Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
File: 3F-syhTeCBdO9clskfHngl9C0Hs.mft (raw, json)
Hash identifier: 5tpUYf5Z77WS1F3bB8t8jhFk5E4KZVDP4HoWRbtq4A0=
Subject key identifier: D6:A5:6C:88:3F:AC:EE:32:05:58:F0:DE:90:F3:4C:E9:11:30:EA:03
Authority key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
Certificate issuer: /CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Certificate serial: 0196B446DC26F8754809959ADA78E823BA0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
Manifest number: 1221
Signing time: Fri 09 May 2025 09:01:04 +0000
Manifest this update: Fri 09 May 2025 09:01:04 +0000
Manifest next update: Sat 10 May 2025 09:01:04 +0000
Files and hashes: 1: 3F-syhTeCBdO9clskfHngl9C0Hs.crl (hash: j61uiHaLoE98Bb1sRNkaofuvFn7jd7sqi7/dZ50A6Rc=)
2: nyyFnipIH8x-WXxVr5E31pzM3bw.roa (hash: F30BRqsOUfGjHcN42efG2ZXnRs6ncB05ESHRlvFrG98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:46:dc:26:f8:75:48:09:95:9a:da:78:e8:23:ba:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Validity
Not Before: May 9 09:01:04 2025 GMT
Not After : May 10 09:01:04 2025 GMT
Subject: CN=d6a56c883facee320558f0de90f34ce91130ea03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d4:5a:00:e0:7f:d6:b5:70:98:39:35:ff:a3:
05:c5:22:1c:b7:04:cd:40:5a:83:14:20:26:f9:ad:
3a:c6:ae:e1:f5:8c:f2:44:f6:87:99:01:8e:b4:7f:
c8:e4:eb:fc:27:bd:d4:04:30:45:f8:9d:77:18:c5:
dc:8d:1d:10:bf:a0:ee:1c:6a:5e:ef:2a:12:b9:5f:
f9:e3:4a:96:5e:35:76:fa:c9:a5:32:d0:b7:46:0e:
8c:69:f1:50:88:ac:8c:1d:45:12:fc:db:17:d5:1a:
92:78:6c:cb:58:2e:2d:75:a1:39:31:38:90:78:14:
27:fa:d1:96:19:31:13:40:1a:a4:90:b4:59:a8:c8:
c4:0a:0d:21:33:2c:46:ea:58:c4:e6:e7:9e:15:a9:
b6:a2:42:09:e9:bc:02:0d:f3:6e:6e:19:b7:83:e7:
ea:42:7a:a1:51:13:b6:ea:34:8b:4e:19:fd:4f:fa:
48:48:d2:e6:4d:a9:17:fb:5d:90:f3:b9:be:11:5d:
c3:d2:d8:f7:c6:14:54:9d:83:35:b7:ad:27:6b:9f:
73:2f:a9:58:45:06:d8:c2:20:f8:29:8a:10:7e:cb:
11:94:7f:e0:ed:aa:c8:32:ba:ed:30:1c:57:28:2d:
e4:34:58:01:3d:90:06:16:a1:ca:30:b1:85:85:06:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A5:6C:88:3F:AC:EE:32:05:58:F0:DE:90:F3:4C:E9:11:30:EA:03
X509v3 Authority Key Identifier:
keyid:DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3f:67:6a:bc:8a:99:91:db:52:be:2c:34:6c:9c:8d:ba:b5:
3f:56:9a:f1:ca:c9:1e:9a:bf:93:d3:b1:dc:7e:4c:95:0b:51:
57:30:fd:51:5d:d0:37:0c:6b:bc:ca:41:c9:fe:03:e8:a9:00:
08:24:bf:b7:45:7a:28:ab:44:22:06:bc:9f:12:78:4b:fe:a0:
cc:59:cd:2a:4a:43:44:b6:2f:57:2c:7f:a8:c3:27:d6:bf:71:
4a:cd:92:f2:b8:72:ea:a2:b2:78:3f:50:6d:b5:66:57:38:37:
07:1f:b9:1d:c9:60:60:72:60:bf:b2:29:f0:91:aa:6d:17:13:
52:31:c1:da:2b:da:6a:da:7d:bf:c9:3b:ec:8d:86:74:eb:e7:
08:5f:39:56:3c:a5:89:76:bc:2d:13:b5:37:a2:09:36:31:34:
e2:76:08:a4:a7:f7:14:d7:5a:d1:aa:77:51:a2:06:54:4b:f6:
f1:39:0a:1b:23:f1:6c:7a:af:22:48:2d:f8:78:dd:32:f8:ab:
6b:0f:c6:6c:4b:50:98:21:df:b0:0a:b6:8a:54:c7:39:83:37:
8e:b0:6d:77:f3:da:49:9f:11:9e:77:99:f3:0c:ce:63:fe:26:
2a:d9:83:60:0d:88:f8:94:9b:c5:68:13:4b:96:68:c3:e5:3c:
94:fc:b1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:03:25 2025 by rpki-client