Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: R+XF7+ESzR7G6AI4VnqDE7tP88QTPoF0ZusKr3o+d58=
Subject key identifier: C7:1B:1E:3F:8C:1E:94:CC:7D:90:C3:DC:90:B3:67:21:73:BC:EF:63
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 019671F85207793A832DA91F470ED928EFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 074F
Signing time: Sat 26 Apr 2025 12:00:21 +0000
Manifest this update: Sat 26 Apr 2025 12:00:21 +0000
Manifest next update: Sun 27 Apr 2025 12:00:21 +0000
Files and hashes: 1: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: 7fgup9fGyzuLgTER+KM5UD9PpQvJn79PtfvuZW1Eac8=)
2: W8Dpmpt_1-01qSbotVM15n3GSek.roa (hash: 8bMbdbcHjYf7KXHu+ym0lwgv0cPY/hCCrTp1Qv0O4sU=)
3: d-If6rwOnPiVqU22C8IZzGvMPvc.roa (hash: giLRuwy5wW+MIOBjFAF7Pd0PEoYtI2K0pgdHGw83fkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:f8:52:07:79:3a:83:2d:a9:1f:47:0e:d9:28:ef:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Apr 26 12:00:21 2025 GMT
Not After : Apr 27 12:00:21 2025 GMT
Subject: CN=c71b1e3f8c1e94cc7d90c3dc90b3672173bcef63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:b5:b9:28:f1:df:50:a1:18:57:ae:ad:76:
d2:2b:93:83:ea:20:c9:13:f5:ed:97:b3:cf:4f:fe:
34:e3:5e:d3:d0:b3:f7:83:fb:cc:1b:79:bf:fc:d3:
d0:b9:57:f0:94:ba:c8:19:d2:c4:6b:4e:f8:94:53:
11:93:1d:f9:d6:22:06:d2:c9:b0:14:c1:9b:2f:a4:
01:9a:ae:f3:d4:6c:c3:74:7d:a4:02:7e:d3:68:83:
7a:6e:9a:44:b6:7d:df:ce:ad:8c:cb:75:6e:32:98:
7c:90:85:89:b5:a9:e2:55:ab:4e:dc:8d:5a:16:fb:
af:ff:87:8a:ad:84:6a:a0:38:70:16:bb:7d:f4:41:
4b:55:0d:9a:b7:8b:de:92:90:2d:1f:6b:bc:a9:da:
bd:e9:3b:9e:89:bc:df:81:33:97:d7:e6:df:fa:54:
49:51:fa:76:83:a4:8b:ca:f3:5d:9e:c9:75:f0:96:
ae:92:b9:e4:0f:28:7a:99:80:d0:d9:8d:b9:7a:d5:
3f:69:48:13:68:f0:b4:ab:61:49:9b:6f:b5:ac:9e:
2b:75:7b:d6:40:fe:46:13:5c:c1:ab:15:ef:39:75:
19:0a:7f:01:1b:bd:31:33:c7:fb:c8:3f:a2:3f:ab:
26:03:24:1e:2d:d6:4c:73:6d:4b:59:29:78:f8:12:
50:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1B:1E:3F:8C:1E:94:CC:7D:90:C3:DC:90:B3:67:21:73:BC:EF:63
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3c:ac:32:a8:52:f4:bd:8d:74:aa:43:4d:c9:91:7d:80:69:
42:dc:3d:8f:d5:6a:45:37:6b:c2:25:35:03:00:cb:b3:41:b6:
d7:90:f7:2a:33:19:07:54:c1:bd:2d:c5:9b:a6:de:84:c6:a2:
8b:86:1d:f5:cd:38:c6:a5:63:bd:10:27:d3:c5:b2:0e:23:c9:
79:49:de:88:7c:75:a5:6e:31:aa:f4:dd:2d:04:83:3a:04:65:
13:77:cb:fe:14:74:d6:49:72:b3:bf:60:3c:89:d8:f5:cf:87:
8f:95:af:45:a3:8d:7a:c1:71:02:fc:a8:09:bf:46:f9:9d:5e:
6f:2c:81:c4:31:aa:79:8f:14:eb:5f:96:30:4b:96:d0:1b:19:
83:27:26:c7:7b:58:13:b6:31:2c:cd:94:e1:02:bd:a5:d9:f9:
da:ed:6d:08:ad:27:9f:a8:68:55:6e:7d:a0:ae:62:e1:06:55:
d7:a3:94:be:d2:a1:4b:aa:f0:9b:10:9d:58:bf:6b:24:f0:ea:
ef:59:f1:96:52:9a:ac:8a:0b:27:b3:68:b0:6e:e2:b2:19:4a:
05:89:e1:f3:c8:b6:26:f9:e5:82:d1:00:fc:9a:85:84:b4:55:
a7:9b:a2:02:8c:38:33:37:55:b3:f3:a8:7d:7c:2a:68:9b:f2:
28:c5:6b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:11:19 2025 by rpki-client