Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
File: i3P4NzXIqxCgqNROFwEo8COEbnk.mft (raw, json)
Hash identifier: C30vMcjA8kwsXbvA51yErDZZmnhwrrAeNEu2j9iLDrY=
Subject key identifier: D4:F9:15:CC:B7:31:38:47:8B:B9:09:50:F9:13:4D:ED:1D:08:6A:A5
Authority key identifier: 8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
Certificate issuer: /CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Certificate serial: 0196778CE159CB89B46FD4BD60F44092A829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
Manifest number: 03D3
Signing time: Sun 27 Apr 2025 14:00:43 +0000
Manifest this update: Sun 27 Apr 2025 14:00:43 +0000
Manifest next update: Mon 28 Apr 2025 14:00:43 +0000
Files and hashes: 1: L3ocwI9skWdmpza9Qr_soDnI5iA.roa (hash: 9lUp3ywFYQ08BYq4aJkqYCgUsr8TmtCB3L7KRcDWSOM=)
2: i3P4NzXIqxCgqNROFwEo8COEbnk.crl (hash: ySZsCtqbH/xFKw7/3BtL/nqFACuL/YFCbrsKCFvRiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:e1:59:cb:89:b4:6f:d4:bd:60:f4:40:92:a8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Validity
Not Before: Apr 27 14:00:43 2025 GMT
Not After : Apr 28 14:00:43 2025 GMT
Subject: CN=d4f915ccb73138478bb90950f9134ded1d086aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:6c:b3:c4:df:ce:f3:ec:a5:e4:10:f9:b4:
14:c4:19:c1:44:bb:35:a9:2e:b1:1a:b0:19:15:e3:
dc:ee:22:51:65:77:5b:c9:04:12:38:1e:7d:4d:77:
3a:28:bd:7e:b2:ea:ba:5e:d8:d4:05:76:8b:95:d2:
64:6c:d7:02:93:d5:87:31:b6:96:5d:06:aa:af:e5:
dd:82:42:87:cd:71:c8:0c:10:a1:5b:dc:11:70:e3:
68:6d:56:35:68:a2:59:33:76:df:f5:29:ab:e8:5f:
e6:df:29:33:6b:e8:70:9f:62:5b:79:05:c6:93:70:
5c:44:fc:ff:bc:80:9a:7b:98:a9:e3:a0:27:00:80:
3c:c2:96:8d:21:70:00:60:6e:7d:8a:db:0b:e3:c2:
a1:0b:2e:16:23:55:17:5b:2c:a9:50:b1:22:c7:90:
a7:2b:55:0d:f0:3c:06:b5:aa:68:4b:b1:4b:c1:97:
5b:da:ed:ba:24:8e:5b:01:5e:e3:ed:71:a3:12:0c:
67:d7:78:ca:82:7e:c9:6d:07:a2:90:ac:22:df:38:
de:7a:f4:55:95:0e:e3:02:36:3e:6c:7f:ca:86:e3:
30:19:bd:5e:3f:73:82:6f:f8:6e:a6:7f:37:f6:e2:
9a:b8:35:aa:f7:eb:d3:5a:b6:48:07:0a:67:3c:76:
65:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F9:15:CC:B7:31:38:47:8B:B9:09:50:F9:13:4D:ED:1D:08:6A:A5
X509v3 Authority Key Identifier:
keyid:8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:49:30:71:db:aa:95:46:4a:ba:eb:5b:a6:35:c8:c2:e4:cf:
e2:45:fa:34:50:7a:0f:85:25:ea:e9:08:40:63:df:90:c9:39:
d3:89:b4:37:53:99:76:00:c9:7b:f5:83:34:4b:57:c8:fa:1e:
93:2a:63:e2:2d:73:52:c5:af:0f:eb:6d:c9:dd:4c:a1:9e:27:
db:0f:f1:f2:b2:45:bb:15:ec:29:9d:8c:e4:0a:ff:89:53:0d:
01:f4:91:e3:f6:3f:e7:d2:73:75:ea:61:51:05:9e:86:79:65:
65:aa:44:ca:a2:bb:d0:17:41:a2:7c:61:9d:19:0b:54:2b:9c:
e8:78:98:11:01:e6:2e:a4:13:db:41:74:b8:37:e7:6a:d5:a2:
84:bb:2f:c2:24:0b:f9:51:29:d7:0c:20:a7:93:de:8e:ba:22:
2f:7f:c1:4a:55:b0:26:c2:7b:3a:72:d5:68:d7:11:37:9c:c1:
38:4d:e6:ca:a8:97:1a:18:e3:ab:1d:b0:c8:00:b7:08:2d:de:
7d:32:be:f6:62:36:7c:cb:89:78:cc:be:c2:88:24:c0:6e:fb:
6d:19:89:dd:cd:01:85:8f:fb:1b:6b:95:1f:d2:3b:bb:38:72:
1d:05:21:cb:14:a7:84:7a:25:d8:e8:57:e3:c1:62:96:27:c4:
bc:20:04:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:51:19 2025 by rpki-client