Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
File: 3R2uzTCut0ZSu92l2tlnbOSIqkk.mft (raw, json)
Hash identifier: JNTlr050K6V4ZAOp1e8TQuHEqn/bUsfz0YXWu4Iyimc=
Subject key identifier: F6:59:62:86:D3:5E:5B:B3:98:98:52:28:76:C3:1F:26:FE:9D:52:A0
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 0196B558ED9A959BBC3DBF973CA72E9446BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
Manifest number: 0856
Signing time: Fri 09 May 2025 14:00:26 +0000
Manifest this update: Fri 09 May 2025 14:00:26 +0000
Manifest next update: Sat 10 May 2025 14:00:26 +0000
Files and hashes: 1: 3R2uzTCut0ZSu92l2tlnbOSIqkk.crl (hash: wkh8lm5vn6polB3AS6w+I/CoooYUZKMYZrLG0yWMnG0=)
2: 3jwAJkscmhb8NSw4un_w0ZUqE_E.roa (hash: /Q2oG/fmxx/4QlsXXEqOyxHV9Ye6s1RkScscquc109A=)
3: 4mOa1eiOJdcewQ4JsIW-qskCauo.roa (hash: iU5a4TzwFm2kJsvICm/D9T1ZRQoz++Cq67dw1/HeL2g=)
4: CXGUOccTDu6x1YyIQfa-qjSpPdk.roa (hash: r4qpBtId2VEmuyzWlIPXdikWdV98Yneiil1e7VOsia4=)
5: IlOsEMD7ILB9j5FhhZ10NN6XXx0.roa (hash: gwOuiCu86d+6YjbDxDzDd3u72bl4nQy8FzU+NPDlo3k=)
6: cMeqdhzIVxayTI5Te-oZwPQzjz0.roa (hash: opO/yGSPCMGlHiRXXAkyr0DveRWYRoFkmjqGZrYYDFc=)
7: dsfkSXYJLfZWJjDQMc0Y0owm7FA.roa (hash: W0p5k/KWht0yDd7EzO060gDAd+rVO0Q+Y0m/UDAfM10=)
8: z21uLBAl7J5qNeu7_wTnfr1gN3Q.roa (hash: hGK3SDsyu3nnm6fMnZyOrn3oCumiT/HHk1hSsPcxxpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:58:ed:9a:95:9b:bc:3d:bf:97:3c:a7:2e:94:46:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: May 9 14:00:26 2025 GMT
Not After : May 10 14:00:26 2025 GMT
Subject: CN=f6596286d35e5bb39898522876c31f26fe9d52a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:a1:15:b7:99:5c:39:75:d6:66:72:b9:80:
a3:e0:c6:77:e3:1e:e0:db:18:dc:04:69:d1:68:e7:
c3:66:36:83:e8:83:7b:6e:8f:33:b9:69:8c:5c:7d:
84:35:8f:21:c6:99:07:af:fe:e7:3e:b0:41:86:2c:
4b:35:69:b3:74:01:ff:dc:da:24:ac:0a:cf:c3:25:
db:d7:74:41:52:e9:5c:97:06:a8:cd:f5:07:35:3d:
a7:a0:9a:44:bc:93:bb:7f:c8:83:b7:9d:cb:22:03:
81:aa:88:56:5f:bb:d2:93:8c:28:e4:87:b9:63:f4:
5d:0c:93:32:d0:d3:82:71:48:78:bc:e3:b8:65:10:
77:f6:45:19:f4:f8:55:b7:da:14:1d:82:6d:7f:14:
cf:6b:c1:15:3b:82:f3:32:03:86:18:74:9e:6e:51:
3a:1d:7f:40:95:71:4b:54:c3:78:b3:95:bc:46:4a:
53:16:eb:c9:b5:08:4e:a7:ee:6e:7f:6f:da:fe:bb:
ff:f1:d7:d3:e3:e6:97:6f:b4:d3:f8:ec:e2:72:69:
42:3c:d5:27:47:ae:34:eb:20:b8:98:fd:34:40:6e:
00:ad:71:16:bb:91:7f:6a:2a:b5:4d:4b:96:80:04:
73:9e:72:d4:67:6c:e2:72:9e:66:72:5c:5b:48:bc:
75:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:59:62:86:D3:5E:5B:B3:98:98:52:28:76:C3:1F:26:FE:9D:52:A0
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:72:5b:75:93:03:e9:6c:b2:6a:ae:e0:e4:ab:44:b6:0d:9c:
53:25:94:fa:ef:3e:ad:3f:63:52:0d:06:36:62:a5:d6:de:b9:
57:17:4a:cd:33:65:f2:48:c3:d0:73:bc:61:37:9b:ab:db:03:
91:20:c7:0b:d2:c9:32:53:19:5e:52:7e:48:1a:7a:7f:aa:06:
38:23:34:a7:54:df:a0:16:a6:a2:98:27:1d:bb:a2:d3:3f:14:
42:e2:cf:b1:4c:78:00:09:40:1b:25:74:b5:a5:8b:1f:2c:41:
bd:14:d0:c4:02:ef:96:f9:76:bb:53:11:2b:96:b2:85:1e:dd:
10:24:c4:09:25:69:d7:e1:a1:61:cc:90:7b:d0:97:12:2d:63:
c1:90:2b:71:fe:c7:fd:84:4d:ed:ab:3e:e6:31:b5:00:56:02:
a4:5b:59:86:a1:5e:e3:aa:55:f6:6b:5e:90:80:7c:8c:b2:11:
1d:30:7f:7f:9e:6c:dc:86:cc:aa:e8:69:48:6b:fa:f4:40:6a:
26:0a:6d:14:c6:d5:8a:86:71:23:d0:ca:de:dc:7b:4d:94:9e:
61:50:26:b4:1b:37:74:8a:4f:72:df:80:ef:f8:cc:28:66:86:
dc:ed:f9:c8:da:56:87:55:ad:90:2e:94:c4:2a:9d:b9:a8:36:
ac:62:53:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:58:39 2025 by rpki-client