Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier: oOJ7MISnUbBCXTiV3pXNg2JUw17LdCZiofwB2KL9CrA=
Subject key identifier: 1D:F9:3B:02:D5:73:9A:41:7F:08:91:E2:23:36:06:F4:2B:B1:FC:14
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial: 0196748C50509FBE8936E760E9256AC0E0DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number: 0607
Signing time: Sun 27 Apr 2025 00:01:14 +0000
Manifest this update: Sun 27 Apr 2025 00:01:14 +0000
Manifest next update: Mon 28 Apr 2025 00:01:14 +0000
Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: qWhUf78UxfB8z7/SfM9GDwj0GoAfNttL8lUWZETo2xA=)
2: xR2Kuj_X5JRY3WX_WqgPgukk9Lw.roa (hash: wP9kQODXoT56dWOB0bEFnWVWD/Y0ndzO5Fzna/QZSuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:50:50:9f:be:89:36:e7:60:e9:25:6a:c0:e0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Validity
Not Before: Apr 27 00:01:14 2025 GMT
Not After : Apr 28 00:01:14 2025 GMT
Subject: CN=1df93b02d5739a417f0891e2233606f42bb1fc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:30:02:c1:68:05:71:a5:8f:c5:9f:c9:88:
56:21:17:07:0c:cf:a5:e3:b7:85:5d:50:de:48:76:
43:71:c3:fe:a5:60:1f:52:12:14:7f:d5:6d:f8:19:
70:c9:ef:35:d2:6e:5f:d8:69:d6:69:1d:3a:1c:ff:
4b:35:8c:1d:5f:2e:39:89:e4:9b:f3:ac:db:e9:86:
60:bb:a1:82:a7:60:e6:54:11:95:db:2d:81:dc:06:
59:f7:f8:c4:57:8e:c6:80:c0:2c:01:93:7c:99:61:
f5:b2:4d:8c:aa:0b:15:0e:61:4a:5b:b4:bf:35:1b:
10:29:55:50:a9:55:0c:4a:07:4d:ff:17:1a:8e:df:
77:1d:a6:03:af:51:61:68:3e:c9:53:9e:47:02:7b:
0e:4f:51:e3:db:a9:3f:f3:1e:c5:d5:4f:83:9f:b5:
e8:89:e5:9b:7e:f1:33:5e:cc:69:da:66:3d:80:b4:
47:ef:1f:e9:c1:29:48:e2:09:45:81:e8:61:e9:91:
28:51:fa:37:09:54:75:15:5e:a2:30:16:6e:51:16:
92:75:64:d2:7e:a1:07:2a:b4:76:65:20:3f:63:af:
90:92:9d:e8:0f:49:6f:6c:29:99:2a:6c:98:88:e9:
62:a7:2d:14:7e:05:4f:5f:c9:83:8e:8b:70:21:52:
90:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F9:3B:02:D5:73:9A:41:7F:08:91:E2:23:36:06:F4:2B:B1:FC:14
X509v3 Authority Key Identifier:
keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e1:dd:52:bd:a4:b7:5a:c7:6e:aa:05:61:1b:77:35:c7:37:
01:bb:72:de:ff:e7:5b:9b:4f:65:ac:7b:c5:e7:85:db:a8:eb:
e9:55:87:31:db:e0:76:99:8b:8e:5c:fb:d5:d4:ef:53:fd:19:
e2:25:d9:81:e4:a9:82:d5:97:fa:dd:7b:cd:03:59:a1:4f:0e:
c9:aa:1b:78:04:12:e6:ab:e8:1b:75:d3:58:e3:71:75:88:46:
d9:00:65:df:66:0d:6b:48:9e:dd:98:f4:69:b2:57:9c:08:aa:
ef:3a:00:fa:cf:f4:07:f6:c5:61:5e:52:57:d6:cf:c3:25:47:
81:14:6a:e9:8b:d2:09:33:f6:71:e5:41:74:71:8e:0b:d8:e5:
f3:3d:cf:db:0e:ab:91:28:d3:f9:31:35:f8:a0:3c:ed:3b:a8:
f2:5f:f6:93:d1:57:06:67:5c:8f:85:ad:62:f2:d8:9b:f2:46:
3e:c7:34:f2:51:b0:b6:c9:85:10:1b:9c:01:e7:43:c8:69:08:
28:bf:e1:96:76:b1:bd:11:53:03:d8:96:87:bc:d0:0e:3a:a1:
96:c8:df:78:67:80:08:12:c4:3a:76:ae:ac:35:33:42:db:e1:
15:58:f3:c1:52:59:2f:c9:a0:00:86:63:d4:72:d7:3d:a0:ce:
28:6a:9c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:07:46 2025 by rpki-client