Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: i3tcgA2ep74AOzsqWmSXJDDyoiKQvDq7iZug2wi4+WE=
Subject key identifier: 52:FC:2E:46:AB:B5:A8:E0:18:30:D5:D9:9C:74:D7:51:27:9F:9A:05
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 01960F0DF15ADD09EAC9A5072AFB1DD91708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 14DA
Signing time: Mon 07 Apr 2025 07:01:33 +0000
Manifest this update: Mon 07 Apr 2025 07:01:33 +0000
Manifest next update: Tue 08 Apr 2025 07:01:33 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: 2+wHaQgIBBNbO5w6Z1V2kROYJrL5uU5/ZhwlLyhe1V8=)
2: 9euEZiQBZa0KQy87mhddaAGMyJs.roa (hash: SlkEYhw31htGhY3rwyORB+KNW056wx1mf03bV0slrXo=)
3: PbQAq4tBfBzJf67NNR29Pj0FkmA.roa (hash: 68zQoRFiAUVZyRagTzVHGcIdd/jEkcY9EEgWfXz5qFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:0d:f1:5a:dd:09:ea:c9:a5:07:2a:fb:1d:d9:17:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Apr 7 07:01:33 2025 GMT
Not After : Apr 8 07:01:33 2025 GMT
Subject: CN=52fc2e46abb5a8e01830d5d99c74d751279f9a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:94:bf:a9:76:1a:8c:06:ce:1e:4a:7d:23:
3d:ef:cc:a7:c6:01:f4:00:b0:d5:0b:3a:16:a1:f5:
32:e1:89:55:f0:e5:9c:b9:b9:23:bc:61:31:47:9e:
01:a0:e3:20:54:20:68:a0:ed:e8:6e:56:da:14:c1:
45:24:8f:1f:c0:a6:87:7e:8c:ef:d8:6f:4c:23:c4:
ba:c2:a0:51:c8:66:a1:51:41:6c:58:ff:16:bc:7b:
c3:49:6a:0d:a3:5b:32:0d:1d:83:77:28:b2:cc:b1:
80:78:5c:40:77:10:ab:2c:aa:c2:42:01:18:a7:89:
9a:ae:dd:97:1a:58:bb:cd:b3:48:0c:83:73:f8:bc:
06:b1:06:b4:cd:97:3f:4a:47:6e:dc:98:7c:ea:1e:
fd:81:c9:e0:b9:76:99:50:ca:55:3b:26:ae:6f:01:
b9:8b:ed:d7:7e:13:c0:dc:5f:fa:71:5b:a8:e3:cb:
cf:47:1e:7b:22:bf:19:48:9a:95:c5:3a:93:21:e9:
45:78:6f:ac:e0:6f:ca:5f:54:1a:79:82:87:9a:ff:
00:7e:6d:e5:bd:14:bc:41:49:5c:0d:ca:db:8b:9f:
a9:30:15:ff:6a:2b:0d:36:bd:03:7f:a9:07:e6:ee:
c4:f1:6f:a8:cd:91:72:ed:72:05:eb:26:f1:d6:b9:
ea:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FC:2E:46:AB:B5:A8:E0:18:30:D5:D9:9C:74:D7:51:27:9F:9A:05
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:71:27:d6:1e:c3:bf:46:05:21:86:ea:0d:8b:fe:7e:2f:f7:
db:84:ab:6a:7c:77:12:ee:97:2d:a8:1c:04:af:ad:28:46:67:
7a:68:43:52:7c:07:c3:8d:10:03:cf:42:7a:72:4d:e9:fd:4c:
c6:0a:21:2d:69:0a:4e:ae:95:4f:e5:c7:4d:6b:0f:48:07:a7:
5b:d2:dc:87:99:f0:84:41:c1:eb:6b:33:1d:40:62:11:6c:2c:
a7:1f:47:e2:a0:26:9a:47:a1:0d:35:9d:c5:f9:c3:27:a5:ba:
fc:44:ae:f2:26:ac:7c:70:4a:c8:23:1b:91:b6:28:7e:b9:b0:
c2:c4:cc:e9:6e:77:de:b3:98:8a:b0:64:85:f3:b1:14:c9:26:
ce:31:ab:e6:e9:a4:55:1c:b5:98:6b:19:83:21:f8:b0:39:04:
7e:34:cc:51:65:60:69:87:a5:f3:03:24:2a:6e:d5:c4:f0:62:
d2:e5:89:3d:fa:fc:48:c5:78:6b:92:b2:c9:74:4a:da:1a:1a:
13:ce:5c:b7:f2:9e:1c:85:c5:7c:79:b1:ff:1f:3b:12:30:d5:
ec:49:b0:3d:77:2b:89:95:e8:d6:94:5c:0f:b9:b6:54:bf:8c:
16:0c:7f:96:aa:c4:72:bf:d2:1e:c6:01:0a:6e:80:c7:05:f8:
ea:27:ba:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:11:57 2025 by rpki-client