Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
File: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft (raw, json)
Hash identifier: UYmm5WYTxNlPGOy1MWHvKFHZwOH3257TkGGI4VMNuwE=
Subject key identifier: 4B:FB:60:E8:8B:CB:3D:4A:B2:74:C6:13:6F:87:8B:B4:29:11:CC:E3
Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Certificate serial: 019674548909A52C990905673D3D2065E78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
Manifest number: 1051
Signing time: Sat 26 Apr 2025 23:00:19 +0000
Manifest this update: Sat 26 Apr 2025 23:00:19 +0000
Manifest next update: Sun 27 Apr 2025 23:00:19 +0000
Files and hashes: 1: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl (hash: nVuJjMCMwgi1bXdyT1lylPAqUccbe1owzBykJgnoGmg=)
2: bJ6OkDBz35azmUeGZSSY8SRMI4Y.roa (hash: y21BnaoaGpgbQvC0jOtfGrk+wq3H1xWVUYMR7XJq8OU=)
3: zDL_THkFuQHLJwbg-SI_E4lpZ3A.roa (hash: krJTySa4xAIWcd+RLsqPBRipwsimqCaZxlGeTrQ72GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:89:09:a5:2c:99:09:05:67:3d:3d:20:65:e7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Validity
Not Before: Apr 26 23:00:19 2025 GMT
Not After : Apr 27 23:00:19 2025 GMT
Subject: CN=4bfb60e88bcb3d4ab274c6136f878bb42911cce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:97:3e:b8:0c:3f:54:16:36:ae:08:b6:9f:ff:
27:c8:98:f3:5c:30:2c:8a:1a:79:98:04:0b:79:54:
04:89:1d:34:d3:86:d7:63:db:a3:b7:9f:49:4f:2a:
02:f9:05:ca:e2:eb:1e:6d:1c:fd:bb:b6:4d:b8:bb:
67:c2:65:2e:6e:c1:5b:36:e9:c4:4a:00:ff:9e:e6:
16:ed:3b:db:45:7c:cb:d5:7a:ce:b7:29:ac:ff:b8:
ef:50:a7:72:60:2b:0d:5b:a5:b9:c2:2b:2e:b7:42:
e4:f5:30:d8:0d:a0:8b:a0:eb:a3:4e:85:05:7a:5a:
f0:26:1a:53:0f:32:1b:ac:3e:3a:48:5e:c1:9b:99:
22:b2:d3:6c:29:f4:2c:15:5a:42:be:16:95:25:f7:
e3:46:46:85:a3:6c:e4:f0:bb:ff:92:96:c2:05:97:
82:1f:9f:13:10:bc:5b:da:83:ae:e6:8f:15:85:ce:
20:e7:5e:14:20:fb:fd:d0:ad:78:8c:13:48:01:be:
7f:3d:fd:69:08:ef:df:9a:8d:76:ae:2e:04:2d:c2:
47:ae:82:69:00:c6:a4:49:a0:18:a8:bf:93:5b:17:
7b:0b:eb:d4:8c:61:6d:66:5f:8e:be:46:f3:44:f9:
cb:c4:fd:61:8e:1d:2a:a9:70:a6:59:47:16:36:25:
ce:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FB:60:E8:8B:CB:3D:4A:B2:74:C6:13:6F:87:8B:B4:29:11:CC:E3
X509v3 Authority Key Identifier:
keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:16:ba:5f:e3:c7:08:92:1e:f1:e3:23:1f:fc:5d:b6:09:9b:
ef:6c:6e:05:6c:64:ad:e0:bf:5d:24:ff:57:31:8b:c1:ba:2e:
0d:36:f4:65:64:14:ff:df:fd:bc:03:79:aa:cc:99:27:5b:56:
ac:27:ac:4e:45:d7:83:7d:d4:07:d0:e5:4c:c0:6b:e9:2f:09:
d6:84:3d:68:e6:ac:a3:ca:e9:80:7c:d2:75:c8:d8:52:2d:e1:
1b:6a:5e:fe:19:60:87:1b:8d:96:96:5b:47:02:42:d8:da:9a:
a8:70:57:ed:e5:d1:10:15:3d:35:31:5c:fa:ab:78:02:39:29:
bf:33:55:0b:50:b5:a6:53:b8:3a:9c:c2:ec:3e:7b:62:6c:e8:
7f:0a:97:68:da:37:0c:29:be:60:b7:94:3a:db:70:1a:96:f7:
92:b7:19:17:a7:36:13:88:3a:30:38:79:36:77:d9:77:70:86:
22:9f:de:05:4b:18:f4:ee:96:a5:28:60:57:3d:64:c9:71:fc:
fd:f0:ec:63:6c:8c:3c:81:32:be:f7:a3:6d:0e:6a:a9:89:a1:
e1:06:8b:b6:2f:d1:75:94:9a:bb:f0:fb:9f:c5:3e:35:9d:1e:
e3:6e:77:60:ba:8a:c0:05:1d:92:2c:e3:24:ac:0d:b0:c1:c6:
b2:0b:47:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:53 2025 by rpki-client