Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
File: x3Nu3rkvk36kWJPqm89O-D8V_8g.mft (raw, json)
Hash identifier: ExhbTRvYzSlImvp150INDsnlHxREzQAjZVcwpaGLCHk=
Subject key identifier: 3A:FD:67:D6:10:4D:B1:83:3E:E4:7E:2E:E2:89:8E:96:D2:5B:42:CA
Authority key identifier: C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
Certificate issuer: /CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Certificate serial: 019673B02F9A8581BDF311A6404112FA7C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
Manifest number: 0E0F
Signing time: Sat 26 Apr 2025 20:00:48 +0000
Manifest this update: Sat 26 Apr 2025 20:00:48 +0000
Manifest next update: Sun 27 Apr 2025 20:00:48 +0000
Files and hashes: 1: ZfJgayjX3ZyY4keMrrK5ie3SiNQ.roa (hash: I356ijiy3DFzBI7A3YL8pZIG42TC++pOhoxAzv45n5Q=)
2: x3Nu3rkvk36kWJPqm89O-D8V_8g.crl (hash: yfpVABAO0a89qOUPT7A00KIdTpGFzoFrD3t8JUhgZKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:2f:9a:85:81:bd:f3:11:a6:40:41:12:fa:7c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Validity
Not Before: Apr 26 20:00:48 2025 GMT
Not After : Apr 27 20:00:48 2025 GMT
Subject: CN=3afd67d6104db1833ee47e2ee2898e96d25b42ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:ff:0f:23:80:4c:a2:4c:8e:fe:63:a3:ad:
c6:40:0e:99:03:95:1d:9e:70:78:b7:e1:bb:7b:22:
f9:b4:19:b6:c4:dc:28:d2:30:fa:6d:76:9d:be:58:
f0:8a:c0:8a:18:46:6c:97:08:f2:0b:e8:52:fc:92:
8f:e9:85:87:71:2e:8e:52:87:f1:40:33:26:29:bb:
98:1d:c1:64:96:41:1b:3a:24:7f:19:69:5b:ba:ed:
34:07:6e:b0:52:4d:81:0a:98:ac:70:f8:f0:e4:8a:
f3:46:79:33:ab:15:b5:c7:f0:6a:5b:bf:48:13:b4:
ee:48:e1:cb:8b:1b:9a:c4:fa:c3:0e:f0:56:9c:4b:
7d:8c:ea:55:4e:36:8b:00:51:af:67:65:2f:2d:e7:
d0:0f:fe:2b:ac:62:64:b2:0e:12:5c:12:9d:ef:d4:
76:1a:40:7d:94:56:4f:b6:e8:76:25:4d:3d:3a:75:
6f:8f:e1:c3:e5:dc:be:13:1b:a7:03:21:07:1e:60:
97:83:68:60:fc:53:d9:57:87:27:80:df:72:af:e2:
78:08:e8:e9:88:92:b0:e3:10:4c:42:22:4a:85:59:
81:4f:bd:4d:cf:bd:ae:af:85:44:07:4b:dd:37:aa:
69:4b:a7:fc:75:a6:d1:f8:91:3c:fd:37:c7:67:f9:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FD:67:D6:10:4D:B1:83:3E:E4:7E:2E:E2:89:8E:96:D2:5B:42:CA
X509v3 Authority Key Identifier:
keyid:C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2a:8e:d5:e5:b7:06:64:dc:2b:c9:0c:c0:26:2b:f5:59:4a:
51:e3:c9:a1:0c:5c:a0:fe:e9:7d:66:74:6d:a3:90:d5:63:9e:
8f:69:fa:9f:2a:06:9b:69:36:07:2d:2e:b5:78:07:b1:f6:ca:
dd:34:69:09:65:8a:1d:bc:37:ff:f4:c5:f9:12:0e:79:5b:24:
99:d7:01:5f:9a:09:3a:12:22:5e:c0:2a:7d:f8:a7:a4:89:ab:
4a:5e:47:c8:84:63:73:48:86:1d:99:ef:62:28:e0:91:d3:cf:
7e:21:d2:2c:96:c2:03:0d:d1:de:bc:11:08:46:93:46:06:4f:
0d:c9:04:68:71:72:d4:be:3e:9f:77:3d:1b:13:1f:60:ed:e8:
ad:5c:4e:de:7d:85:fd:b7:0c:55:46:5c:96:bc:67:5f:24:21:
79:9c:09:fc:26:56:a2:3b:4b:57:0d:f8:a8:37:1a:c0:1c:68:
1d:b4:cd:d2:e6:1b:2c:99:65:dc:13:ff:43:99:cf:e1:8d:72:
d3:58:6d:f5:fd:77:78:5e:c8:7a:b2:7c:e9:af:46:1e:57:68:
a5:77:9f:40:03:fa:af:78:89:95:42:88:91:d4:ef:79:a1:d6:
4f:d1:1f:d7:6c:09:47:cb:a1:fd:48:ea:1d:33:27:e3:19:7d:
29:16:d7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:51:41 2025 by rpki-client