Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: hcxW43+/dzSqhSIRd0WrjN92+0R2oxaO/tPhSR0Fi2M=
Subject key identifier: 78:67:A5:56:93:DC:06:34:DF:16:47:BD:AB:BF:44:22:E6:D7:CE:80
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 01964556B9851446517733624987F87A3FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 14FA
Signing time: Thu 17 Apr 2025 20:00:33 +0000
Manifest this update: Thu 17 Apr 2025 20:00:33 +0000
Manifest next update: Fri 18 Apr 2025 20:00:33 +0000
Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: etSQtj1rWIw3NMlxL1tPF+dBER53gttKcmKbcpNEAC8=)
2: FoF8ZUBZ5kCu4oa83zINkMjWAYM.roa (hash: RhcSxCtgICb2ZYm3ZoQOXVJ7hwELiIb6QSru+4BTc5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:b9:85:14:46:51:77:33:62:49:87:f8:7a:3f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: Apr 17 20:00:33 2025 GMT
Not After : Apr 18 20:00:33 2025 GMT
Subject: CN=7867a55693dc0634df1647bdabbf4422e6d7ce80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:90:ce:6f:2f:16:31:60:c8:0e:8b:01:2b:
9d:ed:56:09:5e:11:5d:b7:6d:42:d4:7d:91:58:87:
3a:b0:66:a6:fd:0c:79:89:9a:26:6d:6b:c5:07:fd:
f7:19:9f:cb:51:67:c0:b3:a1:ef:57:36:37:a8:95:
90:29:1f:2d:5b:91:5b:dd:25:f8:f3:69:e2:ff:9f:
56:81:e0:f5:8a:e4:d9:57:78:6f:c2:64:b8:1c:2a:
73:91:8c:a3:ea:85:73:6e:52:45:d5:d9:f5:f4:53:
04:f9:28:24:3f:13:ed:5a:fe:95:4e:db:cf:c1:78:
1a:f7:44:8d:b4:ac:80:fc:9a:35:b6:5d:26:a8:fb:
83:f1:31:78:a0:97:e6:ab:94:c9:92:c1:cb:7b:22:
dc:7d:5d:7e:49:a7:3b:9c:25:52:9b:67:c1:6d:c0:
5e:db:92:a9:9d:d2:e4:0a:d7:19:61:c2:8c:44:d9:
ee:06:6b:67:97:fc:55:7f:51:5a:17:7e:0d:60:2b:
dc:27:91:6e:79:07:36:23:fa:c2:00:b1:48:ae:4d:
62:e1:56:80:49:cc:9c:2c:6e:c9:6b:05:27:56:cd:
d2:28:72:61:f8:d7:c4:49:6d:a1:6b:3f:33:f0:de:
07:93:c1:74:b0:8e:6d:7b:ae:52:26:c0:e4:3c:53:
1d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:67:A5:56:93:DC:06:34:DF:16:47:BD:AB:BF:44:22:E6:D7:CE:80
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:ba:3a:8d:4f:ab:bf:ce:09:d2:d8:2a:e5:25:18:d4:16:f0:
84:6c:a8:53:f4:ca:98:dc:4b:b0:2e:0e:2b:52:8e:3f:f5:f3:
5c:87:40:5d:9c:34:9c:d5:6b:19:da:9e:6c:10:15:69:70:6c:
94:a2:95:05:27:d2:b8:44:44:e2:77:74:58:0b:5c:7c:91:87:
a0:56:1f:5d:bc:d3:f4:87:b1:79:af:06:c7:5d:36:75:73:38:
71:3d:fc:69:f7:61:d3:d7:da:13:32:47:5c:ca:0b:a8:44:59:
e0:a7:59:49:cd:3f:28:90:81:be:53:1a:6e:86:e4:d0:38:30:
31:90:96:65:f2:aa:f9:dc:4b:1e:72:d6:98:a1:a8:ca:6e:4f:
8f:8b:95:a5:8a:42:17:51:87:db:61:40:43:9b:cb:ab:a8:18:
bd:6e:b4:1e:84:ad:e7:53:70:21:32:d8:7a:0e:65:11:68:9b:
b4:6f:48:68:42:e5:d5:99:cf:38:14:0c:d9:97:ef:6c:b6:a5:
54:ce:af:d2:01:9c:05:53:8e:fb:72:6d:19:83:76:24:f0:f0:
da:6f:09:3b:4b:6a:6e:ea:8a:56:62:97:44:94:92:dd:53:7c:
95:ba:86:6a:c2:e3:b6:f9:b4:34:7e:6c:ec:d0:57:18:a0:35:
33:8a:b8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:43:40 2025 by rpki-client