Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
File: 3MIAShrwMLqZ_PRR872I78U4Rqk.mft (raw, json)
Hash identifier: 3RE2L8H07ocAR+4DvC/83LvloE74wQ2G4RAu2SM/2Z4=
Subject key identifier: E6:B2:98:94:83:5A:3D:6D:20:54:D0:CB:D4:E6:DB:A9:C9:62:75:30
Authority key identifier: DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
Certificate issuer: /CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Certificate serial: 01960FB274CF460DDF2AC5F718E3DEDD0B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
Manifest number: 14DA
Signing time: Mon 07 Apr 2025 10:01:15 +0000
Manifest this update: Mon 07 Apr 2025 10:01:15 +0000
Manifest next update: Tue 08 Apr 2025 10:01:15 +0000
Files and hashes: 1: 3MIAShrwMLqZ_PRR872I78U4Rqk.crl (hash: YX0JkIDrNn0cdFsl0khgMtOwuVsgoBQq+iSTZ8J8cFU=)
2: AL-L8asVgI-s4USXW1Jxulz_8Sg.roa (hash: UF0FyApaz9L8VccFK4e4NgnphNtboD57IyF8hP0doDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:b2:74:cf:46:0d:df:2a:c5:f7:18:e3:de:dd:0b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Validity
Not Before: Apr 7 10:01:15 2025 GMT
Not After : Apr 8 10:01:15 2025 GMT
Subject: CN=e6b29894835a3d6d2054d0cbd4e6dba9c9627530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d9:67:36:a6:27:c0:7e:e5:d7:d7:6e:16:bb:
60:5a:6c:06:9f:57:51:96:13:98:21:48:a7:69:4e:
43:33:d4:b3:fd:68:0e:b2:39:dc:c7:75:36:f6:1b:
75:d0:6c:01:5e:5e:6b:8d:c7:a2:c4:dc:63:dc:ef:
67:39:2b:af:15:60:45:47:73:1d:25:f1:55:32:94:
c2:7a:1d:f2:8a:f0:63:fb:df:ec:b3:4e:60:84:8e:
37:8f:46:62:e4:9a:41:f0:76:5a:f2:09:28:49:64:
32:2b:f3:fc:11:96:83:67:70:b8:a0:a1:56:7b:d6:
db:9f:2b:1e:bd:32:08:60:c9:f6:4c:97:e2:e3:d3:
98:cf:6a:10:e6:6a:03:ba:61:8b:a4:5b:f5:06:83:
ae:8a:97:8e:c0:a4:43:a8:86:30:ec:60:0e:4a:0e:
2f:45:be:71:f9:be:eb:26:f0:cb:35:f3:23:14:5d:
fd:bb:eb:87:17:f8:db:12:1b:3a:18:73:90:53:b5:
42:e8:43:66:07:8a:65:5e:a9:32:f7:fa:ce:51:da:
a2:30:d6:95:2a:97:75:8e:85:72:3c:f6:79:74:e4:
bf:04:71:35:5b:a5:9b:38:21:f1:38:20:fa:9d:21:
53:2f:01:19:28:e6:33:2d:00:21:2c:ef:3a:98:b7:
94:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B2:98:94:83:5A:3D:6D:20:54:D0:CB:D4:E6:DB:A9:C9:62:75:30
X509v3 Authority Key Identifier:
keyid:DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1b:d9:69:bc:c6:f6:22:19:1e:11:55:82:dc:f6:35:c6:cb:
d4:09:76:51:14:1f:bb:19:ca:da:1d:9f:9f:05:03:62:cc:74:
04:29:45:3b:6a:45:f8:0f:38:9a:cb:12:af:31:76:05:41:af:
7d:fd:30:ae:60:53:be:09:dc:af:aa:ea:48:8d:0f:37:36:8d:
75:5d:97:94:46:d8:5d:e4:ff:be:ab:e3:a4:13:ab:77:0f:d1:
9a:e8:fe:e7:68:d1:78:80:d1:00:00:1f:e0:db:04:ac:99:30:
13:ba:49:30:cc:f6:c1:1f:36:d0:75:7c:16:ee:cd:b3:fe:eb:
bf:5d:b9:c1:ee:df:6b:87:6b:e5:9d:10:fc:df:11:02:db:ef:
6b:35:88:2f:78:52:58:a4:02:37:77:f1:c7:8c:a4:07:35:4c:
a9:74:17:6f:bf:27:f6:bd:67:05:cf:68:43:3c:cf:07:18:49:
9e:b2:db:b0:60:37:26:8a:46:a7:90:5a:20:18:58:6a:d8:13:
e8:87:44:13:13:4f:03:c4:09:ce:12:db:4e:a9:a4:26:75:af:
3a:6a:7b:8e:2c:a8:44:a2:8d:5e:12:7d:3a:7f:60:d1:44:d8:
cf:9f:13:42:61:19:06:10:c7:fc:a1:71:37:05:cd:e8:86:2d:
e8:ef:cb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:18:39 2025 by rpki-client