Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
File: 3BsrDhzng-t6Ljk__dEoxqnAIjk.mft (raw, json)
Hash identifier: mAsNj08V76tbXbCyArJcxbOqdk9JAVdh5+0iwafVVIk=
Subject key identifier: 74:F9:17:B5:28:E1:E7:0D:D5:68:CB:5C:B5:94:D7:27:93:A4:A6:37
Authority key identifier: DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
Certificate issuer: /CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Certificate serial: 01958B849D2890B74DFBCF305F78C580E8F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
Manifest number: 01EE
Signing time: Wed 12 Mar 2025 18:01:18 +0000
Manifest this update: Wed 12 Mar 2025 18:01:18 +0000
Manifest next update: Thu 13 Mar 2025 18:01:18 +0000
Files and hashes: 1: 3BsrDhzng-t6Ljk__dEoxqnAIjk.crl (hash: P8qor5Vbl3iM/kilGb+vYvZQOdrcc7dhjx783fSDDFg=)
2: b4tFKCMFhyngaw1LlIGrAjikYiE.roa (hash: zlYQxGhdtm2zm501rwjVL8YUyfYWJBRUvSyMolHaDtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:9d:28:90:b7:4d:fb:cf:30:5f:78:c5:80:e8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Validity
Not Before: Mar 12 18:01:18 2025 GMT
Not After : Mar 13 18:01:18 2025 GMT
Subject: CN=74f917b528e1e70dd568cb5cb594d72793a4a637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:04:1e:3a:24:b4:3c:bc:af:65:26:7d:9c:3a:
e1:45:ac:dd:8c:ea:d9:35:9c:2f:cc:b7:f9:72:8b:
39:90:43:d6:cc:d4:aa:c0:07:0c:55:c6:ad:c1:8f:
44:17:b6:bd:59:8d:41:48:81:05:bc:6c:7d:3b:01:
82:37:a0:70:5c:9c:fe:ae:d2:20:32:f5:24:8e:de:
38:3b:75:29:ac:e4:a8:74:5d:ea:81:07:b4:d4:36:
e2:8e:6f:a1:58:ed:3d:ef:46:0a:b4:e9:c2:85:4e:
de:64:c6:04:f9:22:1e:54:2b:a6:aa:25:0e:2d:cb:
c9:60:2b:55:df:08:bd:d0:a0:ff:3d:2c:3e:62:7d:
a0:a7:e1:89:d0:b9:b2:82:e9:33:f9:17:c2:c4:a6:
88:1a:54:d4:b1:e6:0f:ba:0d:f7:ae:f6:ee:60:0a:
ff:22:40:17:7c:cb:72:49:01:3c:5d:ab:0d:e2:a3:
08:a5:22:6b:a6:5d:36:00:ad:57:6c:3a:5c:5d:30:
5d:06:0a:99:36:42:c1:bb:7f:34:2c:8b:b0:94:1a:
57:82:4b:e5:3d:83:b9:80:72:42:d1:ce:74:34:65:
54:e5:8b:ff:d3:13:9d:da:9a:65:4b:b1:f8:12:c2:
34:1a:03:87:c8:fe:26:c1:1a:19:11:07:e0:b9:0f:
2b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F9:17:B5:28:E1:E7:0D:D5:68:CB:5C:B5:94:D7:27:93:A4:A6:37
X509v3 Authority Key Identifier:
keyid:DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fe:19:32:91:f9:33:f3:59:9a:8e:43:d6:a9:ca:36:fa:4b:
93:09:9b:fb:6f:bf:ae:7f:2c:20:59:dc:63:9d:f9:bc:75:de:
2f:29:e4:0c:fc:13:ff:4e:20:14:53:9f:8c:82:61:32:92:b9:
d7:4a:b5:f9:7b:87:b7:ad:53:23:71:9a:19:24:60:30:69:5d:
82:f4:7f:90:78:b4:02:23:46:c4:54:2f:bf:ea:99:a9:a9:ad:
e1:62:60:62:08:8b:32:2a:9c:ff:f1:7a:a3:54:a0:bd:80:30:
bc:d3:5f:c2:4b:3c:88:37:51:ad:c1:25:23:ea:3e:c0:85:28:
71:66:1c:f1:da:fd:8e:04:c2:dd:1f:c5:be:13:12:2e:2d:fe:
f1:0d:6c:fd:d2:c1:4d:61:33:2e:b7:4b:89:99:dc:b5:03:07:
22:cb:8e:98:12:d4:63:4e:4b:c7:39:e8:a6:9d:4c:ab:f5:a5:
99:10:ef:34:96:6e:ad:99:b2:c2:5d:95:f0:3d:12:a9:c3:f1:
07:f1:87:08:ad:6e:81:9c:75:69:e5:22:41:9d:0c:32:cb:13:
c8:6f:58:13:d1:b7:76:8b:1c:9a:59:80:f3:f1:cc:b3:31:18:
cf:d7:c5:92:d5:76:50:14:7a:e0:8f:c3:39:6e:f4:5f:1e:21:
8d:db:0a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:12 2025 by rpki-client