Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
File: 3erZGbhaEwUdAgi34o3cyzmLFNY.mft (raw, json)
Hash identifier: XtiIpPlQakGf7zHMnJbErGI2M2RpG+t+DCnEYFUqIDA=
Subject key identifier: 22:55:EA:AA:30:B8:7D:EE:31:76:B3:FE:ED:20:1F:7A:63:7D:19:EC
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial: 01958B84BD41F1AFCFCE4D0EE6B3BCC43168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
Manifest number: 149A
Signing time: Wed 12 Mar 2025 18:01:27 +0000
Manifest this update: Wed 12 Mar 2025 18:01:27 +0000
Manifest next update: Thu 13 Mar 2025 18:01:27 +0000
Files and hashes: 1: 3erZGbhaEwUdAgi34o3cyzmLFNY.crl (hash: PkZEORtDmN1mhVwrWaDGqXEMC3GGmc/vm2B2phpBjII=)
2: gyBGqWNKS8K0vTNBAA3GKNL77Vo.roa (hash: BXXbMCiaPDwWpKluJbMJNiQFpxOCWm/ZXx0AVN6V8Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:bd:41:f1:af:cf:ce:4d:0e:e6:b3:bc:c4:31:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Validity
Not Before: Mar 12 18:01:27 2025 GMT
Not After : Mar 13 18:01:27 2025 GMT
Subject: CN=2255eaaa30b87dee3176b3feed201f7a637d19ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:13:bd:9d:83:32:4e:df:55:57:61:32:95:
a0:2c:14:c4:09:83:9d:04:f1:78:01:67:10:56:5b:
14:66:3c:68:6f:14:89:60:a0:17:73:64:c5:87:59:
cc:1d:ed:e3:c8:57:0a:a5:e6:f1:3d:fc:87:b2:13:
30:6c:bb:63:ec:39:33:7c:98:78:45:b4:6f:25:d5:
a9:13:28:e4:34:33:f9:0c:d0:1a:92:46:b6:5b:bf:
d0:35:4e:e4:ba:ae:49:1b:34:2d:71:0c:02:97:1b:
4b:27:bd:bf:21:b8:75:f1:22:4e:39:a8:ed:4c:7c:
59:5c:78:0f:de:e7:bc:74:55:ef:66:d1:6f:82:fe:
1b:37:28:5c:51:a1:14:9d:79:5f:b0:90:f0:72:29:
38:60:e4:34:fb:bb:77:96:36:28:ae:b0:98:6c:eb:
28:fe:f7:84:e4:af:7f:d8:98:a3:88:65:91:01:a0:
e4:83:5d:7b:5f:9f:cd:99:d4:6e:e4:cc:81:d1:75:
36:aa:f3:3a:3a:b7:c5:8a:2f:ed:ff:47:a4:db:50:
ea:90:91:b5:c3:73:3a:a5:e6:4e:b4:19:63:99:2e:
2b:4b:1f:93:1a:45:04:ba:a0:49:b4:37:ee:ee:c4:
22:91:88:79:7c:cc:c0:e6:32:b4:f5:67:8a:a3:f2:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:55:EA:AA:30:B8:7D:EE:31:76:B3:FE:ED:20:1F:7A:63:7D:19:EC
X509v3 Authority Key Identifier:
keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:26:eb:77:7f:fa:25:5e:76:75:0a:9a:4a:fa:07:2e:8e:db:
78:d2:c0:80:40:5f:e1:af:02:89:2e:21:04:c5:f2:e2:4d:b3:
bb:ae:c4:a0:0f:e0:33:3e:26:37:cf:42:d7:0b:a6:47:f1:3c:
0d:e1:b5:1a:d6:92:1f:16:d4:1c:f3:45:10:f7:44:a3:ad:99:
bd:60:45:e5:18:2c:f4:fc:e2:7f:82:41:04:12:fe:eb:38:1f:
70:01:f5:b7:34:ba:82:f0:c3:ec:a5:43:30:b3:b8:6c:fb:55:
f0:2e:27:85:71:76:e6:7a:94:4b:b4:f3:77:45:90:1b:86:87:
2e:44:68:e0:4a:77:c0:e4:45:bc:5c:c5:a3:1f:e4:5c:cf:40:
77:36:f0:ad:a6:47:c6:30:27:06:d8:3b:fb:43:ad:8b:ed:25:
a9:d6:0b:15:4d:bd:b4:21:8d:cf:0c:99:5b:cc:36:5c:a1:f3:
99:f2:76:b3:4c:61:8b:b2:7e:a4:01:e8:2f:7c:2c:aa:d5:b6:
5d:68:e3:a4:38:2e:a3:77:a3:02:4e:bf:f0:14:39:44:dd:fc:
7a:ba:13:53:9c:19:97:30:fc:7d:ea:b1:87:02:e5:4e:ea:9e:
2a:40:b0:1d:f0:df:d7:a2:d9:b5:91:13:3b:a5:5d:8a:ef:9a:
36:c7:44:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:11 2025 by rpki-client