Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json)
Hash identifier: a4ShB1jIGZklymQgRJPi/KIWlAEfI0TVpagaXtqyvV4=
Subject key identifier: C8:E7:96:13:0A:FE:62:CD:39:82:DC:D1:48:8C:9D:35:CB:6C:56:D3
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial: 019693DFE0F5F335A1411169D2B38456A6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
Manifest number: 14B1
Signing time: Sat 03 May 2025 02:00:44 +0000
Manifest this update: Sat 03 May 2025 02:00:44 +0000
Manifest next update: Sun 04 May 2025 02:00:44 +0000
Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: M9KlHk2SW9x9xjLWMSy9bv7zm/ClndvATU8UJG+Sz+A=)
2: 8weSLoMuWV3usouK6kCYa4DYS08.roa (hash: 7ICkBxIDMmpq8Ld9uPPV7RzwfZWRVUlPiTj2akXnPTs=)
3: g0yMZ7il9emhd1JLy44dXjFFySY.roa (hash: upEcQV7OguWVHmW7d8FqJOmDo+LgE3TCsH4ZkA5EIG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:df:e0:f5:f3:35:a1:41:11:69:d2:b3:84:56:a6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
Validity
Not Before: May 3 02:00:44 2025 GMT
Not After : May 4 02:00:44 2025 GMT
Subject: CN=c8e796130afe62cd3982dcd1488c9d35cb6c56d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:18:31:b0:1b:50:45:61:54:e3:84:bf:39:87:
ae:96:92:cb:3e:52:2b:18:b5:83:4b:4d:58:d5:5a:
8d:8f:82:b1:74:25:e3:2a:5d:b1:e5:ae:12:1d:83:
77:2a:e6:50:ac:28:37:11:75:9e:b0:80:dd:3c:f7:
62:db:46:5a:40:56:be:0c:31:2a:63:77:14:73:00:
bb:66:3c:28:7f:77:19:26:47:d2:8c:d6:4c:34:b4:
e3:e9:0e:20:a5:84:7e:5c:a8:42:2a:df:3e:9d:c3:
70:c1:39:09:2d:b1:c0:b5:f4:63:b8:cd:6d:28:93:
f0:89:f6:ff:3e:0b:09:85:ef:55:29:50:42:81:d5:
eb:d1:8d:b8:02:36:f6:1b:8a:cb:e9:c3:67:72:08:
2d:2b:a0:57:76:d9:38:11:1b:08:64:2e:46:28:a2:
fb:83:d3:c1:51:23:32:7b:61:86:43:5d:8f:e1:cc:
fb:a9:3b:8a:a9:36:72:85:49:7d:dc:b6:80:59:e6:
40:ae:3f:3f:9d:f4:ca:c5:60:fd:8b:64:2c:93:21:
9e:6f:32:b3:06:76:8a:6b:65:f0:ea:6f:e7:ff:10:
23:d0:81:86:6e:86:85:3a:40:32:86:ac:7e:9e:25:
75:3b:76:d7:9e:ea:15:fa:ca:2c:37:35:d3:9e:bc:
22:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E7:96:13:0A:FE:62:CD:39:82:DC:D1:48:8C:9D:35:CB:6C:56:D3
X509v3 Authority Key Identifier:
keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:12:4d:49:42:e6:d5:9b:02:29:ec:d6:6b:e5:15:9f:5f:63:
a6:cc:ef:60:24:39:aa:46:68:2b:bc:0a:7a:d7:1a:3c:8a:90:
d7:eb:0c:74:16:94:d5:04:bb:ac:fd:2e:22:67:13:7c:14:96:
a1:50:e1:ec:89:20:e7:e8:45:f3:71:f0:6d:f6:4f:6d:cf:43:
34:67:27:e6:ed:60:64:51:c7:9f:d0:71:3f:58:3e:ac:ea:90:
a4:c1:25:30:91:2e:9f:e1:4b:56:4b:cd:5b:d1:a6:67:99:dc:
a8:29:bf:44:55:02:e2:df:80:ab:59:b0:47:8e:8c:9b:18:1e:
19:b1:7c:ad:92:c9:28:04:bd:49:33:1c:e6:50:48:1c:a2:95:
f5:ab:b7:46:28:36:ce:f5:66:14:b7:2b:7d:98:8e:86:0c:9c:
ae:63:3a:8d:62:88:4b:fe:75:5c:d2:6e:1e:64:48:58:ee:ff:
6a:8e:9c:4e:63:7a:e7:f5:a2:33:22:8c:5e:01:ec:31:f8:fa:
03:ad:72:40:9e:86:43:59:c4:63:3c:e0:97:28:ac:9e:72:b0:
12:48:bf:6f:c0:07:ce:5a:0c:14:ad:d9:e2:e8:3e:bd:fe:83:
07:fc:8e:92:e2:5f:01:13:80:70:cf:98:14:f3:35:fd:70:76:
a8:d2:56:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:10:19 2025 by rpki-client