Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
File: 3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json)
Hash identifier: cUYTLucFThdThq2N0sfMKPRD5sqeGZVfmyA2YVI1YZM=
Subject key identifier: 90:E2:AD:6C:46:E8:C5:D2:D8:85:C2:9D:9A:68:8E:B6:7B:A1:0B:1C
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial: 0196B9A3C2545007F07A0CBAE9BB0724909B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
Manifest number: 04A7
Signing time: Sat 10 May 2025 10:00:39 +0000
Manifest this update: Sat 10 May 2025 10:00:39 +0000
Manifest next update: Sun 11 May 2025 10:00:39 +0000
Files and hashes: 1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: VMGhyAfBICIKx809y4dwG6QBexO9niILyI7V5fdLNPk=)
2: 44ZqBQfHQ2zRmdEU_-3buvFEgjQ.roa (hash: +FQ7Yxsx54S5E/fsFkrVJI7F04W5149y4n08z4CM2Kc=)
3: A_DdgpizT--rlZ-ab-YZdIwkNLE.roa (hash: hfZgPH/DllsEyaUJjbheadfPG1jNf80tTNcLY41EaYQ=)
4: J29KR6WIqb2jKkibcGzZyVD-APE.roa (hash: cX4I13kG6IWcU4y27MvdylWTn5/srzMdc6rdtCLCSL4=)
5: RVm4PleqV8m6zGkcPiKBRGWO1cI.roa (hash: 3p0hXdk+JmHhQEiq1MExor2f3lGKmZyobEJTxOu9buE=)
6: eHnC0ZqJNqxv3y7mak9QRJMJw-o.roa (hash: +LqAwsdmA3jPuO+2IgsX5kZHBO+HuvNtjbjVsU8ziig=)
7: f25v4uVZY4JbTyMqNXKXGA35WKk.roa (hash: Cmqw5364kiAvR31aujca3rQebhgV1WXm34C80bI/lTU=)
8: xJ0_FRg6EplS-mzoDbYvP1y_mUw.roa (hash: 7evtOJQCPXqekbIigyPzPGbzquzgJixLY3c438GOL/g=)
9: zTq6cqLbZBiRPZ7jFpyiF-kS2nU.roa (hash: 58LUL/KkVIlVDMCj1/N1vyBYpPzDWYfUKAfSIQ9KHh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:c2:54:50:07:f0:7a:0c:ba:e9:bb:07:24:90:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Validity
Not Before: May 10 10:00:39 2025 GMT
Not After : May 11 10:00:39 2025 GMT
Subject: CN=90e2ad6c46e8c5d2d885c29d9a688eb67ba10b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:53:65:f9:74:b6:6d:97:dc:4d:7c:46:44:
b3:b9:82:b0:60:81:e3:da:9a:ab:9a:6d:63:f3:f6:
35:5e:c5:d1:e4:1d:d5:bd:09:1a:6e:3f:d2:16:65:
e2:05:cc:2f:d3:39:b6:44:b1:bc:c9:09:9f:88:45:
a8:58:a9:22:61:22:73:98:68:5a:8f:62:f7:ea:ae:
89:78:d2:56:12:6e:78:ea:fb:09:83:94:ed:4d:db:
e9:24:3f:da:8c:ba:e8:87:4c:3a:f5:1d:a8:3f:34:
43:0a:cd:52:46:e8:78:50:fb:57:de:73:85:26:f4:
15:85:aa:20:ae:eb:97:b8:ee:78:67:d7:5f:71:bf:
fc:a2:95:6d:ee:00:34:0f:77:ea:22:d0:ab:67:54:
e2:3f:ab:47:39:93:39:b9:93:0e:9f:89:16:7d:1a:
fd:cc:b8:1d:b5:2f:c5:20:37:3b:32:bb:e5:d6:27:
87:92:48:70:a1:57:2f:5e:90:ec:a2:bb:ce:83:2b:
22:2c:60:15:92:fb:9c:5e:ee:7f:14:0f:02:d5:0c:
e7:d1:a9:55:f0:8f:65:09:d1:4c:27:99:14:ef:ff:
07:a1:ba:6a:6a:a4:4b:22:64:1e:05:c2:69:24:c3:
b9:1b:fe:b9:12:e4:44:c7:43:98:5f:cc:91:06:3d:
58:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E2:AD:6C:46:E8:C5:D2:D8:85:C2:9D:9A:68:8E:B6:7B:A1:0B:1C
X509v3 Authority Key Identifier:
keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9f:4b:02:c5:4e:7b:82:64:12:a8:e6:c9:6a:51:f5:b0:f3:
03:71:82:ac:ec:a4:e1:bc:11:0b:fd:45:1e:bf:45:bb:ff:02:
1c:3f:97:88:57:c0:38:9c:b4:a9:70:60:b3:c2:12:c7:30:42:
0d:bb:e8:6a:33:b8:6a:36:8d:a7:ec:cd:23:22:31:9f:95:05:
26:7f:55:47:f6:bf:32:10:51:3f:d5:98:58:41:52:a7:76:54:
09:39:69:80:83:53:57:87:52:5f:ac:2b:b9:4d:d6:2f:a2:f4:
8f:13:c1:e2:a5:5a:6d:0c:f2:f4:01:7e:1a:46:19:78:7e:f0:
a6:20:9b:6e:ca:af:7b:08:00:2f:6b:5a:03:17:9c:f0:d6:ba:
cc:0e:55:eb:81:f0:47:0c:8d:f2:90:13:a9:b1:74:43:f7:11:
7e:99:77:3e:a0:06:68:b0:3b:64:49:b2:f9:93:85:07:ac:11:
25:11:6f:54:8e:77:44:76:ed:c6:11:cf:58:a5:0f:e8:01:4f:
78:76:b0:07:dd:26:f7:4b:3d:a2:8a:34:81:2f:eb:b8:56:da:
40:90:7a:bb:4b:42:79:0d:88:60:ca:ab:ad:c2:b4:ab:5c:76:
d2:a6:53:fd:16:cc:8a:47:42:a5:1a:13:00:7e:f5:cc:c3:c3:
73:cc:54:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:33:56 2025 by rpki-client