Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: js9PISr+ttfDRFx0REplDEDgJuCls7L4Q2sKXIs3pY0=
Subject key identifier: 29:EE:C6:A4:3D:86:BD:B5:BE:30:DE:0E:A0:CA:E6:06:6C:91:4F:9E
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 0196BD49498328FE1E25638BEB3170259864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 0A41
Signing time: Sun 11 May 2025 03:00:18 +0000
Manifest this update: Sun 11 May 2025 03:00:18 +0000
Manifest next update: Mon 12 May 2025 03:00:18 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: elWpVwKx/rg9+LNgUJRbfE+BbHrAsLnpnddeGo8rSFQ=)
2: 4NcSUJ4Kg8dewIwP8RGgWPLVsGw.roa (hash: NfguGRutDpTl33g3TT2hnx9Rfi2f9fnIaQJYs24UAYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:49:83:28:fe:1e:25:63:8b:eb:31:70:25:98:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: May 11 03:00:18 2025 GMT
Not After : May 12 03:00:18 2025 GMT
Subject: CN=29eec6a43d86bdb5be30de0ea0cae6066c914f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:93:70:5d:dc:c9:47:d1:a9:0f:fd:a4:8f:05:
8e:0a:eb:0a:82:14:75:14:eb:de:b7:20:f0:d7:31:
8a:3b:54:15:61:1c:68:03:d3:6f:50:28:3f:2e:a7:
07:ec:e0:72:6c:09:2c:c8:13:aa:b6:b8:4a:2e:98:
da:4a:01:94:67:c8:69:ee:f8:36:a0:e0:3d:cf:46:
88:e1:bb:dd:b3:c4:d6:e6:b9:fc:7b:07:e9:14:3a:
18:20:e7:7a:63:26:c1:f0:08:15:14:64:2d:68:cf:
1c:de:b4:a9:62:dc:79:f0:9d:3a:98:ec:0d:60:b8:
b9:ae:87:c2:71:a2:7b:fc:13:05:b9:d9:e6:64:fe:
45:d8:12:94:c9:91:10:3c:ee:06:17:1c:f6:d0:9c:
7f:aa:d6:ff:3d:12:2c:dc:c9:98:0d:05:66:e4:3c:
33:ab:fa:3d:2c:d9:7c:be:90:64:2d:b1:e5:8b:e7:
d7:93:64:5c:35:f3:56:35:c9:75:dc:5d:bd:6a:7a:
b1:d0:18:7b:1c:d0:a7:30:79:88:16:5a:dc:79:07:
c4:25:7b:95:e8:b8:27:38:b2:3d:b8:30:11:de:be:
92:58:87:33:69:c1:ae:5b:30:08:45:0f:cf:22:ab:
3c:ac:7b:82:a8:5b:c3:13:00:f3:85:4d:2b:09:e0:
9e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EE:C6:A4:3D:86:BD:B5:BE:30:DE:0E:A0:CA:E6:06:6C:91:4F:9E
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:cc:37:f4:90:6a:5b:5f:1e:99:62:ee:52:73:39:20:15:ee:
10:84:f9:59:73:cd:2c:2c:ce:9c:c3:22:d8:14:ea:2d:3c:0c:
b1:3f:4c:ac:8c:db:43:8e:db:06:6a:dc:37:e1:b4:36:e6:d7:
95:ea:c6:c1:6d:33:7b:21:ce:2c:ac:b6:51:5a:a1:78:52:40:
ec:50:1b:7b:6c:d3:91:6f:82:a0:ae:51:70:98:d9:67:e7:88:
51:90:1e:a6:1c:d6:2d:2f:bd:a7:18:ff:0d:de:6c:eb:5e:6f:
5c:51:a2:93:36:e4:84:d7:0a:23:a8:64:06:fc:d3:04:ab:46:
37:af:71:a7:8e:03:c2:83:71:02:db:28:a0:39:3e:84:f7:06:
94:6c:d8:85:38:a2:d3:e6:c0:07:00:76:e0:9a:bf:32:2a:f2:
9c:28:c0:46:29:72:5d:8b:7b:e1:9c:49:f9:5a:16:f6:a9:7c:
11:33:5f:49:b4:6b:a1:8a:66:57:b7:1f:2e:b3:4b:77:08:95:
50:a6:8a:2a:71:7e:86:b7:65:73:32:82:c5:d5:0f:eb:04:f0:
0f:ac:6a:34:db:36:a2:ec:73:05:43:22:3a:6a:a4:ca:f1:7d:
2a:94:bf:67:a4:42:0c:9b:ab:94:c9:80:15:e2:ed:6c:dc:e3:
ea:4d:a2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:03:48 2025 by rpki-client