Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier: fDBsk63waNWy/6rAmFYZevJtL4ygsrlIg6fIBSI8/Ow=
Subject key identifier: 6A:3E:5C:4F:43:F5:17:77:A5:8E:1D:F8:E2:3E:F5:88:FE:A5:D7:98
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 019607F9526C78D882387B4151FF7D40D85D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number: 0AD2
Signing time: Sat 05 Apr 2025 22:01:42 +0000
Manifest this update: Sat 05 Apr 2025 22:01:42 +0000
Manifest next update: Sun 06 Apr 2025 22:01:42 +0000
Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: aSoLle3caPTK/yhnqMkjWMULbST2nYaamijRHGLMeow=)
2: XaWBl1pdgCEAOtWYlDnABozWGpY.roa (hash: NkTYxkGxoFs3l9oUz9ZXBu6um1xVsgaeI44+mBnF24s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:07:f9:52:6c:78:d8:82:38:7b:41:51:ff:7d:40:d8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: Apr 5 22:01:42 2025 GMT
Not After : Apr 6 22:01:42 2025 GMT
Subject: CN=6a3e5c4f43f51777a58e1df8e23ef588fea5d798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:38:08:bd:79:4d:95:d9:1e:a2:49:5e:c6:
d2:ac:77:9e:48:e0:c3:f5:7a:21:a7:dc:d3:ef:72:
f0:04:00:fb:04:73:8b:31:aa:a0:bc:36:7b:05:c8:
53:b3:b9:8e:3d:49:b5:9c:9b:cc:29:7e:50:e6:9c:
e1:1e:c8:1e:f4:76:fe:af:c9:db:ab:8b:11:2d:1a:
68:81:83:cd:3a:3a:c9:a0:a4:0e:51:e9:34:af:49:
56:8e:2f:9e:69:3c:10:31:4b:b3:45:a1:58:40:53:
d2:09:37:0e:72:6e:7a:40:17:57:ac:d8:af:43:f7:
bf:b7:5a:45:f1:96:7b:b7:94:c8:37:6f:b0:06:34:
63:5b:4c:f3:6e:12:ee:9d:dc:81:86:26:fc:76:2e:
80:2b:9a:88:2f:d2:9f:96:ba:0b:5d:57:8b:8f:f4:
04:8f:a7:45:46:26:6c:3e:41:2a:86:23:ca:82:36:
8f:b4:75:6d:8b:56:d1:46:ed:10:4c:3e:d8:9f:4c:
99:0d:18:1c:e3:68:97:bb:31:f1:eb:51:e7:ea:0f:
9e:62:c4:83:bb:31:d1:20:7f:af:b4:9d:b2:78:bf:
b1:08:ee:a5:b7:3b:08:c4:79:6c:b2:4a:a9:87:3c:
ea:e2:9f:ec:a9:52:fd:7a:32:6e:dd:07:08:9d:44:
e4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3E:5C:4F:43:F5:17:77:A5:8E:1D:F8:E2:3E:F5:88:FE:A5:D7:98
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:91:8a:7f:c7:03:73:69:46:00:ad:99:58:8a:95:ad:52:e3:
27:66:9a:e4:27:9a:ba:d2:fe:14:b6:c7:cc:4f:93:17:cd:89:
d7:cf:6e:aa:7e:8d:13:5e:34:36:18:3a:39:95:60:df:f4:ac:
f7:2f:49:88:8f:e7:40:56:47:8c:aa:88:72:27:01:64:f9:a1:
a9:7d:d2:d0:da:3e:59:03:d3:76:f2:e5:c2:11:ac:af:49:7a:
cb:f9:84:01:f9:07:4f:6f:4b:80:aa:0a:89:d7:81:85:a6:33:
1f:e9:96:b5:53:79:1b:c8:80:9c:f2:c9:51:45:a4:a8:ff:4b:
54:af:50:a1:8b:a1:54:c2:a5:08:38:5d:08:ff:bb:6b:bb:3d:
84:77:58:38:16:09:db:1f:f7:fb:96:a9:9e:1d:95:8a:be:25:
08:d4:9e:ba:55:bf:25:05:d8:d1:18:41:40:bb:47:d3:ee:37:
b7:e4:ca:b7:67:18:55:9c:fa:76:20:4d:9c:fc:5e:d8:28:ce:
0c:77:35:5c:92:72:54:94:b2:b6:f8:3a:75:08:d6:5c:32:d1:
91:42:00:ee:9f:cd:94:74:dd:4a:a4:ef:b3:28:59:94:9c:09:
68:83:ef:b4:67:d2:66:a5:43:7c:d8:84:e3:d6:22:70:7c:c9:
56:50:79:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:53 2025 by rpki-client