Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
File: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft (raw, json)
Hash identifier: lUseVK7tMfNB4LoHZgNm9ptLVDZDLSy/XzICYK1NyFk=
Subject key identifier: 05:44:08:45:07:A0:BE:91:07:24:CD:20:E7:A9:1A:34:45:0F:BA:37
Authority key identifier: DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
Certificate issuer: /CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Certificate serial: 019648210433715A2464D7E7F1A472E5056F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
Manifest number: 0D7E
Signing time: Fri 18 Apr 2025 09:00:45 +0000
Manifest this update: Fri 18 Apr 2025 09:00:45 +0000
Manifest next update: Sat 19 Apr 2025 09:00:45 +0000
Files and hashes: 1: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl (hash: jJkcUVwNfnO6j/W7x/gAgXUeWUM+0V8MyzpR4UJdzDQ=)
2: xEogw3XOMF8942N9C953fQ9p_WQ.roa (hash: gm/zrEw7lZ+SPbWVu4mrs06eSMAYkDfSw1DjLnUzlh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:21:04:33:71:5a:24:64:d7:e7:f1:a4:72:e5:05:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Validity
Not Before: Apr 18 09:00:45 2025 GMT
Not After : Apr 19 09:00:45 2025 GMT
Subject: CN=0544084507a0be910724cd20e7a91a34450fba37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:08:4e:7c:d9:18:05:8a:d3:82:bf:63:77:
94:8d:0e:97:8f:17:97:0e:e1:04:1c:a7:b2:bb:0d:
97:b1:6b:e1:fd:4c:4a:ad:e5:7f:59:80:a7:91:37:
ab:6b:20:a8:5b:f6:cd:a4:e2:16:6b:0b:2d:14:72:
7b:d5:cf:ef:a1:eb:d0:9f:a1:70:f5:54:3f:5d:0e:
4f:68:4f:1a:31:13:e8:c0:22:0b:c9:cf:cb:0f:c7:
4c:83:84:57:9a:7a:60:e3:24:f4:c5:a3:56:7c:60:
86:59:06:55:31:46:5c:17:03:81:51:47:af:ee:1e:
a1:df:ee:c4:fd:3d:02:3f:42:f5:70:6c:a7:00:cf:
57:8d:3c:54:88:c4:f7:d7:6c:ca:a0:b9:f5:54:37:
34:38:09:d8:71:67:f3:2c:ee:cd:bd:63:37:a2:5f:
a9:9a:ff:14:88:88:42:42:f1:7d:51:8c:f2:fd:21:
02:6a:be:7a:72:f4:aa:55:f8:12:4e:90:8e:ec:62:
9d:ff:d2:78:69:64:ce:7a:95:e9:82:1c:24:ff:7c:
ba:0f:c2:ed:80:ee:67:65:7b:74:00:fa:ad:b6:d7:
81:ce:39:09:d7:f6:8f:9e:99:36:67:7f:61:5a:c8:
66:4b:ef:b3:c2:f2:d6:a3:94:62:cb:98:5b:6c:3b:
09:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:44:08:45:07:A0:BE:91:07:24:CD:20:E7:A9:1A:34:45:0F:BA:37
X509v3 Authority Key Identifier:
keyid:DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:17:5d:b5:7d:37:12:6d:f0:b9:86:b9:25:f7:db:3a:b9:e3:
6d:3a:55:80:6b:76:38:3e:5a:70:84:77:a7:db:82:4b:db:22:
88:e5:7b:12:9a:42:64:33:22:8e:0a:60:75:5a:97:83:fc:a4:
2e:8f:c4:99:17:39:a8:30:71:11:d7:28:5a:c6:3f:79:90:0b:
2a:2c:d3:ed:c6:e0:fc:64:c6:87:6b:14:a0:45:79:90:c1:b3:
c7:a5:78:de:41:d1:f3:b5:0a:aa:a5:5f:06:b1:ca:a0:ad:24:
ba:7b:24:1a:9c:66:26:cd:7e:c6:90:79:83:e9:b1:41:65:4d:
1f:db:e8:b5:32:75:dd:79:bf:af:84:9b:b3:fb:84:5e:db:f6:
4a:ca:b7:e1:5f:3b:c8:f3:7c:5c:3e:b8:a5:9d:47:4e:b4:de:
24:9c:73:8f:69:3d:fb:bd:e6:29:ff:f5:e5:b5:6a:fa:2d:de:
61:51:4e:7f:7a:77:48:74:59:d5:d0:70:bc:68:80:ef:fd:4d:
69:26:24:1c:a9:b8:ea:57:6c:ba:61:79:20:41:66:1c:cd:e7:
37:9b:55:c9:4e:d5:27:65:47:c4:5d:7e:ec:22:68:b4:65:1e:
fd:f2:09:af:4a:a1:d6:2a:28:e2:b9:11:fc:2b:7b:17:9e:b9:
51:59:04:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:04:59 2025 by rpki-client