Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: 3hc24cFYMRhGTOv3oMPdVAIfZy97ULr5Te+wwNiso/c=
Subject key identifier: C1:90:82:92:97:C9:5B:8E:89:B5:E2:C7:4B:78:B9:7C:0A:C1:D5:70
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 0196545BAD043D613C414EB949816C561AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 0E3E
Signing time: Sun 20 Apr 2025 18:00:16 +0000
Manifest this update: Sun 20 Apr 2025 18:00:16 +0000
Manifest next update: Mon 21 Apr 2025 18:00:16 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: WvGeG3jA/aRzdtZKWXaRvpgOoNmyFjUIViO5cjApM6Y=)
2: M0CEGpqdnFyhH05u6ywrw5xpjxw.roa (hash: Da8bL20Ezk/7GnIViJo/xS7eFj2lqLDIbA2oioZuSt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:ad:04:3d:61:3c:41:4e:b9:49:81:6c:56:1a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Apr 20 18:00:16 2025 GMT
Not After : Apr 21 18:00:16 2025 GMT
Subject: CN=c190829297c95b8e89b5e2c74b78b97c0ac1d570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:3a:86:0b:03:50:67:6f:10:d0:24:51:a0:
29:42:12:2f:cd:64:a7:63:af:09:da:86:ae:5f:22:
92:55:1f:fb:41:3e:d7:11:8e:89:86:e3:36:2b:be:
44:34:0e:ff:88:80:77:d5:99:68:d1:d1:fa:2d:39:
40:38:45:5f:7b:1a:5c:9c:c5:fb:5f:07:82:c7:15:
59:b7:f2:4e:2d:85:82:4a:4f:cc:aa:d0:d2:60:60:
55:58:e4:d0:d0:56:36:56:dd:66:a8:b6:fa:5e:53:
36:3a:eb:4d:0a:9c:ba:6b:a6:ab:f9:86:6d:21:a8:
01:52:bc:c5:47:18:a7:72:00:6c:c8:da:6f:56:9d:
0e:9b:63:86:73:0a:1b:db:35:c1:8c:04:c1:5a:3f:
a4:1b:a5:12:b8:13:69:45:7a:6e:18:98:e6:74:df:
c6:4d:00:e4:83:39:5c:65:7d:70:68:09:85:3f:3b:
0e:ea:b0:ad:79:57:f5:b1:83:46:4d:cc:7b:b6:ed:
fc:a9:1a:68:9b:0a:67:ae:e9:15:87:6b:c0:78:bf:
6a:fd:6f:6a:32:c1:d2:48:79:87:b9:76:68:15:ce:
23:43:b2:0b:0c:9b:35:58:4d:c2:1b:df:c4:b0:1c:
a2:5a:d9:00:a9:4e:7e:bf:19:18:be:3b:12:6a:02:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:90:82:92:97:C9:5B:8E:89:B5:E2:C7:4B:78:B9:7C:0A:C1:D5:70
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1d:6a:78:d2:2c:de:5e:cf:5b:82:b5:64:00:cc:46:92:e9:
0b:b1:fe:78:5a:7d:87:36:a1:e0:3f:2b:20:86:77:91:93:eb:
5c:3f:12:90:21:e3:ca:6f:40:87:d5:82:f7:51:31:93:7a:6c:
3f:d6:1a:16:d2:5e:e6:3d:81:b5:b3:80:1e:b5:c5:04:65:b3:
24:bc:c5:85:fa:10:82:46:8b:1b:fd:bf:93:db:67:fd:b7:ad:
12:1f:ff:bd:92:1f:8c:2c:46:8a:60:89:d1:d1:93:52:9d:0a:
ab:a6:6f:6f:fd:cd:3c:c7:59:7c:54:92:d1:a1:ea:5b:bf:c6:
54:c6:fd:e9:1e:e3:db:ef:3d:89:6f:ae:34:5b:da:c2:72:45:
c4:e4:d2:34:2c:36:95:46:ec:22:5d:97:be:85:45:cb:35:1d:
0a:a9:94:05:7c:ae:7b:42:4d:b6:6a:06:6b:1b:99:df:41:1b:
75:01:9c:17:ea:f5:89:47:be:e1:f9:19:71:de:77:6f:40:c4:
ad:26:76:11:7d:e4:cd:93:46:3f:1b:1a:ee:3f:c9:6f:08:9e:
8c:b0:bc:02:3b:4e:c8:98:52:52:e1:e0:c7:28:99:b8:64:0e:
9f:6a:f2:15:7d:78:81:f0:42:32:3f:86:c7:d9:08:d7:71:84:
d5:60:08:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:08:17 2025 by rpki-client