Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
File: 3DhEUAcx1V-JiN3phVnP7QswmrY.mft (raw, json)
Hash identifier: JSb7m/7mMa7csxcd+P985+m09Zf+ki9WYWJIAQBp4DM=
Subject key identifier: 00:DE:D3:7A:02:A8:BE:D0:46:6D:DF:6E:FE:28:C6:42:46:3B:17:A7
Authority key identifier: DC:38:44:50:07:31:D5:5F:89:88:DD:E9:85:59:CF:ED:0B:30:9A:B6
Certificate issuer: /CN=dc3844500731d55f8988dde98559cfed0b309ab6
Certificate serial: 01967944481A18E0D957DF207BB47F87E474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
Manifest number: 0C
Signing time: Sun 27 Apr 2025 22:00:39 +0000
Manifest this update: Sun 27 Apr 2025 22:00:39 +0000
Manifest next update: Mon 28 Apr 2025 22:00:39 +0000
Files and hashes: 1: 3DhEUAcx1V-JiN3phVnP7QswmrY.crl (hash: YNxBnWQQ0JvuyHDJt411CkM5SknuDt4w5zUXqPRc6pA=)
2: 4YPbiAtEI4aIVwSYoOB9atG5l_o.roa (hash: 5G9M3UH6Px38TdWKWNsZTcUTomaq2supA1BUuPBFOUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:48:1a:18:e0:d9:57:df:20:7b:b4:7f:87:e4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3844500731d55f8988dde98559cfed0b309ab6
Validity
Not Before: Apr 27 22:00:39 2025 GMT
Not After : Apr 28 22:00:39 2025 GMT
Subject: CN=00ded37a02a8bed0466ddf6efe28c642463b17a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:d0:09:a7:70:02:5b:d3:5d:01:48:50:b9:
7b:8a:3c:17:ea:48:aa:86:30:b8:07:27:f1:08:e5:
21:b9:4d:b2:81:a3:a5:af:09:29:28:54:c0:a7:01:
79:9c:b5:e5:c6:59:44:a6:2e:fa:71:0c:3d:36:7d:
98:e6:7f:36:ff:01:0a:76:ab:af:5b:0e:8e:24:3c:
56:a9:93:6f:d3:2e:d6:b0:fa:87:7c:23:23:96:77:
a4:a7:3a:49:8f:f5:f0:bc:15:7b:85:d5:18:9d:c6:
f5:1d:5d:0f:a2:53:ed:ee:51:e6:15:ca:66:12:5d:
44:b2:af:a7:26:2b:b3:d0:0d:c5:79:6b:7c:5e:f6:
c0:b4:d5:1a:e6:f9:2f:94:ed:b0:08:ef:5e:b3:a0:
46:62:c5:65:ce:f2:eb:16:be:42:63:65:7e:e7:75:
ba:df:ee:be:8c:79:12:e1:75:a2:20:f4:52:1b:3b:
ae:b3:7c:fb:e7:06:99:db:00:38:53:79:e1:42:11:
c7:2c:46:10:37:4e:0c:20:3d:74:07:ae:9e:64:7f:
5e:05:6c:1a:4b:20:97:b8:cc:45:c4:3a:0c:3a:87:
fc:63:a0:2f:61:e1:9b:b0:30:ee:aa:54:15:73:c1:
52:3d:f3:d3:9f:a5:9e:5d:79:80:01:e6:0c:c4:38:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DE:D3:7A:02:A8:BE:D0:46:6D:DF:6E:FE:28:C6:42:46:3B:17:A7
X509v3 Authority Key Identifier:
keyid:DC:38:44:50:07:31:D5:5F:89:88:DD:E9:85:59:CF:ED:0B:30:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e5:a1:0b:0d:0c:21:c7:2c:f3:cc:74:c4:75:18:59:9e:66:
9f:76:ca:54:9c:35:03:c0:b0:d3:1e:9f:d0:32:1d:90:43:b7:
c3:88:7e:2b:39:7d:97:ca:df:e5:e8:a0:4e:f7:29:6f:55:df:
b9:67:9a:1f:7c:f9:13:b2:d6:f3:16:f1:b0:97:b3:de:fb:38:
de:31:18:d8:7d:cf:5e:1e:ae:d6:41:d1:7b:8d:7f:42:d7:fe:
80:b9:77:be:7b:c9:2c:a7:5b:5c:a7:a6:d6:b6:6b:46:87:ce:
40:3a:63:5d:91:9f:eb:2f:44:bd:3b:45:ee:5a:41:96:ab:0d:
e4:b1:eb:77:e8:c8:e1:f7:bd:04:3b:54:6b:af:df:db:b5:be:
1b:74:0c:70:c0:37:3f:f6:8a:7e:c6:ea:ee:b7:b8:a6:67:8e:
de:c6:60:9c:00:c9:ea:b7:a2:bc:c3:4c:cf:53:b6:37:0a:e6:
e6:9f:ef:d8:78:66:fe:85:38:78:e7:7f:ac:34:3b:ec:be:bc:
5d:d6:70:20:b3:54:36:12:3b:1f:e6:23:5a:d6:41:d7:58:e7:
6e:86:ed:d8:a8:8f:7c:82:75:67:ea:7b:8c:a4:d8:4c:7e:f4:
80:6c:7e:79:67:fa:58:af:b6:26:61:0c:f5:1f:cb:fc:34:45:
54:03:1d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:09:13 2025 by rpki-client