Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: V56rPIRiSgcqtPV+IgpRrcpkWSmB6vwf2FGRojmiJx8=
Subject key identifier: 9B:13:5B:C5:55:83:B5:68:9D:7D:43:65:9F:5C:95:6F:10:D0:F7:DA
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 0196B77E76B58B7D94E9D591746C30EE1352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 0773
Signing time: Sat 10 May 2025 00:00:40 +0000
Manifest this update: Sat 10 May 2025 00:00:40 +0000
Manifest next update: Sun 11 May 2025 00:00:40 +0000
Files and hashes: 1: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: IIe1kFi6gqjIgv993I4Q3nL/829Jl2hqzVwWMEeZoOE=)
2: W8Dpmpt_1-01qSbotVM15n3GSek.roa (hash: 8bMbdbcHjYf7KXHu+ym0lwgv0cPY/hCCrTp1Qv0O4sU=)
3: d-If6rwOnPiVqU22C8IZzGvMPvc.roa (hash: giLRuwy5wW+MIOBjFAF7Pd0PEoYtI2K0pgdHGw83fkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:7e:76:b5:8b:7d:94:e9:d5:91:74:6c:30:ee:13:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: May 10 00:00:40 2025 GMT
Not After : May 11 00:00:40 2025 GMT
Subject: CN=9b135bc55583b5689d7d43659f5c956f10d0f7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8f:e4:f2:35:9e:71:01:dc:fe:ed:bf:16:98:
b9:4d:79:79:b9:16:4c:c9:75:da:c3:d7:83:fe:1f:
01:aa:98:f3:93:9f:2f:52:55:aa:99:e7:21:52:71:
3f:ec:d0:b4:5f:7f:35:1d:b7:23:75:ed:06:0b:2a:
52:0a:89:76:7f:90:3f:2d:65:f6:c5:4d:1f:8c:04:
fa:96:d0:ca:90:96:d3:0f:7b:8d:ad:74:f8:e4:27:
dc:5d:f5:08:ec:13:99:3d:7a:9a:4c:ac:f5:da:20:
38:5f:dc:6e:1b:88:65:31:dd:08:a9:ca:1f:34:39:
39:0f:46:b1:e4:b0:dc:f0:35:b7:6e:eb:b7:9f:03:
8a:51:f4:34:86:0e:ca:31:3a:4c:37:bb:81:40:b2:
69:01:d1:70:97:95:ee:95:3b:9a:91:c1:40:b0:7a:
f7:0a:aa:a0:f1:1f:11:ee:91:a9:52:c1:02:e2:41:
b5:b5:03:34:00:62:0a:bb:7c:c1:2c:6d:01:ec:9b:
32:21:d1:b7:35:39:f0:65:fa:93:a7:21:fe:51:5e:
d6:ea:c7:07:a5:fb:7e:13:bb:32:b1:53:ce:fc:4f:
f2:5a:f1:2b:d4:d3:71:9e:8e:5a:c2:64:82:3c:0b:
95:f7:85:58:ea:30:a7:4a:ce:9d:dc:75:04:1e:8a:
f9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:13:5B:C5:55:83:B5:68:9D:7D:43:65:9F:5C:95:6F:10:D0:F7:DA
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ea:64:a2:ed:bf:09:f2:09:65:32:a5:24:7f:a8:bb:04:a4:
56:b3:2a:cf:81:cd:0b:60:9d:17:c7:25:e7:4c:24:8c:4d:29:
cf:d7:d2:dc:6d:68:1b:3f:af:7c:01:f3:62:71:74:fe:32:cb:
b0:81:2a:28:36:74:15:a1:84:cd:ba:2a:c8:c8:e0:b5:ae:a9:
4a:07:9a:e5:2b:27:f1:e9:a7:74:a2:9b:af:85:d0:47:c5:64:
24:db:eb:3a:4e:3b:ac:9d:ec:b8:ab:5e:37:20:d4:44:59:32:
f0:a4:7f:a3:11:8e:fa:8f:d0:8d:fa:62:a2:a1:b3:04:ec:d5:
dd:8c:77:0a:97:71:a7:5f:01:37:eb:03:74:25:79:7b:a4:c6:
5c:cf:b6:48:25:d1:9f:05:d3:b8:61:09:68:f7:42:18:d3:1a:
81:91:77:55:19:10:6e:78:16:9e:19:61:48:3f:7e:73:14:f6:
f3:b6:fd:1b:54:02:47:0d:40:23:08:cc:ee:ec:73:ab:49:9c:
df:67:b8:10:99:9e:8c:6b:91:47:f5:4e:8c:f0:44:98:ed:b2:
2d:07:fc:4c:58:0d:8b:73:93:03:01:5c:e2:e5:e1:0b:1b:07:
c8:08:f7:d1:d9:d5:ef:87:88:06:75:29:19:f5:fd:de:f6:83:
f8:c5:ee:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:41:22 2025 by rpki-client