Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
File: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft (raw, json)
Hash identifier: 36qqSYz1Vi76g93aYJ54vpwv2cHAeE2J84xan2sXfNQ=
Subject key identifier: CC:6A:83:92:B6:FC:9C:D5:F1:03:15:C3:A2:0F:F6:7B:C4:11:8D:1B
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial: 0196CACE66F029C8C42329CB4F35BF2212B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
Manifest number: 111E
Signing time: Tue 13 May 2025 18:00:46 +0000
Manifest this update: Tue 13 May 2025 18:00:46 +0000
Manifest next update: Wed 14 May 2025 18:00:46 +0000
Files and hashes: 1: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl (hash: ghqOuz9MFvysPkuYrhfvdKhRXWCFENbk7dkBxlRwcU8=)
2: q36KB3psJEdwM9htMyeD7v_JoOg.roa (hash: TalVhq3AmB2TIBAEtWkTlS4vjvUd3V9bg1ZpQQHry4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:ce:66:f0:29:c8:c4:23:29:cb:4f:35:bf:22:12:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Validity
Not Before: May 13 18:00:46 2025 GMT
Not After : May 14 18:00:46 2025 GMT
Subject: CN=cc6a8392b6fc9cd5f10315c3a20ff67bc4118d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:99:36:16:ab:b8:e7:5b:8b:09:2c:18:92:
d2:91:20:fc:82:16:fd:4c:84:b7:e8:42:8c:75:76:
36:2b:fe:1c:dc:fc:80:32:b2:9d:9d:06:c8:3a:33:
be:34:f3:a6:a2:1c:83:dc:30:0e:68:0d:38:ad:49:
42:e6:e3:24:66:d6:a1:72:79:c8:20:95:59:10:b2:
7d:77:41:58:05:14:43:50:2a:1f:92:74:54:3c:e8:
32:dc:5b:fa:90:1d:ed:24:72:ba:b9:42:83:41:19:
e8:d7:0e:7e:cb:3e:27:e6:cb:d3:8d:11:7a:8c:25:
04:63:cf:ab:9e:ed:2b:d7:0b:27:b3:33:c8:50:17:
5f:e1:47:63:d6:88:7d:19:07:32:e1:c9:49:fc:07:
91:e7:01:0a:84:6c:3c:9f:ee:53:79:06:40:3e:47:
77:59:78:2b:64:c5:20:7f:06:32:8b:8e:66:5b:7c:
8f:81:ee:fc:dd:fe:fe:39:20:e5:c8:e8:fe:5e:9a:
c1:09:5a:8b:ee:40:e5:18:e7:c2:ab:f6:cf:85:39:
2e:d6:52:a2:70:c9:86:2f:73:29:e1:78:ba:df:9e:
b8:bd:05:69:ed:6a:28:13:e3:df:50:78:59:12:2f:
83:14:20:74:fe:57:82:eb:7f:82:96:a5:10:69:ac:
d4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6A:83:92:B6:FC:9C:D5:F1:03:15:C3:A2:0F:F6:7B:C4:11:8D:1B
X509v3 Authority Key Identifier:
keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e5:b8:e4:f0:b7:2c:f2:5f:8d:37:57:5d:0b:9e:c1:91:99:
7b:06:41:82:ec:1c:98:45:68:e5:7b:0e:ab:03:24:89:9d:e0:
5e:fb:0d:06:91:76:b8:fb:6a:81:0b:1f:3b:65:18:87:2e:59:
4b:27:b4:cd:4c:1e:5f:69:0d:35:9a:1f:55:15:28:e2:51:17:
d9:95:a8:1c:39:35:f9:ce:73:5e:c3:ab:6d:59:b9:ab:4e:c9:
ed:12:4d:cf:f1:0e:6b:70:c0:98:22:16:8a:64:14:48:63:f1:
c1:5b:28:98:7b:ce:b7:cc:26:59:6b:d9:21:92:fc:a8:d0:33:
e5:84:5c:59:90:99:61:b0:b9:12:59:34:3d:47:84:55:8a:e9:
c8:41:fe:21:40:2c:16:b0:08:5d:79:7e:44:5b:c4:e4:6d:f9:
4f:76:aa:ad:39:5c:6d:2f:f9:e9:37:9b:5a:79:ad:b1:0c:7d:
ad:3e:be:c5:e7:f3:45:9c:d7:27:e4:26:c3:e4:2b:1c:c9:bd:
b0:dd:9f:67:29:d1:f0:86:44:1b:c4:9b:6c:2a:f8:98:ad:97:
fb:3d:45:a8:26:d4:13:ec:d7:39:58:5c:df:d8:bf:63:3e:58:
bf:51:a5:84:62:52:7b:c5:8a:37:0c:a9:34:eb:bd:9e:fd:c0:
7e:e6:49:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:25:20 2025 by rpki-client