Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier: PvLsITdBHEBGiBadu0Uf/Q2M+P37rtU7wOqi53UOPv8=
Subject key identifier: AA:17:95:EB:AE:5F:53:03:7E:D2:DA:D0:4D:63:DC:80:25:5C:56:DF
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 01960A554811949CC0F95255849BE923327B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number: 146B
Signing time: Sun 06 Apr 2025 09:01:23 +0000
Manifest this update: Sun 06 Apr 2025 09:01:23 +0000
Manifest next update: Mon 07 Apr 2025 09:01:23 +0000
Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: hbp00whqfOjwHa7+byt+RIYQJ25BP+Wmu70MYuouvcY=)
2: KC65iLduV38Y-_4YeZcOkvub1x0.roa (hash: 59wDbBZd77QyRnr9wiaIVyjbp4l+GRhLfxwyuRW0y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:55:48:11:94:9c:c0:f9:52:55:84:9b:e9:23:32:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Apr 6 09:01:23 2025 GMT
Not After : Apr 7 09:01:23 2025 GMT
Subject: CN=aa1795ebae5f53037ed2dad04d63dc80255c56df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a4:7d:81:16:3e:b0:5a:3c:d8:9d:96:4c:27:
d4:da:54:77:b1:75:d4:73:22:97:c6:27:03:1e:67:
4e:6b:f5:3c:75:88:f5:13:d4:94:82:98:0e:3a:5e:
2c:86:eb:02:23:34:07:45:42:dd:8f:4f:02:fb:92:
0d:fb:25:75:98:c9:2a:cf:bb:d0:e2:02:6d:6e:64:
78:45:78:71:34:9d:62:43:98:0d:05:7a:87:46:75:
9b:d5:66:ee:2c:41:c8:c9:d3:c1:49:74:73:ae:9b:
2a:c7:fc:7a:ee:70:7e:14:bc:b0:c2:6b:93:c1:86:
1d:d4:52:f9:b2:6a:a8:46:0d:31:bc:a1:71:d5:9b:
38:cf:a9:ef:25:04:75:cc:2d:3e:97:52:5b:df:07:
c6:d3:d4:db:9f:72:23:78:f5:d4:f7:2b:79:8a:e5:
c5:86:3b:1c:ba:0a:5c:ac:76:06:28:2a:5f:06:5b:
cd:86:9b:c4:1a:1a:8d:99:67:09:e4:c4:53:53:bc:
9e:c7:dd:7f:87:06:aa:67:7f:21:26:13:30:5d:dd:
68:7f:78:f1:e6:20:e6:8c:6a:2e:8a:bd:e0:b2:da:
01:1f:da:89:27:1a:f7:07:30:5c:a0:65:5c:8e:61:
55:bc:b2:87:cd:7d:14:90:ef:4d:9d:bf:38:70:60:
67:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:17:95:EB:AE:5F:53:03:7E:D2:DA:D0:4D:63:DC:80:25:5C:56:DF
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d7:8c:86:c2:b3:b6:f1:2b:b7:7d:4e:a5:e7:78:43:69:78:
e6:46:b2:d5:6b:8f:fa:c3:cc:e7:51:cc:81:65:ee:7b:16:41:
62:2d:8c:a5:0d:a9:d8:23:2b:e9:29:61:61:c3:48:82:bf:7f:
42:b1:b4:a8:94:ef:04:c8:84:6c:fa:6f:a4:d3:90:b4:99:49:
e7:c4:1d:b1:f0:0c:97:44:df:77:c2:4e:ac:30:13:82:0b:72:
5a:13:50:e8:c8:70:dc:ec:32:15:50:2e:57:54:00:81:9a:9d:
7a:5c:81:ca:65:a1:e4:d2:6c:57:75:2a:7c:dd:36:79:4f:57:
96:a1:1d:18:af:e3:a4:37:f2:5b:b8:ea:8f:dd:68:d3:7b:af:
df:c4:89:7a:0e:3a:e8:8e:dd:c5:1f:46:a4:cc:3a:77:cb:57:
48:22:ba:a3:07:97:2f:50:2e:83:39:f4:a6:84:83:fd:e1:68:
72:9e:92:fd:9d:ac:38:b6:8c:29:a7:fe:7d:29:50:37:ff:08:
71:59:57:3f:57:8c:9e:ad:5d:3e:42:94:46:bd:36:e8:fb:00:
7b:be:e9:d1:a4:39:a5:19:f9:da:72:a8:55:2f:7b:1e:e6:94:
f5:2f:b5:19:f8:67:ad:59:cb:c5:ff:9f:f7:2b:bc:50:36:5a:
7b:e2:87:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:41:29 2025 by rpki-client