Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
File: 3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json)
Hash identifier: CFtSIPbA44uLQvxps+ulDpDJ5U0LPdR6qI+dDnvBBNs=
Subject key identifier: 46:74:E2:10:BD:DF:F3:4B:5F:80:6C:92:9F:29:06:73:05:F7:C3:29
Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Certificate issuer: /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Certificate serial: 019628CE380037E4316EA1CD565EC6CE3F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
Manifest number: 14E7
Signing time: Sat 12 Apr 2025 07:02:05 +0000
Manifest this update: Sat 12 Apr 2025 07:02:05 +0000
Manifest next update: Sun 13 Apr 2025 07:02:05 +0000
Files and hashes: 1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: HkcE58fYNuXoasZWhvlOI+lPGh+J7coNpGNU1uKKM8k=)
2: 4aMsThSQ8pto7QNh_kFB73sOXo8.roa (hash: HEBFusOcNgQfdZRF0U/he5dAzzkTri4ddTPSMK0+giU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:28:ce:38:00:37:e4:31:6e:a1:cd:56:5e:c6:ce:3f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Validity
Not Before: Apr 12 07:02:05 2025 GMT
Not After : Apr 13 07:02:05 2025 GMT
Subject: CN=4674e210bddff34b5f806c929f29067305f7c329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:6a:ab:99:1f:62:67:1b:84:45:66:35:de:
97:f4:61:b1:04:00:4d:6f:f7:fb:b0:26:33:c0:2e:
2a:1f:90:1b:c1:a9:af:4f:0d:bf:eb:2a:2c:99:b6:
af:1d:09:ea:3a:ff:8a:9e:c7:99:6e:07:d2:c3:05:
4a:e5:b8:36:d0:b8:2d:89:c1:9a:e2:5a:6b:04:4d:
ba:3b:d3:b8:2b:e4:f7:f4:38:f6:8e:c5:30:2d:24:
7d:ba:6d:49:be:6d:49:8e:0d:2c:e9:ea:b9:9f:f3:
43:35:f8:b7:20:69:bb:71:7a:a0:1f:6f:56:7f:a0:
52:84:ed:a8:1a:68:09:d4:7f:74:5c:da:b9:82:ec:
97:66:a1:b6:77:f5:94:73:5b:8f:37:b2:d3:ac:00:
93:b8:8b:c8:a1:56:92:20:70:fd:af:8c:7b:67:f9:
e9:80:79:87:84:f2:72:3f:ca:5c:5a:37:0f:57:40:
af:e1:01:2f:42:29:99:6e:57:92:db:70:84:fa:0f:
60:1a:e8:cf:8f:ce:5e:56:8e:a5:36:82:77:0e:db:
68:74:cb:1e:1f:ac:23:f8:4b:28:6a:b0:41:44:e1:
75:5d:53:4a:6f:97:de:a1:1b:28:72:d1:58:b9:5a:
64:0a:c0:bc:9d:6a:df:ee:3b:5a:5b:9d:b8:d2:09:
49:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:74:E2:10:BD:DF:F3:4B:5F:80:6C:92:9F:29:06:73:05:F7:C3:29
X509v3 Authority Key Identifier:
keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8a:b5:a7:6e:78:2d:02:31:ad:05:2c:17:20:f7:73:07:fe:
98:7a:35:d3:2e:e0:3c:bc:5c:f2:f0:3e:27:45:75:a0:ee:32:
6f:d7:a2:eb:6f:5f:d8:26:d3:6a:1b:62:d4:cf:8d:9e:27:e4:
2b:9f:81:a1:67:8e:60:37:e1:e2:1e:4d:cc:b3:ee:fd:16:08:
19:d4:0b:ff:8d:3b:51:07:b4:5b:d1:a7:8c:ce:fd:93:43:aa:
c9:97:2f:12:51:09:a6:8d:34:11:e1:65:97:69:6c:b0:6f:9c:
67:44:17:29:d1:98:2b:e4:48:8b:13:02:27:1c:47:1c:4f:a4:
1f:89:9b:84:a9:21:08:a3:9e:f0:c1:ae:72:98:50:fa:b1:05:
bd:7e:6d:2d:9c:6e:74:58:bd:4d:40:72:fe:1b:f1:6f:ed:4f:
c7:01:3d:86:bb:2e:4b:a2:78:37:a0:d0:8f:58:e0:02:2c:f8:
79:9d:10:d4:41:b7:ce:4c:44:78:57:f5:a2:6e:d9:24:06:d0:
19:7a:b3:15:f4:2f:e7:ef:4c:71:b9:b2:f5:c8:42:80:eb:23:
06:6b:10:31:0c:f1:0c:66:49:31:12:d5:50:f7:28:fb:77:f3:
0c:fa:0c:1e:9a:73:cf:c7:e0:d0:fa:fe:75:73:28:11:71:41:
47:25:a1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:47:03 2025 by rpki-client