Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
File: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft (raw, json)
Hash identifier: HNGVRRUre8gvRZMkidQHQk8agLEEcLRQMI0Ry5LfuRU=
Subject key identifier: F0:94:D5:04:68:EB:40:B2:AF:C0:2F:7A:AA:85:3F:B1:40:F1:0A:64
Authority key identifier: DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
Certificate issuer: /CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Certificate serial: 0196AE7B7E0B098DECD29E2D5105625863E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
Manifest number: 0DAD
Signing time: Thu 08 May 2025 06:00:50 +0000
Manifest this update: Thu 08 May 2025 06:00:50 +0000
Manifest next update: Fri 09 May 2025 06:00:50 +0000
Files and hashes: 1: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl (hash: LIxtIJPlCfSsVX4TDWza0nDBN5Ht4fzBenF7RXCmrdk=)
2: Kw550ydpOki0PWOYy-6z5BR-VIE.roa (hash: DJKKlAPQ1FQMVESwtaTdBMt71sNwkspOh/dlMgsjkTY=)
3: fcEpjbgKYOO71SWou3_dCE-kLKk.roa (hash: zROet63WRPPKV6TiwIGdua33aTn4W6zOjjUbs9hhWRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:7b:7e:0b:09:8d:ec:d2:9e:2d:51:05:62:58:63:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Validity
Not Before: May 8 06:00:50 2025 GMT
Not After : May 9 06:00:50 2025 GMT
Subject: CN=f094d50468eb40b2afc02f7aaa853fb140f10a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:72:d2:92:a4:15:8f:32:05:ea:60:5c:78:
5c:3a:9e:3e:12:cb:0e:b6:53:7d:68:d9:96:99:cf:
11:b5:ea:ca:8e:23:b0:4b:7c:2b:a7:ae:ac:2f:f9:
7e:c3:94:4a:21:db:2c:f1:78:44:c6:72:f7:26:a1:
f1:f4:04:69:71:f8:3f:25:d3:9b:51:9c:fa:e9:8d:
03:b3:9f:5a:b9:6b:0f:13:57:24:44:ab:00:15:44:
68:25:e7:2b:2d:98:1d:d3:51:29:5f:d1:ea:e7:b2:
80:d1:4c:cf:81:19:51:3f:82:b6:e0:df:ed:77:2c:
8b:3c:bd:26:e4:4e:2b:5f:66:a4:13:12:6f:17:df:
c9:e8:26:35:36:e5:e7:12:52:0b:2e:27:f6:ed:cc:
6d:37:d5:9a:49:24:44:16:9f:75:90:45:a4:42:56:
0e:69:c9:2f:b0:8f:4e:5e:7d:10:cb:81:8a:05:21:
c2:0f:f3:da:42:9f:a9:ff:f0:f1:55:48:ed:99:29:
a0:df:0f:b2:3d:e4:03:d7:b5:36:8e:c4:ed:be:71:
6b:b7:30:f6:f3:d6:0d:78:c3:c9:62:0e:2a:2d:f9:
72:da:dd:6c:f0:bd:31:dd:c8:8a:1f:50:f8:fe:4b:
24:2a:7b:d5:8e:c5:89:22:72:7e:09:ce:85:c1:71:
ca:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:94:D5:04:68:EB:40:B2:AF:C0:2F:7A:AA:85:3F:B1:40:F1:0A:64
X509v3 Authority Key Identifier:
keyid:DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f0:d0:0d:93:5d:4e:cc:94:1b:6e:c2:f4:6d:37:88:15:f6:
c8:85:59:1c:e7:fc:e4:99:f5:06:e0:26:37:7a:f5:c9:c4:7f:
75:38:4d:2e:db:a0:33:0a:45:e2:10:bd:c8:57:cd:10:af:e0:
ea:77:39:57:7d:d9:9c:28:dc:e2:fa:47:44:30:00:25:ff:f1:
ae:14:97:2e:0d:18:dd:32:c3:3e:82:53:c9:fd:c8:b9:38:c3:
62:03:16:c0:89:0b:1c:2f:17:01:97:c0:a8:36:20:92:e7:49:
4b:3e:53:7c:da:76:66:96:92:03:e2:d0:4c:dc:a3:06:89:dc:
7c:e5:c2:15:6d:57:27:7f:82:f8:2f:5f:56:61:ea:05:83:37:
a2:df:55:6a:27:d2:61:e0:b7:cc:43:34:72:4a:85:5e:68:5b:
5c:d8:55:82:00:8d:0a:a2:f0:3c:65:e2:e3:85:41:4a:dd:53:
33:d4:64:97:57:d2:41:9f:be:06:35:2f:05:0b:14:38:2e:ea:
c1:de:27:fa:af:94:03:63:0f:9c:ef:c7:87:51:04:65:b9:f6:
53:3b:6b:25:ba:fa:17:b9:ce:36:19:1d:76:dd:ec:bf:60:a5:
a6:1f:6a:f0:fc:39:89:d2:20:7b:12:fe:35:ee:07:a0:b4:53:
fe:96:df:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:56:18 2025 by rpki-client