Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
File: 3f2U67jLmKHb31C9zWncwpFEiJ4.mft (raw, json)
Hash identifier: XWcrLHwDTAR48QKgzbWG5Uy1kNQEFwvlmZ3eKhv8qE4=
Subject key identifier: 41:33:1A:B7:C1:E9:20:AE:DE:59:81:E9:4A:F6:E3:45:56:B0:18:34
Authority key identifier: DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
Certificate issuer: /CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Certificate serial: 0196A7666BE8EBD45917021FFCB16AD41590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
Manifest number: 0C0F
Signing time: Tue 06 May 2025 21:00:29 +0000
Manifest this update: Tue 06 May 2025 21:00:29 +0000
Manifest next update: Wed 07 May 2025 21:00:29 +0000
Files and hashes: 1: 3f2U67jLmKHb31C9zWncwpFEiJ4.crl (hash: uyBGyacXMlEs/IyHdZHbSPY4YfamJlVqY1cFU3+4lSk=)
2: yOI7tiSRDXgdskD_bs5AhIY61n8.roa (hash: jCxGB8CWsOl2EvkB0hTjOgeBy34atnE5kB7r6h+CCmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:66:6b:e8:eb:d4:59:17:02:1f:fc:b1:6a:d4:15:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Validity
Not Before: May 6 21:00:29 2025 GMT
Not After : May 7 21:00:29 2025 GMT
Subject: CN=41331ab7c1e920aede5981e94af6e34556b01834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:26:85:7c:42:0d:5a:53:44:ac:87:1e:e1:fb:
61:a5:2e:e9:4a:45:52:74:67:2a:bd:e7:a6:fc:9b:
6c:9a:72:d8:bd:bb:b8:39:d3:98:0c:57:0f:3d:77:
f0:8e:2b:2f:ab:1e:4b:ef:9c:bb:f2:9c:ab:40:60:
fd:54:c9:23:78:46:0f:f2:e2:78:97:d8:0d:bc:87:
d7:75:e8:d6:68:97:35:60:10:8b:2c:e8:12:d5:5a:
39:00:1d:19:dc:28:29:95:fc:57:9b:3f:a5:d7:63:
53:75:a5:ed:5d:fd:ac:42:2e:33:59:ac:8b:9a:a4:
3e:f9:32:76:c7:39:8f:cb:67:c2:61:0c:be:ba:2c:
4d:fe:0e:26:86:17:7f:53:ad:bd:6f:f7:28:60:c7:
75:06:33:ed:a2:82:91:fc:ac:ce:84:19:56:49:99:
47:c6:12:f0:9f:1f:4b:1e:e3:69:22:c5:8d:0f:ab:
0b:4c:f6:66:17:0e:7e:ac:59:c6:7c:48:5b:a2:38:
2c:a7:f2:df:ed:b8:d5:0a:a1:8f:8c:e4:a1:0f:30:
38:57:4b:a2:e6:4a:fb:f6:13:47:8a:3c:a6:6c:4c:
e6:e1:0e:ee:41:5f:08:dd:d9:3a:82:fa:37:2d:29:
f5:e1:ac:9a:d3:18:a2:6a:06:3c:72:e2:4b:b1:b3:
28:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:33:1A:B7:C1:E9:20:AE:DE:59:81:E9:4A:F6:E3:45:56:B0:18:34
X509v3 Authority Key Identifier:
keyid:DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ee:79:73:be:19:bb:89:86:ee:3a:4d:d1:25:eb:43:18:1e:
75:56:e7:08:36:9f:9e:07:12:c6:f6:84:54:dc:75:08:6a:b1:
2a:11:1c:a2:ea:63:37:6e:3d:af:67:9a:b5:5d:92:93:a6:41:
25:c1:b7:56:1e:c0:71:ed:af:7b:1b:2d:64:1e:7a:7e:48:a2:
01:90:19:d1:64:bd:66:3d:f7:8e:61:ab:66:a3:da:8d:8a:d2:
92:39:a2:bf:1f:bb:8f:05:28:d2:7c:c2:bc:6c:bd:af:05:77:
fc:38:12:d7:5d:f9:d2:82:7d:10:aa:07:b0:cb:0c:69:c2:8b:
53:ee:d0:7e:34:95:42:61:10:1e:a9:db:fc:8b:13:79:44:b4:
32:60:81:93:0b:33:1f:91:a7:9e:f3:9a:f4:ac:62:4c:ba:b0:
e5:d2:09:60:0e:d2:77:97:15:ce:31:9b:f8:9d:36:8c:64:4c:
d5:ac:b4:b2:bc:d1:93:f4:99:31:66:55:48:cc:74:48:64:24:
11:37:ac:57:51:6d:cd:a6:bd:b1:21:5d:9c:08:0c:ec:4e:80:
75:4a:b9:20:cd:65:c6:95:83:a6:ff:cf:7c:ee:95:4f:a7:40:
2f:b3:22:b2:25:b8:49:31:2d:68:80:25:18:63:d9:7f:43:f4:
ac:e6:41:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:43:19 2025 by rpki-client