Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json)
Hash identifier: lBaD6Ow3NOqDSCmtyc3Op2KbDJRnxyNKpEeBGf4pQQk=
Subject key identifier: A9:9F:EE:7E:DA:9E:F1:62:BE:F4:CC:F2:34:AF:E4:6B:6B:70:64:DF
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 019674F9ED8795D3E3C0F49FC3AB289D8603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
Manifest number: 0B85
Signing time: Sun 27 Apr 2025 02:00:58 +0000
Manifest this update: Sun 27 Apr 2025 02:00:58 +0000
Manifest next update: Mon 28 Apr 2025 02:00:58 +0000
Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: EPtCq0B4Ni3vImt6LtATSt9Fj6msW8SYfFmgsc7oSB8=)
2: 7d2ToMhT-5ZAU4qsYQXruw_MoIU.roa (hash: vm5X1sab9HJagyLFII3df7BekSqzu2gNn9apIe4J5uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:ed:87:95:d3:e3:c0:f4:9f:c3:ab:28:9d:86:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Apr 27 02:00:58 2025 GMT
Not After : Apr 28 02:00:58 2025 GMT
Subject: CN=a99fee7eda9ef162bef4ccf234afe46b6b7064df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b4:ac:d4:02:e4:56:67:3a:48:80:aa:43:f4:
f7:eb:5f:29:33:55:da:5c:69:3a:ba:c7:39:91:79:
9f:42:d0:76:ac:52:35:c5:a5:e5:59:ae:fb:2f:52:
49:0a:e0:50:b7:ec:64:e0:97:c6:df:12:4c:19:4f:
7d:78:70:c3:60:61:cd:e5:b3:47:9e:a5:fe:03:69:
47:bd:f9:8e:2a:5b:43:cb:a8:e6:b8:f6:ee:a4:66:
ed:69:c3:92:30:5e:65:8a:fa:c5:22:2b:19:b5:9d:
f7:2a:5a:90:58:52:b8:b3:38:3b:4f:21:6d:37:12:
d5:f0:aa:bf:89:cb:34:16:73:58:d0:6b:ee:c8:53:
55:dd:97:cb:c8:2a:cd:1c:67:b0:ad:ba:a6:9c:30:
3d:2b:35:42:2c:3c:95:91:df:36:d3:cd:8c:67:de:
aa:88:78:e5:de:27:7a:a4:1d:7f:7f:44:49:3a:12:
1b:24:03:8d:56:ff:f4:8d:d7:1e:ea:95:d9:90:82:
49:d8:d2:e1:46:68:96:e9:e4:e9:4c:37:0c:05:ba:
f5:97:3c:0e:59:4d:e1:b6:ee:48:0d:64:9a:cb:ec:
47:09:13:57:46:cc:8b:3e:7c:51:57:71:4e:9b:7d:
7c:5a:77:97:e0:9e:ae:6f:6c:3b:4a:37:e7:f1:ab:
02:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9F:EE:7E:DA:9E:F1:62:BE:F4:CC:F2:34:AF:E4:6B:6B:70:64:DF
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:de:25:91:01:f1:db:12:87:3e:9a:cb:a3:ee:a4:8e:2a:17:
51:1f:f0:3c:8c:21:78:76:e9:5b:47:f0:9c:a3:62:1c:43:00:
af:24:fc:e7:83:29:49:0d:ad:63:74:b0:42:d8:ff:a2:bc:37:
56:ee:01:f7:f4:7a:ce:03:82:4a:36:7a:a8:ee:b9:1c:b0:51:
fb:33:54:87:fb:e5:c3:16:37:74:b5:0f:96:94:1a:05:78:e7:
57:d5:98:30:99:28:91:d7:b0:11:06:4f:b9:6e:35:fe:29:68:
fc:98:53:2d:d4:7a:4d:90:5f:d5:9d:ba:9b:01:f6:ef:78:8a:
89:27:76:ed:9d:c7:a2:d5:52:02:69:cc:6c:cf:8c:f9:1e:a5:
49:1d:12:bf:93:b0:41:8b:2c:6d:42:bc:df:d3:4e:22:4f:17:
42:c8:72:57:e2:8e:79:dd:7c:6d:13:77:68:b6:86:1e:cd:09:
a1:60:f3:02:0a:9a:f2:b8:d1:d6:0c:b1:84:cc:48:34:37:64:
24:fc:ac:97:a0:10:dc:83:40:12:0c:e9:b1:ed:7b:85:ee:89:
be:49:ac:76:89:4d:f7:64:61:a8:3b:30:e9:a8:b4:81:0c:e4:
ff:85:6c:ec:3f:34:27:bf:5c:6a:12:a9:07:f7:c4:a2:f8:fa:
81:5e:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:53:18 2025 by rpki-client