Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
File: 3gr32Dxe6w1DStdTxqX0dUlpizc.mft (raw, json)
Hash identifier: qnV3UxWMt7XAO26Ks/GvAVxy2+0fh6xWETWEFSe9Lqw=
Subject key identifier: 57:2D:55:B2:0F:EE:87:C9:ED:77:D4:81:E0:09:2F:46:3A:4F:61:9F
Authority key identifier: DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
Certificate issuer: /CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Certificate serial: 01965191B6C842EB34967741BA21C95780F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
Manifest number: 148E
Signing time: Sun 20 Apr 2025 05:00:25 +0000
Manifest this update: Sun 20 Apr 2025 05:00:25 +0000
Manifest next update: Mon 21 Apr 2025 05:00:25 +0000
Files and hashes: 1: 3gr32Dxe6w1DStdTxqX0dUlpizc.crl (hash: BybWWB9KrojU6zQWRwbJkgPEg9nz0Z2NCUGFK4qZxkg=)
2: Aqgmt-0kmHhTxI4TNwO6CqQUAvI.roa (hash: OT3qKlUhR0guc2qzeYETLZJZRi9SFdXOekAamRFDQh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:b6:c8:42:eb:34:96:77:41:ba:21:c9:57:80:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Validity
Not Before: Apr 20 05:00:25 2025 GMT
Not After : Apr 21 05:00:25 2025 GMT
Subject: CN=572d55b20fee87c9ed77d481e0092f463a4f619f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:12:07:10:ee:8b:05:f0:8a:ca:ae:08:db:
12:9b:6d:54:31:c4:6e:94:95:2d:f4:86:d0:26:3c:
d9:ca:98:1b:4a:51:a0:cd:35:06:ea:c6:4a:38:23:
04:b1:4c:41:85:e6:94:99:9e:0e:7b:e4:f2:e0:46:
fb:58:20:eb:d5:08:4a:56:e1:b7:65:73:1d:c9:92:
a1:83:87:72:a5:3e:b8:61:64:f9:4f:71:8b:d6:81:
2c:6a:dd:91:da:12:c0:af:77:74:c7:9b:ef:d6:29:
64:4b:55:ef:e7:52:7f:9f:6a:d6:6c:3c:e3:4a:07:
f5:2c:33:13:c5:ff:13:ef:db:a6:e1:94:6e:8c:ec:
fe:7e:bd:e9:a4:7f:53:c8:61:1a:75:61:f2:ee:66:
48:a1:59:19:dd:af:cf:44:3d:73:7e:58:6f:b9:dc:
06:17:b5:e3:1c:76:44:a5:ec:83:81:9f:4d:69:f4:
90:88:61:a7:15:3f:c6:29:41:94:97:06:f5:78:6b:
80:f8:f4:1a:21:f4:08:ba:56:8b:a2:2b:43:25:e0:
67:58:8d:7d:b5:5a:f2:f3:82:32:f4:66:78:86:e5:
01:9d:0c:8d:3d:09:5d:92:14:d6:b6:9a:19:27:d6:
80:fa:77:5a:78:99:52:02:8e:d4:82:03:34:f1:aa:
48:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2D:55:B2:0F:EE:87:C9:ED:77:D4:81:E0:09:2F:46:3A:4F:61:9F
X509v3 Authority Key Identifier:
keyid:DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ab:d2:f6:9d:1f:ed:78:ac:de:1f:7c:58:2d:b1:c9:6c:07:
da:b4:df:fb:40:6f:7c:d8:2d:4b:47:5c:74:57:e7:a8:93:a2:
03:ba:3a:bb:72:67:44:a4:76:db:e0:79:42:f7:57:ee:3b:b6:
c8:91:ac:93:c6:1e:4e:8c:15:35:3f:cb:05:9e:5e:4d:87:78:
d5:d3:ff:61:a6:26:8f:e3:85:ac:e9:6b:2c:c2:6a:35:bb:13:
b1:bf:19:a7:1b:21:2e:fc:65:06:d9:34:f0:2d:18:e8:10:d9:
27:a0:00:ce:93:3e:d3:3a:70:c0:14:5b:9c:7f:af:b4:dd:f6:
f4:2e:c7:9b:ea:4d:8d:97:cd:5e:67:12:da:42:3f:8b:e6:aa:
fc:55:84:b9:46:e7:dd:7e:57:54:a0:53:1f:2e:43:e6:05:ec:
a0:f8:a3:ba:89:63:47:c6:6c:95:2e:84:82:ee:76:c2:0a:d9:
dc:5e:fe:e3:43:64:d5:0b:e9:49:a3:08:05:78:15:97:d2:47:
ee:db:ab:68:c5:ca:4d:91:d8:70:1d:69:fd:8a:a8:ad:82:17:
fd:33:bc:64:44:f8:e8:ab:82:88:62:ef:55:4d:0e:11:30:ae:
e8:b1:a9:7a:21:a9:de:ef:a2:1a:5b:b5:b2:4c:ee:6a:de:40:
e7:9d:c5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:33 2025 by rpki-client