Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json)
Hash identifier: EsGMQqQV8jTPB6HRTB7kB63/ehJnhDHvQmAyVeRlzXE=
Subject key identifier: 3E:37:5C:26:BE:BA:82:19:AB:64:38:00:15:0C:51:3D:FF:CE:1F:C4
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 01965982AE0DEACAB95A08F3D4654ABDAB5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
Manifest number: 0BE2
Signing time: Mon 21 Apr 2025 18:00:58 +0000
Manifest this update: Mon 21 Apr 2025 18:00:58 +0000
Manifest next update: Tue 22 Apr 2025 18:00:58 +0000
Files and hashes: 1: 1-Mg08ooGsj9VN-8i0khJXBw3jVQ.roa (hash: cP0po0zW+LQnzjrZSQHX9u1ecovx/li0WZt0UNimdaw=)
2: E1tiJF9pbO0eSBPSwr1et8cPjUs.roa (hash: KqE7+MnUHX3Ki13WWK14Wm5uLKCL0/xXzqRQ5h2lQNo=)
3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: 6JGmEsEX0UUBxZ7bz8ZT+UHshKrFQhjZpO+e4S4sX+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:ae:0d:ea:ca:b9:5a:08:f3:d4:65:4a:bd:ab:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: Apr 21 18:00:58 2025 GMT
Not After : Apr 22 18:00:58 2025 GMT
Subject: CN=3e375c26beba8219ab643800150c513dffce1fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:64:39:bb:96:5f:52:50:78:dd:fc:8d:6f:
b0:a4:a4:06:bc:23:70:1c:31:1a:04:6b:b8:99:6c:
82:47:09:fc:dd:bf:88:44:ec:d3:d4:68:12:a2:92:
4d:72:0c:df:4e:3a:df:ff:a8:59:22:97:13:27:6d:
e3:0f:38:38:c3:51:9b:40:5e:9d:fd:cf:02:3c:08:
86:8a:a7:ca:95:e5:21:91:3f:c8:b5:46:78:85:08:
0a:f8:ac:e4:59:e2:28:df:f1:1b:76:3d:9f:2c:2c:
af:7b:95:d5:c2:5e:28:97:c6:12:e5:ad:6e:32:d5:
38:2e:79:50:30:ac:2b:89:68:85:a2:40:46:a2:e8:
fb:80:e8:22:ae:07:25:4b:ed:18:40:2b:1c:a4:f9:
af:5c:86:0c:60:ca:de:c0:d7:b0:80:a2:95:57:6c:
a0:e4:a1:da:ef:f4:e9:f2:65:b1:a4:88:ed:6e:7f:
c4:99:12:ab:58:1d:5a:24:cd:0c:60:d2:0e:d7:16:
e6:d3:8c:54:60:91:b4:72:26:68:b0:93:bb:3d:7e:
bd:1c:c2:50:a1:04:6f:82:bf:37:80:3e:4a:a5:cf:
ed:ee:5b:61:c3:82:f5:2f:e5:d3:b5:11:db:9a:43:
0e:3d:51:ea:a8:d1:ea:e8:ff:70:be:b5:3a:2c:b5:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:37:5C:26:BE:BA:82:19:AB:64:38:00:15:0C:51:3D:FF:CE:1F:C4
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:55:1e:2e:15:ad:ba:a4:2a:a3:c2:f9:35:76:41:3b:4b:91:
e7:43:a4:70:27:f1:99:cc:c3:89:ec:f5:4c:f3:85:a4:d1:af:
f5:50:d6:68:03:3e:bb:fc:f1:0e:51:6c:f7:b4:64:f4:b1:14:
f3:60:8b:78:d9:81:91:a3:d8:d8:65:2e:73:8f:d0:6b:57:69:
03:2d:9c:ae:53:54:88:41:eb:ca:7d:1f:5c:99:a7:d4:ce:f2:
c1:2d:ee:b3:13:8b:32:5d:d6:db:e7:6c:71:5e:be:99:15:4a:
b7:b1:0d:d8:4c:b5:c2:f9:1f:24:bf:0b:77:0f:d8:b0:6f:71:
f3:f0:ef:76:85:5e:07:ea:ce:2f:5d:07:7d:8d:58:53:da:75:
2d:7d:8a:78:ec:90:6e:37:ad:d4:ea:ed:b9:78:8f:5a:cf:d7:
dd:6a:b6:01:ae:05:f2:e5:b2:8e:16:3d:40:58:5a:96:be:ff:
53:66:f7:67:85:10:c1:73:d6:cb:3e:75:bf:5c:34:a9:0c:6d:
e8:67:9a:fe:69:24:16:a3:a8:d7:81:49:a7:fb:bf:cd:95:03:
b2:70:7c:2e:34:8e:7d:3d:2f:8a:3f:20:06:76:4f:f5:60:1e:
89:c0:1d:2e:df:e5:8e:a9:a2:02:43:83:63:94:f8:dc:e4:53:
15:93:c9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:16:00 2025 by rpki-client