Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
File: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json)
Hash identifier: MOIJHd397bhYs7TfE14cfVJwubVCsMDj/ws3MoRGDHY=
Subject key identifier: DD:85:72:66:00:B5:A6:D6:98:9C:6F:07:95:E7:A3:34:A8:4C:96:FE
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Certificate issuer: /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial: 0196526D4CDDDDBFEA5BF7672E9F9D8A45A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
Manifest number: 1185
Signing time: Sun 20 Apr 2025 09:00:16 +0000
Manifest this update: Sun 20 Apr 2025 09:00:16 +0000
Manifest next update: Mon 21 Apr 2025 09:00:16 +0000
Files and hashes: 1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: XaJh5JGRYuoxyMWxTa31zTR1TBw57v8rQu6Uron6ZYk=)
2: _iwCmsjTAlw634BVcFH9x4y6od0.roa (hash: sGzYd7+zk4VbbBPH9QI8yNwz1RatcjDRVrzAv9yiEMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:4c:dd:dd:bf:ea:5b:f7:67:2e:9f:9d:8a:45:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
Validity
Not Before: Apr 20 09:00:16 2025 GMT
Not After : Apr 21 09:00:16 2025 GMT
Subject: CN=dd85726600b5a6d6989c6f0795e7a334a84c96fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:0e:50:6a:d3:ab:b0:74:c3:20:50:14:c5:
53:5f:ed:1e:a1:9f:2c:38:db:c6:ba:e0:5b:c9:57:
da:b6:e9:74:73:3e:83:b8:8b:61:f9:02:37:89:09:
3b:22:8d:12:85:01:b0:03:8b:df:73:24:e7:42:a0:
fa:ec:f9:cc:a8:19:81:d3:ff:05:6c:1a:d8:48:31:
c8:6d:91:0b:76:ef:f3:c0:71:7f:e8:61:a0:83:d7:
1b:b4:57:25:c2:03:c1:f0:9a:8d:62:fc:ac:87:03:
07:17:c0:e4:31:71:c2:b1:51:a6:1b:9d:08:77:5c:
47:af:31:99:85:f2:db:e0:c2:4b:35:9f:0e:58:f5:
f5:74:be:b5:e4:87:7c:b3:a7:82:07:bc:96:eb:a9:
c4:6c:81:fc:be:a6:ab:3c:c6:e9:61:e9:c5:60:5d:
9a:cb:68:0c:cf:d4:06:31:8d:29:e7:d8:84:71:62:
8e:58:26:ac:60:fc:85:b6:2e:db:ef:15:bc:c0:97:
58:95:4d:ca:6c:11:a1:24:ea:0c:02:59:6c:f3:06:
29:42:8b:57:5d:6f:08:e3:27:9a:53:bd:53:b5:40:
06:bc:58:5c:84:39:db:2f:3c:25:e1:ad:06:c8:9f:
37:2e:f5:85:b4:98:c8:9c:7e:0e:38:93:d7:83:16:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:85:72:66:00:B5:A6:D6:98:9C:6F:07:95:E7:A3:34:A8:4C:96:FE
X509v3 Authority Key Identifier:
keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a4:7f:af:86:07:2b:60:0f:d1:0d:df:6c:4a:a6:bd:57:4c:
b9:51:d3:fa:e7:e4:08:df:c8:ed:d9:fb:99:b8:2e:cf:67:fc:
7d:6a:ba:23:04:42:3c:ed:90:79:eb:a3:a1:45:f6:3a:f7:54:
71:7c:87:26:80:c8:2b:93:8d:a4:88:84:16:98:e4:6b:34:1d:
17:73:05:bf:38:c6:0c:e4:3d:0c:a7:ef:75:59:b3:30:44:d4:
21:6a:d7:13:87:6e:12:5d:45:fc:a5:f2:0b:20:66:40:b0:f4:
a9:fb:bb:b1:a3:01:05:59:b6:af:41:dd:b6:81:06:d6:41:f7:
7f:15:fc:b2:58:5b:31:55:04:db:d5:c4:4b:45:3a:97:55:66:
05:e4:e6:c1:8e:6a:bf:09:26:31:76:33:5f:1f:d6:e4:85:35:
e4:73:86:6e:0d:fc:0f:9e:34:30:76:ff:18:12:2b:ab:3f:c5:
40:9e:ec:e1:7a:09:bc:77:15:0d:68:c2:d0:4d:7a:65:9a:6d:
77:a7:e4:4a:a8:1f:9f:13:11:08:25:ab:41:02:4b:b0:7e:88:
f6:f7:ce:1e:e4:e9:67:a6:0b:b0:de:d2:b8:8b:99:51:69:dd:
b2:68:fa:7b:b7:33:2c:32:bd:c6:6a:44:40:ee:c9:00:a9:41:
2c:e5:21:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:17 2025 by rpki-client