:45:51:c3:f3:7a:d7:99:14:7a:dc:13:af:7e:89:b3:ff:fa:
40:44:89:88:38:02:3c:53:83:2e:20:26:13:4e:d8:cc:27:fe:
ef:62:49:e0:75:6f:06:e4:87:0d:bf:9f:bb:f6:9a:41:c5:a2:
03:7a:62:de:2e:d3:81:be:3a:36:66:cd:66:93:ce:bc:5a:ea:
bb:39:d1:65:60:7a:51:5d:cc:d5:83:92:d8:e7:07:eb:7a:4f:
77:16:4d:fc:d5:97:b1:bb:96:7c:33:99:ba:4b:9e:7b:9a:5b:
f0:64:3e:a9:e0:ba:af:cc:4e:69:74:c5:fe:6d:40:06:4a:47:
7c:e8:68:0f:47:b6:c8:25:70:89:dd:c3:fc:a9:a4:c3:32:f7:
21:e5:a7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:55:25 2025 by rpki-client