Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: LuxjeV8NnInfaGI1HKhC4yYUjjwN3sr3WBHrTMrvvOk=
Subject key identifier: CC:F4:96:95:5B:D0:8B:A3:CE:77:DC:B0:E1:25:0A:FC:B9:7E:4A:71
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 0196A2E51E70C67D3D412BE28100B7F649EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 0E3C
Signing time: Tue 06 May 2025 00:00:46 +0000
Manifest this update: Tue 06 May 2025 00:00:46 +0000
Manifest next update: Wed 07 May 2025 00:00:46 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: maI4UKxOtjQp9II7BClm1UNsdRjmfJHZmgG58M5Enfk=)
2: f98-QGGyvPNag3NBWDooTVrQ2vI.roa (hash: HJhPbHQVg92t7q01K4xm1xNnj11AYPaciJd3bC3Ng+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:1e:70:c6:7d:3d:41:2b:e2:81:00:b7:f6:49:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: May 6 00:00:46 2025 GMT
Not After : May 7 00:00:46 2025 GMT
Subject: CN=ccf496955bd08ba3ce77dcb0e1250afcb97e4a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:26:5a:8a:51:dd:4b:00:ae:63:f4:db:44:69:
83:52:3d:02:82:f1:18:fb:69:cd:1c:11:bb:e2:79:
a7:49:59:64:68:53:2c:c5:9e:9f:7d:5c:ea:7b:6b:
ed:5f:ee:44:c8:f1:e4:d1:4a:12:04:91:71:d2:2c:
3d:65:b6:b3:0b:a1:d6:5a:fe:c9:f0:4d:50:11:b7:
00:05:02:31:ac:9c:1f:66:83:96:52:98:c2:81:38:
ce:f5:69:5a:d9:f5:7f:ff:d1:53:b7:06:14:af:6a:
c2:dd:ca:43:03:19:a7:68:02:b8:5f:2a:9f:95:c0:
31:ea:bd:2b:aa:f5:56:93:0a:92:9f:f4:3e:23:14:
8e:53:b6:04:ca:d0:34:2a:b1:90:c6:ca:e3:8e:16:
27:ac:8a:30:0e:73:cd:1f:ee:51:e3:47:6e:4d:82:
c7:12:17:d8:13:07:1d:6f:8d:6f:fb:9d:9f:cd:99:
67:5c:24:c0:05:20:e6:51:b4:85:06:be:9b:c6:af:
fb:c4:e9:dc:d7:11:9a:2a:e1:9c:33:cd:c2:38:2b:
dc:33:47:5e:9e:15:f0:71:67:41:45:d9:63:04:c6:
96:37:14:0b:07:33:b9:d7:4a:6d:53:67:7c:6b:e2:
e7:1b:b6:8f:9a:91:26:38:67:81:84:ca:cc:4c:79:
ae:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F4:96:95:5B:D0:8B:A3:CE:77:DC:B0:E1:25:0A:FC:B9:7E:4A:71
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:00:5b:23:1c:e5:c1:4b:3e:6e:39:5a:aa:04:d9:19:35:96:
7a:ef:5e:f8:3f:99:e6:e0:2c:d8:d4:8f:23:e3:e4:43:09:c7:
f1:17:b1:7c:55:f5:21:33:9c:d0:5d:bf:f9:75:1f:3e:15:78:
d2:6b:3c:30:fc:1b:82:b2:0c:7c:f8:96:64:18:a9:4b:49:11:
14:a4:e4:a8:f8:8d:32:80:94:6c:5f:3d:5a:29:75:04:92:87:
a8:87:80:d2:6a:d6:47:4d:f0:34:92:74:61:06:f7:b8:9e:ef:
cb:47:77:f0:75:b3:57:ae:97:a9:a4:aa:57:3a:7b:d1:0a:08:
4f:e1:61:65:d9:13:68:b1:ee:70:10:bf:03:84:51:37:07:1e:
df:c0:1f:97:bb:06:a3:a6:68:ab:a1:80:08:8b:c3:7d:aa:ff:
6e:e9:22:f5:a4:fd:f9:3d:dc:a3:cb:18:92:df:84:78:38:d6:
f1:14:23:4f:2a:df:6e:26:bf:7b:b7:2c:56:65:ad:d6:80:46:
0a:75:d4:13:1f:37:2d:a4:da:d2:63:a8:ef:f7:4e:dc:cb:12:
37:3b:19:f7:71:31:e8:84:91:46:ed:3c:a1:c2:fb:e6:fd:9c:
6c:27:8b:8b:03:83:1b:43:a3:e1:65:01:bf:cc:2d:b5:e6:2a:
52:e8:f5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:29:34 2025 by rpki-client