Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
File: 3RiOwuSayUWFJFtLh0Whu3oc3GY.mft (raw, json)
Hash identifier: grwsqdl13j5ZNRe3D64GHggT37rZ8QhUfX+sTIn+Rs0=
Subject key identifier: 95:78:28:DF:15:90:E4:B4:18:4A:C9:CF:66:99:9F:09:4E:BC:AC:95
Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
Certificate issuer: /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Certificate serial: 01967D8EEDB514CDF8B93517951B966F99D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
Manifest number: 0785
Signing time: Mon 28 Apr 2025 18:00:40 +0000
Manifest this update: Mon 28 Apr 2025 18:00:40 +0000
Manifest next update: Tue 29 Apr 2025 18:00:40 +0000
Files and hashes: 1: 3RiOwuSayUWFJFtLh0Whu3oc3GY.crl (hash: KWjAlrId1TCVLDP9Mj87QVxOw+ZRsrSmBT9wigURAyc=)
2: pDLly0sn53PLZlgmqVTYD5L2Et0.roa (hash: MLKk0AIXSDvV1SnhwkIbUGP+qcSM6FHopsKcU6yMV74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:ed:b5:14:cd:f8:b9:35:17:95:1b:96:6f:99:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Validity
Not Before: Apr 28 18:00:40 2025 GMT
Not After : Apr 29 18:00:40 2025 GMT
Subject: CN=957828df1590e4b4184ac9cf66999f094ebcac95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:0b:f2:0f:be:57:e3:6c:8c:26:cf:d0:8f:
2b:e8:4e:77:d8:e0:e2:c4:a3:b5:38:ed:a4:49:a3:
f0:e4:75:53:07:8f:42:36:c2:43:bd:25:e9:84:70:
80:40:b5:c1:94:98:0a:83:14:23:52:e8:d2:b5:3d:
79:ec:92:c7:2d:b1:a8:14:ca:31:09:6e:02:65:aa:
23:0e:f3:bd:7d:88:0b:d3:43:2a:2f:61:b5:04:9c:
68:ed:a5:8f:c7:d6:a5:60:b3:fe:ce:61:90:de:0c:
ed:cb:6c:43:d8:4a:3a:77:ea:12:b0:fc:0f:2f:24:
35:2c:cc:bb:d0:99:cc:b7:39:4f:e1:99:85:0a:c5:
dd:5e:e9:bf:6c:d9:69:0b:45:8a:4a:90:ab:42:4d:
62:b9:e2:76:4b:5c:ee:ce:fe:71:25:84:8a:8e:80:
46:57:bd:20:d7:5b:49:85:72:30:52:c0:95:31:8a:
d0:b7:2f:43:43:55:3f:7f:8d:2d:03:fd:22:b0:b0:
30:00:7c:42:87:81:42:cf:4f:7c:d4:20:cc:db:71:
32:41:34:73:98:25:ec:09:cc:6b:11:9b:57:02:8d:
fa:97:89:63:3d:8c:bd:23:89:26:c9:19:bc:55:91:
d8:bc:16:8d:3f:0a:c5:b9:a5:05:e9:5c:b0:50:03:
05:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:78:28:DF:15:90:E4:B4:18:4A:C9:CF:66:99:9F:09:4E:BC:AC:95
X509v3 Authority Key Identifier:
keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8a:2c:87:83:a6:d6:99:7e:03:70:26:2a:9c:ad:d2:23:6d:
3d:7b:fa:67:3d:fd:81:b2:3b:d6:42:dd:36:44:da:ed:2c:9c:
04:95:b9:c5:ed:01:75:ce:4f:8b:52:1e:7f:61:4e:18:d3:8e:
a9:57:23:96:15:cc:9d:fd:51:7f:15:d8:9d:29:b9:7f:2a:ff:
09:a1:e5:e0:c2:04:4b:b5:22:a9:4d:d0:71:f5:26:bd:24:08:
24:72:1d:30:3c:95:51:26:36:5a:96:8b:fd:e5:47:d6:be:34:
f7:3a:7b:44:6d:0a:44:7c:a3:a2:ec:44:e8:ca:fd:36:27:78:
f5:aa:de:33:74:7d:ba:4c:a1:bc:04:92:33:c8:ae:53:8c:d1:
df:7b:16:2e:ae:c6:82:be:72:3a:42:a5:23:16:fe:71:ef:c5:
8a:23:a9:b4:66:56:65:89:b1:c1:aa:e2:ef:e5:2f:8f:47:9b:
d8:6e:03:57:ec:48:bc:05:4e:49:d8:11:ad:64:63:76:90:73:
11:dd:94:19:36:a4:1f:24:e2:a4:25:db:f3:03:17:81:31:9b:
5d:dc:80:52:b3:83:ee:7d:96:69:91:3b:64:71:a3:88:a1:95:
39:bf:99:a6:24:3d:4a:73:84:63:c3:40:af:9c:7c:ab:78:a3:
a4:0e:f8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:58 2025 by rpki-client