Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: JFQfyH2FAa5Mq4PLx+LO0NRloSAnSclEbyCDsEP05hs=
Subject key identifier: 8C:BB:0F:A1:52:43:C9:39:71:49:55:0F:8B:0C:1C:94:27:5A:7C:B8
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 0196CF18AE1704905C60631C2E78AD5CE09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 0DF9
Signing time: Wed 14 May 2025 14:00:23 +0000
Manifest this update: Wed 14 May 2025 14:00:23 +0000
Manifest next update: Thu 15 May 2025 14:00:23 +0000
Files and hashes: 1: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: X2keeZQv0tRsI8huCZu9W3c345l7UE/IXZNuOQSonz0=)
2: fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa (hash: le+dLHnCy+Cz7KtAkD9h+I9evtnw4iklRaF6GSYCuDI=)
3: zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa (hash: J1U+yahxYD0pmAirQjo+cOhpxuPTsvVXdeiXTgQsbo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 13:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:18:ae:17:04:90:5c:60:63:1c:2e:78:ad:5c:e0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: May 14 14:00:23 2025 GMT
Not After : May 15 14:00:23 2025 GMT
Subject: CN=8cbb0fa15243c9397149550f8b0c1c94275a7cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:dd:df:d4:54:27:f6:c8:c9:1f:0d:ad:e4:
ec:2f:ff:5c:ad:5f:92:45:93:c7:d1:9f:50:6a:4c:
f1:17:64:4d:b3:ca:bc:32:ec:ee:1f:07:4f:ee:54:
11:fd:4c:62:6f:07:fa:aa:7d:e7:6c:c7:66:7b:9d:
d5:c3:f2:47:1d:ad:f8:b6:a2:35:98:9d:f2:38:8e:
09:c7:d5:16:20:27:f7:b5:12:e4:88:12:c6:78:76:
f8:cc:fa:d8:26:4d:7b:0c:fc:c6:ab:d8:d0:6b:8b:
f2:39:80:1a:e8:5d:f3:0a:54:52:b8:f1:83:a4:24:
b3:e9:b5:06:04:49:8f:02:18:b3:67:52:6b:fa:40:
13:84:90:ac:a2:b0:e8:22:aa:a4:44:7f:74:fa:a8:
a0:2c:c6:06:b1:5e:a2:96:3a:f9:c6:b8:73:c0:57:
41:99:62:a5:db:b7:cf:04:fd:bb:cb:b3:90:2c:ff:
76:ef:1e:0b:bd:e5:3b:20:56:82:4c:5b:6e:79:8d:
97:b9:04:37:e3:c3:15:d3:bf:cb:97:d6:7b:2a:76:
80:c5:f5:1c:fd:49:e5:80:d4:91:9f:51:07:13:a8:
d9:03:9e:a9:4e:b7:96:33:3c:5d:77:76:5b:10:c2:
cf:a2:a2:b8:54:4d:0e:a9:e4:9c:f5:fb:eb:92:9e:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BB:0F:A1:52:43:C9:39:71:49:55:0F:8B:0C:1C:94:27:5A:7C:B8
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:82:f5:ae:2a:58:7b:6b:62:19:ca:ac:0f:31:6e:8c:b1:21:
d2:b7:d9:c9:51:97:ff:62:65:53:e9:39:a6:a5:9a:ee:99:98:
45:0a:63:e9:e0:3f:6c:5e:55:d1:38:22:a3:00:5a:ec:31:dc:
69:b8:4b:3a:8c:ac:f2:35:7b:7e:f6:3b:be:79:db:59:d7:cb:
93:2a:4f:7c:e3:91:94:11:e9:82:b4:c0:4c:c8:da:d9:4b:c6:
76:82:13:1a:1c:79:86:b7:eb:99:a4:ea:75:f3:93:06:02:a6:
01:d7:5b:a1:fc:9a:4a:f4:6a:8b:ef:8c:20:15:e7:0b:56:e9:
20:54:02:4e:f0:74:23:d4:24:78:76:19:67:d8:9c:0a:9d:ad:
98:87:5e:f9:3e:01:51:cc:d0:0b:c1:af:79:fa:b2:28:84:fc:
b1:2b:7e:d7:37:4b:7f:34:94:9c:ec:8b:96:fa:e2:a8:4a:fd:
46:b4:aa:98:a1:48:9a:8c:db:ee:c9:82:e1:de:a1:82:e6:92:
35:04:a1:e3:30:1b:e7:c1:38:aa:be:77:68:b2:c5:4c:94:76:
2b:ea:50:ab:1c:41:1a:76:7a:68:d3:23:d1:53:1a:b5:15:b5:
8f:02:12:21:0d:44:c0:7d:18:a1:ec:48:d4:39:84:12:b4:eb:
6a:c1:eb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:25:24 2025 by rpki-client