Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
File: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json)
Hash identifier: /vZthD4sufe48WtTYFQTY+3wb60ICaZqfSGCrHNFtxs=
Subject key identifier: E2:9A:B0:73:FC:23:80:30:C4:FA:4E:65:63:87:4B:CA:BF:F1:98:E7
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial: 01964142CA9D05EECE414284A84BA7EDEFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
Manifest number: 1372
Signing time: Thu 17 Apr 2025 01:00:18 +0000
Manifest this update: Thu 17 Apr 2025 01:00:18 +0000
Manifest next update: Fri 18 Apr 2025 01:00:18 +0000
Files and hashes: 1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: ad5tooubmuQ6IBkjq89Y0HE2eJmrAjyepW1RwEZ4CUk=)
2: jzen_y9MjkJUaSD6dgV7vhjezg8.roa (hash: D4rABI9YVwiue3KhIMfk5XfCTjj00ChB0kZlnVkANPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:42:ca:9d:05:ee:ce:41:42:84:a8:4b:a7:ed:ef:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
Validity
Not Before: Apr 17 01:00:18 2025 GMT
Not After : Apr 18 01:00:18 2025 GMT
Subject: CN=e29ab073fc238030c4fa4e6563874bcabff198e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:25:0c:bf:3d:36:d7:e1:39:66:d4:d2:98:9a:
8a:d9:7c:11:a4:13:f4:a8:71:2c:e1:1f:0c:f4:a2:
9f:44:40:6c:50:8e:de:f0:d5:4c:8e:af:2e:e6:df:
c1:3b:84:e8:c2:39:45:90:c7:cb:fa:b3:a9:59:fe:
33:1f:10:13:82:10:e7:1b:e4:07:f6:43:d6:0b:62:
83:1e:af:21:3b:a0:d9:6f:08:ac:74:aa:20:2f:3a:
af:d9:fc:3d:e2:15:f9:93:e5:3f:23:56:e3:67:a6:
31:8b:44:60:d0:ed:5c:5d:da:1b:e5:87:35:df:0b:
33:dd:25:cf:fa:a4:47:98:e0:2e:d6:9a:e1:d7:b6:
57:01:8d:eb:33:de:6e:92:31:27:4d:b3:04:9c:20:
a8:c2:63:c4:80:b2:b6:22:8c:e8:d3:47:43:a9:28:
d6:89:21:64:84:4f:88:89:11:4b:bd:ab:f5:62:cc:
2f:3f:e7:5a:9a:07:b1:bc:80:c7:72:f2:68:b0:87:
bc:d9:eb:35:97:4b:49:3b:6a:c2:ff:97:89:0f:31:
ed:f0:39:4f:2a:ca:11:19:7a:51:d3:ba:ab:e5:e6:
fc:8f:27:ca:2a:2c:a2:35:8e:3f:a1:d4:b6:08:52:
a1:3e:0e:04:2a:5a:fb:d6:ba:a9:8b:b6:ed:79:79:
8e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9A:B0:73:FC:23:80:30:C4:FA:4E:65:63:87:4B:CA:BF:F1:98:E7
X509v3 Authority Key Identifier:
keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:65:68:7f:79:83:bb:08:d3:4a:35:fc:67:f7:91:99:26:c1:
c5:17:9e:98:77:0b:fa:8d:95:4c:7f:8b:eb:c6:e3:73:33:8b:
7d:aa:ca:53:ce:11:5b:07:3c:d6:31:6b:7b:a0:01:a3:0e:d7:
d0:31:37:02:e8:30:82:7a:83:bc:86:74:59:c4:98:ec:e9:53:
de:7d:f6:1d:b2:14:1c:a1:0d:fb:9c:06:79:a5:4d:dd:dc:bb:
60:65:0b:70:54:3c:16:27:bb:13:75:ba:e2:b0:8b:b1:a4:7f:
c7:54:8a:ba:70:df:58:bf:8e:6c:e3:d5:42:90:b5:49:49:20:
b7:40:0e:5f:7b:06:12:c4:47:d7:41:be:66:04:d2:7c:49:53:
52:35:88:55:9a:16:0a:20:36:54:86:99:19:d6:da:d0:18:94:
fa:45:2f:6d:f8:26:1d:a0:a1:c6:f7:3a:46:64:33:be:d3:e4:
f8:eb:92:c7:04:ca:99:56:e0:cb:48:2c:bf:bb:96:60:8f:da:
94:94:3f:a6:1a:4e:9e:d7:ea:64:bb:01:a2:b3:b1:5e:b9:cc:
e6:4c:8d:06:9e:31:b8:ef:38:01:b7:ef:fc:68:6c:be:d1:fe:
59:fc:a1:e3:9f:14:23:8f:5a:4d:0c:7b:68:a2:63:92:1e:c4:
45:9a:bf:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:16:26 2025 by rpki-client