Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: Wpu2fgV8NAS2E2QrBSRDjV+0L9fA9QNDQnymRkay42U=
Subject key identifier: 5F:3A:BE:7A:2B:69:39:8A:A2:FA:63:4F:67:AF:FD:9F:16:03:D3:BB
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 0196447B19C057B45A3A9FE191950FD42A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 139C
Signing time: Thu 17 Apr 2025 16:00:40 +0000
Manifest this update: Thu 17 Apr 2025 16:00:40 +0000
Manifest next update: Fri 18 Apr 2025 16:00:40 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: MASNM9S3FUaPJomNMTN3DLSqvqp7jDnoCgVXaQ8zsHk=)
2: B1dTi0f_of0kmb1xPgeCM0wY_So.roa (hash: AUmVPkVAQPCmSbSqHlAfz6SLH5DutLJ3OBZdx5Ql8g8=)
3: g4GI57zRcwc78atAcKzvcX8O_Jg.roa (hash: I42VDUXmjO3wztnHcn35mdQWvB1AtZN/AkJrcxSWDOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7b:19:c0:57:b4:5a:3a:9f:e1:91:95:0f:d4:2a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Apr 17 16:00:40 2025 GMT
Not After : Apr 18 16:00:40 2025 GMT
Subject: CN=5f3abe7a2b69398aa2fa634f67affd9f1603d3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:8f:b1:86:d6:64:cb:e7:8e:7e:a5:83:c5:
e5:1b:56:b5:e3:aa:d8:b8:a1:90:a6:f5:01:9e:98:
39:fd:73:bc:06:40:88:99:53:ed:71:90:5b:0d:b6:
0b:7e:52:3c:51:d5:16:a3:ac:10:a3:d4:27:c7:43:
fd:b2:40:6d:f2:de:02:f2:22:a0:0d:32:fc:2d:39:
61:3d:c2:b8:00:e7:e3:70:1a:7c:c9:3b:8d:a1:da:
20:33:ad:e7:c4:8b:2a:b9:14:97:20:10:ec:e1:22:
8b:3c:ab:47:39:71:30:a0:84:01:a1:f9:7c:88:dd:
22:a8:2b:3a:ba:62:f3:ef:30:93:98:83:e8:d6:75:
5d:4a:c4:09:99:0f:0f:5d:f1:92:cf:0f:8e:e0:22:
f3:a4:3a:b0:7f:cf:ba:b2:aa:7d:e5:85:3e:17:ad:
0d:53:f6:fc:3c:15:74:5e:44:ea:31:17:52:c7:1a:
8b:80:36:98:74:7c:0f:ff:10:76:aa:d1:60:32:37:
cb:07:43:a9:be:22:f1:9e:8e:49:df:9b:48:bd:61:
a8:d0:d3:45:a6:af:77:9d:5c:36:86:bd:3a:10:7f:
a5:99:0f:db:7b:72:a1:cd:28:ba:56:4b:ac:f6:a4:
d1:fa:58:09:bf:3d:6f:e8:9c:84:63:67:57:72:30:
65:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3A:BE:7A:2B:69:39:8A:A2:FA:63:4F:67:AF:FD:9F:16:03:D3:BB
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:70:17:a1:42:3a:02:5c:e2:92:89:85:c4:24:93:be:d1:08:
cf:90:9c:f8:e5:eb:6d:a9:91:83:71:1b:a6:a0:fd:18:2e:d7:
81:21:ce:8d:54:f5:c4:f4:00:49:43:ad:bb:7a:9f:36:81:68:
b3:06:50:64:56:36:c0:3f:03:d6:ef:8f:14:4d:01:21:ec:44:
35:cc:15:da:4a:f1:d6:59:3b:b3:ef:ed:f4:57:ce:85:28:03:
c7:6c:f2:9d:88:43:b5:8f:2f:64:6c:8b:26:83:35:9f:00:ab:
51:f1:bb:3c:d7:11:58:72:a2:56:2b:de:f5:76:09:69:46:5f:
ec:0e:49:27:0f:fa:8a:2f:5e:07:36:cc:b8:c1:f3:17:0a:b8:
85:42:01:0f:bb:70:01:c8:08:f5:74:a2:21:44:84:34:60:b8:
e1:bf:0a:16:87:00:8a:be:f1:a4:e5:0e:d8:b3:97:8b:83:ae:
2a:72:b7:37:46:aa:75:9c:ce:db:c2:ee:c7:7e:3b:4f:2d:0e:
41:28:f2:8d:99:32:44:55:2f:55:66:41:cd:60:5a:0b:ba:3a:
97:7b:bd:65:c6:93:e7:fa:f7:36:4b:1c:81:01:ea:f0:3e:59:
43:d5:39:bc:97:b6:18:5c:3c:88:80:17:3b:fc:27:b3:a8:5f:
ac:9f:d0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:30:40 2025 by rpki-client