Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier: lp350InMxQcUQs3wrv57q3tiUxBojbZ4B7hynrRPI40=
Subject key identifier: 0C:2A:82:37:B0:5A:A6:21:77:98:51:67:CC:55:F0:FB:C1:B2:0A:58
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer: /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial: 019653EE4726416632DBE8CB221DD67E35F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 16:00:46 +0000
Manifest this update: Sun 20 Apr 2025 16:00:46 +0000
Manifest next update: Mon 21 Apr 2025 16:00:46 +0000
Files and hashes: 1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: JN7z8yqlUfyToxGH3EKnnSW6Y5qfq8lZldBWBNMoCoc=)
2: IXT2ShwYMDTPNqnR-lmJPCt_hM0.roa (hash: YktH9Y4fzOrvY5vhhRnBY1iI8LZ09iZ8zTmc5w1S0Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:47:26:41:66:32:db:e8:cb:22:1d:d6:7e:35:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Validity
Not Before: Apr 20 16:00:46 2025 GMT
Not After : Apr 21 16:00:46 2025 GMT
Subject: CN=0c2a8237b05aa62177985167cc55f0fbc1b20a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:30:86:c6:3f:9d:76:aa:c2:fd:66:e6:e9:
34:cb:e7:dc:16:f3:c5:b6:2b:ae:38:9d:c4:62:91:
03:40:52:af:a4:2d:9a:b2:fd:a2:40:06:0f:24:25:
82:1b:e3:31:e3:ba:74:60:d6:68:12:d3:93:e6:ae:
5e:17:b1:3d:89:54:f2:66:62:90:f4:f0:3a:e5:b6:
1e:19:45:b8:f3:f2:65:fb:6c:8a:1a:54:74:1d:0c:
66:7f:57:3a:c7:3b:8f:81:f8:ae:e1:22:d6:e1:31:
14:b6:da:5d:50:ca:7b:17:1e:e3:82:84:01:72:4c:
a7:fa:65:cc:fe:fc:3b:f1:de:00:0b:4c:41:f5:0e:
a8:19:85:fa:db:3e:aa:e3:7e:93:22:b2:ea:94:74:
ca:93:79:fd:aa:c2:40:d4:7a:5c:76:c6:ce:0c:24:
ac:36:dc:aa:ec:f9:28:8b:25:3b:53:4c:97:21:7d:
ba:e9:4a:d6:39:38:a5:b2:f8:c3:b1:d7:b3:ae:92:
40:4d:1d:99:dc:f4:e3:07:f7:7a:dc:6b:f9:88:60:
5d:20:9d:0a:b3:93:3d:71:d6:46:10:a4:ac:79:f5:
b4:c8:71:5b:b3:08:35:f2:81:56:ac:0d:a5:4d:27:
31:ee:d2:ad:b4:8c:f9:11:7e:48:8f:89:b9:bc:a0:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2A:82:37:B0:5A:A6:21:77:98:51:67:CC:55:F0:FB:C1:B2:0A:58
X509v3 Authority Key Identifier:
keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b6:a7:fd:e9:4e:a6:92:fb:83:d8:44:e6:f6:dc:f4:31:3d:
a2:e8:3c:c3:96:d5:12:bc:c0:3c:a7:3b:a1:f5:2a:13:99:df:
83:5f:ab:bb:05:e9:2d:20:6a:ae:59:ff:47:ee:9e:e0:41:14:
8f:5e:db:f3:c0:90:06:2c:95:e9:3c:18:fa:88:e6:dc:27:1f:
66:c8:11:fb:90:e3:c8:d5:ee:a6:df:ea:01:c3:fb:69:16:e9:
81:5f:0f:25:ee:03:fc:24:78:00:56:b4:13:70:f4:f3:c6:d7:
4b:33:a1:58:c0:d5:11:a1:12:80:40:20:36:ba:8b:b8:2c:ee:
fe:3f:b4:c8:ab:9e:0b:c4:e3:b1:69:2b:d2:02:67:f6:71:48:
0b:06:b5:ea:27:b3:a2:c4:4f:2f:50:de:b0:1b:84:80:29:b6:
10:0f:82:c2:3c:1f:47:a6:d9:0a:1c:33:60:71:2b:a3:32:f8:
09:9a:d1:48:93:4f:f5:8e:51:34:b4:a9:af:b1:b8:da:1c:04:
1f:e3:57:c4:63:be:57:1c:01:13:20:fe:d5:98:03:bc:27:51:
69:39:d1:04:31:65:c2:eb:8b:90:de:b8:c6:25:6c:59:72:cc:
04:b8:86:1c:7e:76:06:30:75:b9:b6:d0:6b:08:c7:dc:8c:4f:
d3:e7:80:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:45 2025 by rpki-client