Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: Q5NAaQeiAJZAfeY5kPrbniwm3+qoEWCq1RqII9/ld6k=
Subject key identifier: BD:AE:3C:D9:8A:89:26:4C:DC:27:60:39:EA:B5:D3:1B:8C:67:A6:31
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 0196B7103BE67B2F6D863884C574544AEE57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 04C3
Signing time: Fri 09 May 2025 22:00:16 +0000
Manifest this update: Fri 09 May 2025 22:00:16 +0000
Manifest next update: Sat 10 May 2025 22:00:16 +0000
Files and hashes: 1: 1eJwg5skWWcGDXFLNTcOwNfaXOs.roa (hash: 7FGDI31rrxDDlErzYzWSkDOB2c3i2HKAdvNrAxAMr8I=)
2: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: HCFJ0tGRSz/cHKjjAK9K4ENCHdsP4rOmNLN1P2a3Lbo=)
3: Pu9BTwuj73Y1OYZEEjY0ZHH4Hw0.roa (hash: wFwRyxZLAd3FNxCgO3OSOt8i3+YrAeILPNwkW0awCVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:3b:e6:7b:2f:6d:86:38:84:c5:74:54:4a:ee:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: May 9 22:00:16 2025 GMT
Not After : May 10 22:00:16 2025 GMT
Subject: CN=bdae3cd98a89264cdc276039eab5d31b8c67a631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:e9:43:ad:a6:73:e8:e2:1c:17:0f:84:fa:
35:1e:7d:71:e6:c2:d2:ae:dd:8f:2e:fc:52:15:a3:
61:64:20:ad:a7:a1:3a:7f:79:45:30:fb:04:6f:f0:
f7:d9:55:35:e8:14:de:89:99:02:b5:be:1f:1c:57:
1d:8b:d0:0e:78:b3:de:4b:58:23:60:ce:7e:66:a2:
b8:37:05:2c:97:dd:67:e4:b5:1f:e0:99:3a:c0:3b:
3d:1a:7f:c7:bc:a1:ad:cb:58:3e:7f:86:75:ca:30:
da:8b:ab:37:9c:7f:4d:78:eb:1b:d2:97:a8:52:bc:
42:9d:83:af:b0:f2:59:ed:2e:95:e4:98:3a:fa:4f:
1e:1b:56:6a:61:1e:e3:60:ef:f4:a3:4c:23:64:7c:
8d:26:9f:9f:bc:60:10:74:36:bf:93:eb:84:97:c9:
56:5e:24:2c:d2:16:9e:0e:cf:bf:76:15:98:78:ef:
f5:be:0f:94:be:ff:39:2b:8d:8b:28:d1:c0:e2:40:
fd:6d:98:99:cf:8c:3f:e0:b0:4a:97:ae:ab:8d:0a:
30:fc:34:3d:55:86:9c:18:4d:81:d5:34:8a:6d:67:
b8:af:bf:66:ac:55:b2:59:a3:87:f8:01:2a:ef:f7:
04:06:81:05:b9:5a:4c:d5:94:4a:e1:c1:88:4d:1a:
19:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AE:3C:D9:8A:89:26:4C:DC:27:60:39:EA:B5:D3:1B:8C:67:A6:31
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e3:3d:21:18:23:ea:67:d7:59:bf:43:99:ab:43:fe:a0:39:
20:1f:d0:45:df:1e:74:47:29:ba:83:25:09:26:57:64:a8:a6:
bf:12:fc:11:62:f2:d9:f9:1d:12:e4:c6:48:d3:80:25:4b:de:
64:1a:8f:74:00:84:fb:30:59:74:63:7d:c8:02:a9:26:71:44:
30:f2:a9:6d:9d:0c:d5:aa:b7:6b:fc:8b:96:7f:1c:5d:ea:3e:
cf:55:ec:27:8b:e4:68:39:a0:50:4b:89:96:da:24:2e:4b:04:
61:ca:2b:27:9d:1e:c8:f5:60:14:57:ba:49:0f:50:df:69:95:
b4:67:db:d8:27:7c:5b:c4:bf:36:5a:27:9a:6a:eb:d4:85:c5:
8c:72:1c:a6:0d:72:48:5f:56:f8:db:cc:09:78:29:6f:b1:3a:
6b:39:92:07:a3:39:86:c3:f1:f8:f8:75:19:b7:c1:32:f5:9f:
e7:55:a3:cb:a4:9a:13:df:cf:48:7b:06:48:34:5d:fc:3c:80:
be:65:f2:3e:ad:69:2d:a7:3c:40:d5:a0:ce:70:b7:9f:cc:b8:
88:ce:80:b5:c9:90:db:a0:e1:8f:cd:82:9e:83:39:fc:20:72:
aa:be:d8:05:e1:0f:9e:42:a2:77:88:ba:02:71:80:cb:5c:80:
0c:1e:6e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:18:59 2025 by rpki-client