Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
File: 3f2U67jLmKHb31C9zWncwpFEiJ4.mft (raw, json)
Hash identifier: ig7qknjjLxmHIMKWmMP8Om42j/OLzt9JjE0JBiBQwrE=
Subject key identifier: F8:11:37:2A:FF:E5:A6:8B:13:5A:09:1C:92:0E:60:44:06:2E:A8:8E
Authority key identifier: DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
Certificate issuer: /CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Certificate serial: 01967ED86B54B807C87DFC2771746BCA73DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
Manifest number: 0BFA
Signing time: Tue 29 Apr 2025 00:00:34 +0000
Manifest this update: Tue 29 Apr 2025 00:00:34 +0000
Manifest next update: Wed 30 Apr 2025 00:00:34 +0000
Files and hashes: 1: 3f2U67jLmKHb31C9zWncwpFEiJ4.crl (hash: p5H5ngt+PsBKrIp9IODs+yJExPf4PxTVe8UuUrUyT5k=)
2: yOI7tiSRDXgdskD_bs5AhIY61n8.roa (hash: jCxGB8CWsOl2EvkB0hTjOgeBy34atnE5kB7r6h+CCmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:6b:54:b8:07:c8:7d:fc:27:71:74:6b:ca:73:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Validity
Not Before: Apr 29 00:00:34 2025 GMT
Not After : Apr 30 00:00:34 2025 GMT
Subject: CN=f811372affe5a68b135a091c920e6044062ea88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:cc:ee:04:dd:43:31:17:b3:80:ed:25:93:
29:99:c2:b9:a3:dd:a4:2a:b3:bd:16:5f:c3:b4:ff:
ab:7c:9c:d4:db:df:f7:66:e6:ac:b3:f3:f0:38:0f:
44:f3:63:84:63:f4:eb:33:00:ab:20:c4:82:b3:0b:
93:19:5f:5a:96:a2:49:b0:ab:18:d0:7b:19:8f:37:
e9:9f:0d:5c:27:7f:a9:0d:8e:e4:f7:68:ab:e4:7c:
87:4b:8a:68:0f:4e:32:b8:58:08:9b:6b:32:06:41:
a6:6d:d0:c8:8a:21:3f:ac:17:8d:cf:49:23:a0:fb:
4b:c4:64:3e:63:88:63:fb:54:e9:66:f3:22:57:c7:
f9:0a:92:84:04:43:7f:d2:fe:0c:18:93:09:7d:71:
65:63:0e:70:be:65:47:46:93:8d:a3:ba:ab:cc:99:
dd:59:8d:74:b2:b3:49:8e:fe:7c:af:e2:0d:46:1d:
46:62:22:82:09:e9:c9:45:61:b4:99:11:74:6a:48:
2e:e0:f3:18:4b:c1:4d:fe:50:73:73:dd:b5:ac:a5:
a4:0e:38:be:3f:54:f9:37:88:4a:da:d8:07:a0:1f:
df:fd:ed:14:72:dd:78:5a:4e:d9:c3:83:cc:91:2a:
0f:fb:31:2b:c0:13:d8:cf:2f:6d:33:fd:13:32:50:
46:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:11:37:2A:FF:E5:A6:8B:13:5A:09:1C:92:0E:60:44:06:2E:A8:8E
X509v3 Authority Key Identifier:
keyid:DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:72:72:02:9f:4d:88:c1:29:b3:07:7b:04:4f:0f:85:12:2b:
51:55:3e:0f:d4:26:56:d4:31:79:9f:66:8f:ba:39:4c:3d:27:
f1:7b:9a:cd:98:95:ee:ba:e4:e9:bb:e8:69:11:47:94:57:34:
43:69:96:a7:d0:e5:87:ea:d2:61:42:ae:d8:ab:dd:42:ef:a8:
22:35:3a:5b:22:20:e0:44:8a:5b:34:b6:7d:99:c6:bc:32:b4:
c4:f4:6d:ac:69:c2:10:b2:29:55:79:da:d8:8e:3e:67:80:3e:
f3:f5:7c:ec:e5:cf:2c:02:98:88:fb:4a:d9:79:7a:2f:1b:8f:
07:e9:82:7e:5c:06:95:ef:14:09:3d:ae:c1:81:df:05:28:af:
b5:9e:a9:41:7c:1f:5e:41:92:31:27:9a:7b:5d:79:65:e0:53:
90:35:64:0a:8b:57:cd:00:bc:64:1c:d1:e1:f3:61:c7:51:61:
04:e3:9b:0a:6e:7f:1e:2b:be:b3:e6:80:0f:25:ae:4a:69:22:
2e:44:37:4c:e2:16:38:fc:53:c0:df:c4:ea:84:7f:e3:85:a2:
0e:13:84:22:98:02:6d:b3:8c:31:e7:7f:cb:32:a6:98:dc:e2:
73:70:13:c2:ac:dc:8e:38:e8:3d:9d:c6:ba:4a:f3:31:cc:bb:
4d:ce:8b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:55:08 2025 by rpki-client