Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
File: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft (raw, json)
Hash identifier: oYrhTws99wSBImhe5cbOaVIvX1EB0v+1pXrwQyJ1P28=
Subject key identifier: 65:A0:5F:95:B8:DD:BE:B5:CA:6B:D2:7A:FD:35:29:9F:CB:0B:7F:B3
Authority key identifier: DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
Certificate issuer: /CN=dea85f21668a98d7e81a74183f0cce513086601b
Certificate serial: 0196A24018A6C80715F503DD80853024A128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
Manifest number: 04B9
Signing time: Mon 05 May 2025 21:00:31 +0000
Manifest this update: Mon 05 May 2025 21:00:31 +0000
Manifest next update: Tue 06 May 2025 21:00:31 +0000
Files and hashes: 1: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl (hash: VNVtl+UDG9+vNjNLtESXyL2fJd8b1gQh1BWLdsccRVQ=)
2: Vnw9H8iqt-gts3LY3CEVf7p6PaE.roa (hash: s2vDBc3kUppwqWxQSMIljxY/yV7+Xm77EH+5A9yGbgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:40:18:a6:c8:07:15:f5:03:dd:80:85:30:24:a1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea85f21668a98d7e81a74183f0cce513086601b
Validity
Not Before: May 5 21:00:31 2025 GMT
Not After : May 6 21:00:31 2025 GMT
Subject: CN=65a05f95b8ddbeb5ca6bd27afd35299fcb0b7fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:bb:6b:a5:dd:fd:78:70:4c:49:1a:77:fd:
2e:04:0f:fb:e0:e9:6a:b7:a0:f8:fd:b1:6e:79:eb:
d2:21:3d:5f:50:2d:a6:f6:f8:b0:8b:72:89:16:7f:
b6:a9:50:39:1b:2c:41:90:f9:67:7d:f9:b4:c2:cf:
f2:69:0c:be:20:44:3c:0e:ed:5a:e3:73:f6:e5:ab:
ba:84:5f:99:d9:87:0a:c5:6b:ce:7e:5b:60:41:f2:
07:c2:d9:c5:8d:48:4b:9b:40:e0:61:ee:da:73:ea:
26:26:ee:88:b7:48:49:91:15:59:bf:63:61:80:da:
66:bd:19:31:eb:3d:14:97:39:88:7f:64:b0:98:76:
f0:2b:5a:64:3c:da:60:65:cc:17:a2:23:c2:0b:b4:
7f:0e:13:ae:b2:24:0c:cb:50:6e:17:8e:08:c2:78:
24:90:56:52:e3:1b:e1:b3:65:02:76:5d:aa:6a:bd:
7f:fa:23:8a:be:88:47:39:34:55:85:f1:d8:ec:54:
70:0b:af:46:f7:7f:b4:4f:58:5a:47:3a:3f:70:dc:
66:0f:1d:50:ae:6f:4b:ce:62:af:2f:40:31:2c:b8:
c3:8b:3c:b4:29:f9:dd:73:68:c4:b9:10:04:c2:0c:
ca:26:39:e5:a9:15:07:24:a8:a6:87:a4:c6:f3:e3:
ee:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A0:5F:95:B8:DD:BE:B5:CA:6B:D2:7A:FD:35:29:9F:CB:0B:7F:B3
X509v3 Authority Key Identifier:
keyid:DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:20:05:dc:a2:7f:63:0c:3c:7a:42:c6:f5:fc:2c:ef:aa:45:
f2:6d:a4:a0:bf:49:e6:8a:66:44:0e:d2:c4:8a:09:2d:6b:3c:
2e:eb:1f:cc:56:a3:92:c2:05:47:1d:a0:f8:26:f2:3f:2e:60:
ba:2b:a4:49:e6:0a:53:f0:e0:71:4c:d2:88:ff:0c:07:06:56:
e6:3b:63:ed:d6:47:f2:dc:17:a8:93:ae:39:33:d9:47:7a:08:
f9:38:56:85:6b:df:5e:52:21:60:ff:3f:de:af:4d:fb:33:74:
65:a3:95:91:d3:ba:a8:fd:fc:b4:b2:25:ab:a0:f5:a9:ef:c2:
d9:8e:f0:8c:a8:5c:2e:ed:5f:21:ad:f4:52:e9:cb:31:6c:2d:
c6:34:3b:8b:de:cd:86:a7:2e:c1:1c:d8:ab:81:6f:48:79:db:
bf:bc:d7:17:81:85:09:84:fc:b9:eb:2d:8f:2b:eb:51:37:46:
5b:8f:5b:48:83:0b:51:b6:e6:a6:7b:78:9d:91:66:03:bc:96:
b2:ad:ba:30:59:8c:83:d1:a9:32:e9:ab:b1:f7:24:0b:9f:8a:
34:6c:50:9c:ea:cc:06:d1:17:27:dc:b4:87:38:16:bc:14:8a:
c6:ce:c3:c0:2f:6f:9b:13:60:14:aa:db:b4:35:4b:25:47:11:
72:fd:b6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:17:31 2025 by rpki-client