Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json)
Hash identifier: wjM77uhl30pwOn1uG4c/erXFfOJTJ9JIHkyhKBogULw=
Subject key identifier: 89:B7:28:E2:6E:34:37:51:E3:D3:A4:61:9B:6A:B1:89:66:6E:82:F6
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 0196B6A28BBDF60B8EAE1AB1940294958647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
Manifest number: 0BA7
Signing time: Fri 09 May 2025 20:00:27 +0000
Manifest this update: Fri 09 May 2025 20:00:27 +0000
Manifest next update: Sat 10 May 2025 20:00:27 +0000
Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: s+1O53VGYRDLHXAmxZUWplqLtvezpHcGc/982rzNCSY=)
2: 7d2ToMhT-5ZAU4qsYQXruw_MoIU.roa (hash: vm5X1sab9HJagyLFII3df7BekSqzu2gNn9apIe4J5uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:8b:bd:f6:0b:8e:ae:1a:b1:94:02:94:95:86:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: May 9 20:00:27 2025 GMT
Not After : May 10 20:00:27 2025 GMT
Subject: CN=89b728e26e343751e3d3a4619b6ab189666e82f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:97:40:3e:79:04:d3:36:42:ad:5b:51:44:e1:
9d:ff:3b:a4:6f:62:98:49:af:2c:fa:20:de:61:7b:
47:ac:01:26:0b:2d:52:0c:a1:ee:cb:09:e2:41:07:
12:b2:90:ae:7a:02:06:f2:10:c2:80:94:18:cb:44:
c8:20:b7:f3:6f:00:15:fa:77:fb:00:3f:5a:15:09:
30:9d:8a:2d:5b:66:8f:fa:cc:cb:a9:80:ae:68:d0:
b6:56:e1:a1:bf:11:f5:de:2e:cf:82:f7:41:1e:be:
2f:ba:ed:b6:00:53:5b:3e:10:df:4b:11:6c:94:1d:
a1:d6:a7:e6:18:d8:c3:98:f6:16:2a:54:7f:a3:8b:
6f:a5:60:4b:e9:d9:d0:0d:03:df:92:0c:5b:f7:6a:
bf:c4:70:9d:62:ef:cc:b7:22:7e:fb:31:09:15:c8:
be:1d:e3:13:08:0a:18:44:d2:c6:3e:74:6b:9d:53:
4b:29:a3:c8:e5:6d:0a:43:7f:24:82:a0:2c:02:a5:
9e:2a:01:dc:0d:41:51:6d:ae:1c:ae:50:77:1f:a2:
e0:2d:12:2a:72:2d:a2:20:9c:bb:8c:29:ca:c6:cd:
f5:c1:ad:4a:42:c3:67:45:b4:29:1a:ff:85:f3:f4:
09:da:6f:d0:32:7f:48:f8:08:03:3f:d1:64:ba:64:
1e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B7:28:E2:6E:34:37:51:E3:D3:A4:61:9B:6A:B1:89:66:6E:82:F6
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5f:8b:a8:80:be:72:79:db:e4:d9:51:5b:78:23:6e:a6:c5:
c3:ae:97:51:b8:4e:c9:bf:cc:ed:2b:90:a7:af:86:5b:37:79:
fa:28:f9:75:57:b8:5b:66:cd:36:18:ae:43:99:82:b7:0a:43:
a0:92:62:2a:18:7a:8c:33:d5:c9:5f:a4:85:eb:d1:08:fa:f7:
cc:8a:d6:75:7d:f8:43:1a:b9:ec:d1:6b:9d:a1:41:9b:3f:d3:
d1:8f:69:ab:3c:2c:65:c6:bf:b9:b4:3f:fb:40:82:f3:73:64:
2c:d4:9d:a3:7c:e4:20:73:fd:6e:82:2d:70:b1:cf:04:c6:e9:
5a:6e:b6:23:f7:35:d5:b9:07:0e:e3:d8:15:5c:ab:92:f6:de:
3c:d5:b5:8c:d5:15:44:ba:b2:88:6a:48:68:88:fa:a4:45:4d:
12:10:34:57:82:6f:ac:67:b5:ba:31:4c:c6:8c:25:ed:39:dc:
b9:27:b0:17:48:b9:f6:99:bd:1b:91:13:5b:33:f3:af:fa:a1:
49:27:cd:72:00:e2:95:b3:01:05:bd:d3:6a:c1:b6:1b:2e:31:
b8:26:04:d8:a5:f3:b6:ef:55:69:6e:58:4f:56:aa:89:5b:90:
14:26:e2:cf:50:8c:29:f7:6c:61:94:25:48:5d:3e:e1:07:1c:
f7:d5:62:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:02:41 2025 by rpki-client