Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: 5J82CM05VUzmtyEoM5Blrk+2zPvJRPqFGiS8yDgbwbk=
Subject key identifier: 2E:AA:EA:8C:07:F4:5F:90:7F:18:96:0A:1B:36:7D:4D:91:23:9A:5C
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 0196372DC402752C0B962CE00C0B18E8FF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 14EB
Signing time: Tue 15 Apr 2025 02:01:08 +0000
Manifest this update: Tue 15 Apr 2025 02:01:08 +0000
Manifest next update: Wed 16 Apr 2025 02:01:08 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: LIQj6ijjV+j+aO9o18LNRLBvj2KG/LRMSWPq4hGJlUc=)
2: ddyzrC5BC4wxEQNwmkjcZcFPmY4.roa (hash: 0XE307HFpJ7wb9YEVzh633mz+Wdn4W7KWCgB9kPDSrg=)
3: nB_zoF-5vRmGl3d9TG824Zcc-nw.roa (hash: m3z2itiLoAbrDtSbjfB2c49btcR+jFaVv3ZdkaLWcmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:2d:c4:02:75:2c:0b:96:2c:e0:0c:0b:18:e8:ff:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Apr 15 02:01:08 2025 GMT
Not After : Apr 16 02:01:08 2025 GMT
Subject: CN=2eaaea8c07f45f907f18960a1b367d4d91239a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:d1:b5:db:e8:a8:a3:1a:4d:63:76:ae:54:
4e:9b:dd:1b:bf:1d:0b:60:98:c4:07:f3:2d:a8:dd:
88:60:37:cc:a2:29:56:2a:4e:f5:23:20:dd:f9:0e:
e7:4d:f0:7a:62:dd:d7:05:c6:0e:2b:1c:09:54:e9:
ce:6d:dd:c9:fe:80:07:3d:37:13:a1:ba:87:78:35:
81:91:27:9d:40:a2:d7:40:cb:23:2c:85:f0:08:ab:
f9:03:e9:bc:dc:0a:bf:a1:a9:06:95:87:3c:f7:68:
1b:d9:8f:a3:e9:4c:7b:75:02:a1:68:53:eb:03:2d:
c1:68:df:9b:23:2b:49:56:31:6d:b0:99:0c:1e:d0:
4e:1c:40:b3:d1:54:28:09:29:09:e0:60:f4:29:48:
e8:da:71:d3:2f:5e:e7:72:bf:0d:e4:83:a8:c1:99:
ef:2e:4b:1d:11:82:f7:6c:09:ae:7d:52:b3:60:9c:
8e:94:4d:d8:9e:d4:a0:50:e7:37:05:e1:e4:2f:ba:
7d:d5:fc:7a:d3:13:85:87:97:e4:b2:17:4a:9e:be:
60:9a:c6:90:f8:16:1b:3e:78:88:d5:25:72:4f:43:
c4:25:4f:dc:bd:a9:26:c7:7d:bc:8f:62:31:60:b5:
cf:43:bc:c7:fb:08:82:85:9d:c4:89:28:1d:b0:48:
7f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AA:EA:8C:07:F4:5F:90:7F:18:96:0A:1B:36:7D:4D:91:23:9A:5C
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:29:31:57:d3:63:67:4f:57:18:60:3e:8b:3f:aa:0f:8a:3e:
4d:29:c4:d2:04:a4:b3:01:f2:5e:ba:cb:9a:65:20:6a:fb:51:
43:6b:1f:de:0e:05:1d:02:d2:f2:90:1c:46:f1:7e:70:ab:66:
be:70:c1:c9:df:6f:7f:7b:d3:ae:26:f8:e8:09:89:62:12:fe:
fe:fa:0e:b1:d7:87:43:da:d5:ea:64:66:1e:27:94:55:a4:1a:
91:86:80:4b:12:e3:77:af:75:c7:13:2e:2f:f4:16:c3:1e:e9:
77:be:1b:97:96:5b:00:49:5b:c4:7c:bc:3d:59:b2:c3:78:c3:
dc:a2:5c:5b:aa:e8:e6:94:63:d9:a6:dd:49:87:0b:ec:92:c3:
69:26:18:cc:0d:25:7f:a1:bb:83:13:6f:49:48:ea:4b:9e:6e:
f3:ce:3f:40:3e:43:b2:b3:b6:b4:45:b1:29:71:fd:18:6a:85:
99:59:48:56:6f:86:56:ec:85:88:e5:57:79:f6:27:e3:f0:a3:
d9:6a:68:6a:a1:d3:9d:ae:36:c3:38:39:54:4a:ad:20:f7:f1:
62:df:18:3b:2b:45:dd:ff:40:ae:47:9d:7f:20:a5:79:8a:ea:
37:f2:47:ca:b8:f4:55:c9:28:69:e1:8c:a6:64:3a:a4:34:33:
00:42:d8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:25:45 2025 by rpki-client