Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
File: 02v9kovMtCrZxGilUqtzk_3YcJU.mft (raw, json)
Hash identifier: 9dDSwyCmCMYh/vkhsKjJA26FfCjeamJ+WpfywgYez4c=
Subject key identifier: 3B:80:F4:78:0D:69:80:6B:56:60:19:7A:05:3C:7B:A1:A5:C7:1E:FE
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Certificate issuer: /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial: 01967D8F0443C2EAECD0DA0AC298AC45FB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
Manifest number: 08D3
Signing time: Mon 28 Apr 2025 18:00:46 +0000
Manifest this update: Mon 28 Apr 2025 18:00:46 +0000
Manifest next update: Tue 29 Apr 2025 18:00:46 +0000
Files and hashes: 1: 02v9kovMtCrZxGilUqtzk_3YcJU.crl (hash: KJVrBKRragmfB7887aeBejwMpEvsbw0a9WBZXqwVNho=)
2: MHr8PGZP4WdCJVRk1ABwnxF7Fcg.roa (hash: 6TKkNt/HHcapeVfZJIi0l5UGXRs34MQGe7K+m4zvMs4=)
3: glUIEM3aMRzTUWeLJXm7pNU7Hcc.roa (hash: dnZcMSrdJKJGGZKaN5OJM5oZr/gbEmBmefYKs8aAaDo=)
4: sUMt2I0qsDCXGGhD6_L1M2esRvU.roa (hash: P9ByjtRUC161Qd26Fzc7AA5m4JXTB5Ed5GY59AzQlSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8f:04:43:c2:ea:ec:d0:da:0a:c2:98:ac:45:fb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Validity
Not Before: Apr 28 18:00:46 2025 GMT
Not After : Apr 29 18:00:46 2025 GMT
Subject: CN=3b80f4780d69806b5660197a053c7ba1a5c71efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:cf:d1:eb:83:22:ec:da:b1:be:dc:9c:28:e8:
ba:2c:8b:4a:68:6f:e1:4b:ac:89:eb:5b:71:51:5a:
99:63:65:e8:29:7a:2f:ac:c2:d0:6c:5b:f4:f1:36:
b0:11:03:ee:d0:59:04:ea:50:b5:c7:8f:63:08:98:
24:a8:02:59:32:60:eb:78:92:e2:86:09:c2:51:80:
a5:d2:a4:bc:21:79:21:0b:4e:d4:9d:ce:3a:20:d1:
4b:95:99:77:53:5d:76:25:03:0a:1f:8f:c3:fa:20:
c8:30:b5:a9:32:80:72:ff:69:f0:b9:6b:59:1e:2c:
ec:dd:0a:d5:28:43:82:91:e4:4a:2a:6e:5c:08:c7:
b5:73:98:fc:8b:3b:12:7a:16:8f:31:13:57:3d:93:
eb:87:3b:83:3a:1a:d0:32:4f:f4:8c:02:ff:a8:e4:
e0:e9:ce:f1:e7:be:fb:80:96:23:eb:10:84:ae:93:
b8:3a:64:e4:60:d2:a2:d3:bb:ac:13:f4:fc:b9:d0:
96:68:57:82:29:6c:06:13:49:a0:ff:60:fe:b2:12:
88:36:a9:5c:1a:ee:5a:7a:f7:8e:72:87:31:9b:a5:
51:7b:7d:2f:44:86:86:19:b4:90:87:1a:53:18:57:
7f:76:2f:79:0b:e2:5c:da:ba:be:0a:b6:bd:0e:12:
0e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:80:F4:78:0D:69:80:6B:56:60:19:7A:05:3C:7B:A1:A5:C7:1E:FE
X509v3 Authority Key Identifier:
keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:36:cf:ea:c6:b7:59:04:58:43:09:dd:05:82:58:88:af:f3:
82:9c:81:a2:ea:f7:a7:5a:20:c7:5e:9b:af:b0:3d:c7:42:24:
af:21:71:ac:6e:2b:8d:e6:b1:0b:88:3c:e0:ff:ea:3e:84:df:
02:9d:2c:3c:4e:96:77:c5:2f:1b:a7:6d:6d:29:54:36:2a:48:
9a:78:ec:b2:96:12:17:e9:91:b3:b8:6d:dc:79:56:24:7d:e7:
39:dd:7a:91:33:d4:a2:a4:7e:80:80:e4:d8:b9:58:d3:5a:26:
4a:77:a7:13:ad:07:7f:6d:48:9b:b5:1d:55:d0:41:8c:e2:a7:
02:1b:15:d0:d3:59:75:08:0b:14:a0:76:95:63:5d:83:43:6b:
4e:a1:df:cc:95:eb:48:12:6d:3e:64:d4:a9:22:19:ff:6a:c7:
73:9b:a0:bf:39:ee:ef:d3:4e:8b:f9:5f:a0:20:d8:51:37:a9:
5f:58:a7:64:1c:ac:c7:7b:cd:a9:6b:02:fa:73:2a:bf:14:45:
aa:30:74:c3:b3:86:91:64:15:52:6f:d4:00:7c:54:4d:47:ec:
a8:bf:12:a4:46:39:aa:65:9c:08:fe:8d:16:15:59:70:92:62:
0c:7b:55:3b:e7:69:91:a4:8b:3f:59:08:39:49:9d:2d:f0:0b:
bd:bc:17:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:36:41 2025 by rpki-client