Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
File: 3pRhwhG_NVHFUHyTC0IExuxDsyI.mft (raw, json)
Hash identifier: qeMwnghpbe+fM0rfu7y9afBNv+/XoWv3o9iOS+3Ck1s=
Subject key identifier: 0B:17:1A:F7:C1:70:A5:EC:18:90:BD:9A:92:75:8A:96:07:85:2E:1A
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 01967CEA3BACD7F1FEDE0DEAD6EE0AE176FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
Manifest number: 0FB1
Signing time: Mon 28 Apr 2025 15:00:47 +0000
Manifest this update: Mon 28 Apr 2025 15:00:47 +0000
Manifest next update: Tue 29 Apr 2025 15:00:47 +0000
Files and hashes: 1: 3-CeBnshHuRaivw3WbqdE0Qd_Xs.roa (hash: QxTBnM9GZ47qowObu5DgA3PPZPI+pK+0T/E1jxfDI4A=)
2: 3pRhwhG_NVHFUHyTC0IExuxDsyI.crl (hash: q8sSDYsJi6MxS1ZV8PgtlwVoBmr2lgJMxoZpKzOWFfs=)
3: HxAxelvKfyvRBGZgYNyGH359bcw.roa (hash: 54oYSMM6V461t0pj1oiVJIo5XRCMuwwoyF2Ks6PmNo4=)
4: Vij9kWTTMdVr0KoR9iCmyiP1xZU.roa (hash: rcjHhBt0ZSx11oiGkYVO9itg34bAhG/5unoT9d3Y9g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:ea:3b:ac:d7:f1:fe:de:0d:ea:d6:ee:0a:e1:76:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Apr 28 15:00:47 2025 GMT
Not After : Apr 29 15:00:47 2025 GMT
Subject: CN=0b171af7c170a5ec1890bd9a92758a9607852e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:f8:09:c7:cd:ab:bb:4d:2e:d0:98:d4:0d:
a1:9b:42:bf:d0:97:32:6e:01:64:4c:9e:13:2c:be:
88:a8:d3:c1:d0:34:c7:58:11:fc:36:67:b3:4b:e8:
19:94:4f:d3:77:98:b3:69:30:b3:d7:3f:91:02:1d:
e0:b7:a5:e4:a6:ee:78:16:81:23:d7:ba:de:7e:8d:
b8:f7:8c:7c:fb:7d:27:68:3f:37:d2:61:fc:75:3d:
e2:2a:95:17:cd:10:fd:90:fc:3b:a4:a9:d2:82:0c:
07:e1:aa:87:70:db:66:1b:05:72:91:39:ae:55:10:
46:d9:b1:d7:6e:7d:9e:48:96:54:96:a0:90:49:dd:
4c:16:68:a6:d6:c6:9f:56:9d:e4:48:91:50:43:2a:
d5:cc:94:1c:7d:c3:e5:46:87:fe:6d:12:f9:14:b8:
5d:19:a1:29:62:04:41:94:9a:91:c8:68:7f:d9:13:
5a:c8:95:95:44:ab:ea:db:47:5c:b8:c8:1a:86:af:
c7:33:57:7c:ac:38:fd:59:c5:7c:ce:9b:54:2e:05:
ac:07:00:0b:44:16:60:55:6c:0f:d4:cd:4e:b2:25:
d5:85:af:49:93:64:fa:7c:65:82:aa:c4:b8:6d:84:
35:5b:2f:88:54:3d:d4:c9:2d:3b:4d:d1:55:b7:5b:
5a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:17:1A:F7:C1:70:A5:EC:18:90:BD:9A:92:75:8A:96:07:85:2E:1A
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:60:6e:65:76:07:ac:2e:fa:97:76:27:a5:cb:7b:36:df:3b:
4d:05:9a:06:72:e1:4b:30:59:02:7f:84:a3:77:19:d0:b5:49:
4a:9e:24:ff:df:05:01:83:69:4d:58:35:2c:c7:b6:de:f3:e1:
b8:7f:c7:32:81:83:fe:a4:01:49:0a:46:2d:5c:06:1a:d2:b5:
98:8e:8d:84:57:87:e2:30:b2:62:53:07:2e:c9:a4:90:32:cd:
18:a0:78:5e:d5:92:f3:41:5f:92:a3:69:65:88:3c:46:a7:9f:
5b:5c:11:df:d5:03:7b:25:5b:20:28:00:66:5b:9c:3d:e6:ea:
fe:52:59:a4:85:2f:59:4b:7b:07:d5:91:1d:03:8f:dc:42:e1:
ab:74:eb:2b:66:59:5d:f6:45:8d:c5:11:ee:87:ff:22:14:12:
17:67:24:60:aa:57:d5:68:ef:3b:41:d6:fe:31:a9:03:34:72:
e9:54:38:35:6c:3a:d3:a8:ae:db:ea:07:de:8d:7d:4d:db:72:
70:ca:fa:cd:14:d2:db:c6:45:f4:38:c4:71:7f:ff:bc:af:77:
4d:15:6c:c5:78:73:20:33:99:ec:1f:c4:28:b6:83:bf:a7:6c:
e0:d1:3c:4c:92:98:84:72:05:cb:13:96:be:26:50:0f:16:2e:
c0:b3:ae:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:10:45 2025 by rpki-client