Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
File: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft (raw, json)
Hash identifier: 3QULB8mv2EjyscfM/RocCi/ykrGNRBGpQbN1SHcJuSY=
Subject key identifier: E5:39:91:B8:2D:C0:FF:3F:DC:F2:1B:B5:0A:59:A2:C2:25:3C:B6:0C
Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
Certificate issuer: /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Certificate serial: 01965F4D1EB52CC13F17CADC3DEE6691112C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
Manifest number: 0E41
Signing time: Tue 22 Apr 2025 21:00:11 +0000
Manifest this update: Tue 22 Apr 2025 21:00:11 +0000
Manifest next update: Wed 23 Apr 2025 21:00:11 +0000
Files and hashes: 1: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl (hash: HnlSHR+74/sIeq/VRzeok9P0ySiHnrKNBZQNW74cIXg=)
2: s199ikwEffBbz4N51o9Z93m71rk.roa (hash: Tb9twTEkz+iPQZdYGEiHKKRquApELQ9qVFqV3IE19gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 21:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:4d:1e:b5:2c:c1:3f:17:ca:dc:3d:ee:66:91:11:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Validity
Not Before: Apr 22 21:00:11 2025 GMT
Not After : Apr 23 21:00:11 2025 GMT
Subject: CN=e53991b82dc0ff3fdcf21bb50a59a2c2253cb60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a1:7b:2f:46:54:3a:28:eb:8d:50:58:a4:cb:
21:16:cd:a8:d9:18:cb:f2:aa:2a:b6:a1:8b:9c:73:
9c:16:51:3b:73:fb:34:34:cf:8e:ae:5a:68:7b:2a:
bb:78:13:9d:44:15:ff:32:8c:76:df:04:1f:db:65:
66:e4:66:7f:01:15:02:4b:4c:ab:42:ef:44:08:33:
e8:f2:36:e8:b6:f4:d4:43:46:79:b1:25:91:d9:81:
08:17:cb:75:5a:6e:f5:59:54:19:3c:ea:2d:27:f2:
4d:9c:d5:b4:0a:2b:0a:b6:65:9f:e7:b8:08:14:28:
06:bd:c1:0a:8e:5a:78:7f:0a:da:4a:81:3a:7e:3c:
e0:5e:f1:ed:32:91:4d:eb:98:f5:8c:94:2d:8d:1f:
8c:9f:36:53:ac:f0:85:bc:0a:12:8c:a7:fe:18:8d:
6f:91:fe:81:c1:3d:0a:05:57:e0:f6:4a:a3:8e:49:
c2:a3:b5:2e:a9:ff:11:ef:ec:88:c8:ca:72:08:3b:
60:6d:b0:4e:43:95:55:d1:3e:89:fe:c9:68:6d:43:
13:bf:73:f3:37:be:6b:84:50:28:55:e2:34:e2:d8:
bd:b4:59:8f:6d:39:8c:23:7a:93:7b:66:fe:5d:61:
b0:9c:dc:92:70:ec:66:d7:44:04:d6:a1:34:b5:e6:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:39:91:B8:2D:C0:FF:3F:DC:F2:1B:B5:0A:59:A2:C2:25:3C:B6:0C
X509v3 Authority Key Identifier:
keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:33:db:fb:97:6f:f3:f9:4f:ce:b6:68:9e:6d:04:a7:09:12:
a0:51:50:8b:16:1d:28:3e:9a:ca:bb:fb:85:2b:22:70:ed:ee:
3f:6a:56:c5:1a:4c:93:3b:f8:cf:4a:29:44:ac:b0:06:b5:98:
b6:09:2a:6b:ce:55:24:c7:b0:21:46:9f:b6:64:b5:10:ab:29:
7c:bf:b2:6f:6d:0c:1e:22:90:20:11:9f:da:bf:1c:c9:c3:81:
6b:d3:bd:7e:e1:de:45:d5:41:26:3c:ce:23:10:fb:f6:20:ce:
c2:07:fe:fd:cf:76:64:49:b0:83:d2:5b:17:de:1b:22:ea:d3:
37:a0:c1:e0:85:cf:7f:6a:13:c9:fa:69:2b:d6:3b:0f:27:bc:
fc:8d:fa:09:2b:ea:fd:ff:b4:f2:d0:2d:57:cd:3f:32:2c:a8:
0c:05:2e:64:fd:1d:3e:78:0a:d5:a6:14:5f:36:29:dd:e5:e9:
9a:a1:c8:2a:01:84:d9:c8:98:3a:90:f0:96:c1:aa:4c:c6:b7:
1b:77:61:9a:3f:00:42:14:fd:a8:56:af:ba:63:8e:60:31:8c:
c7:7f:5e:98:72:de:f3:4f:aa:e1:dc:57:dd:91:fb:da:a2:12:
b9:4a:65:c6:78:7b:ad:d0:a6:16:e5:64:b0:d7:8d:9b:71:b0:
34:46:54:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:05:45 2025 by rpki-client