Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: 8zOns9MKU5nx2FjC3ZWGrjNMWHzgJPD0YcaBxNPvEdQ=
Subject key identifier: CD:AE:27:AF:B0:28:4A:C9:78:85:E7:78:E9:09:8A:6F:C0:D0:2E:E8
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019672D47B130AEC1C875FCA170AA21497E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 10D6
Signing time: Sat 26 Apr 2025 16:00:49 +0000
Manifest this update: Sat 26 Apr 2025 16:00:49 +0000
Manifest next update: Sun 27 Apr 2025 16:00:49 +0000
Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: aVJj4r+bFb8t8IHoF3VlYOGIO8R5sTL7/CN3k+5e7zk=)
3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=)
4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=)
5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=)
6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=)
7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=)
8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:7b:13:0a:ec:1c:87:5f:ca:17:0a:a2:14:97:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 26 16:00:49 2025 GMT
Not After : Apr 27 16:00:49 2025 GMT
Subject: CN=cdae27afb0284ac97885e778e9098a6fc0d02ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:da:ab:71:35:e0:b0:f3:2a:8d:1f:50:6d:b3:
48:0d:ea:a8:c7:3f:09:a7:a1:be:49:34:1d:75:ef:
64:e6:92:bc:68:5f:f6:a0:5c:7e:ee:5f:4b:ab:5f:
ea:5c:6e:aa:f0:4d:97:01:62:0d:f4:6c:28:75:af:
ff:fd:87:84:b9:96:ff:4a:b5:91:9c:36:36:65:e2:
ce:21:ba:b4:41:cc:55:8e:3d:30:ff:31:1c:f7:4c:
0d:71:3b:9e:34:da:1e:bd:9f:62:ea:75:a2:bc:a8:
d5:eb:8b:93:c3:44:f0:51:a8:4c:7b:0e:15:a5:ec:
5e:f3:b1:94:2d:53:1d:1d:d9:29:3a:aa:23:6d:99:
5d:cf:3f:60:7d:2d:43:97:9c:b8:62:68:db:7b:ce:
b3:24:fc:85:91:3d:96:f5:96:75:e3:6b:ae:6b:fd:
27:21:f0:16:b3:a1:3b:25:93:d7:53:69:66:52:f0:
02:98:42:15:cf:b1:b3:13:f1:88:2c:5e:07:28:19:
cb:86:19:a3:b2:64:39:c2:e6:fb:f6:25:96:06:12:
11:c9:dc:01:5f:b3:52:9e:dc:dd:97:29:c2:80:a0:
85:f9:3c:3a:e5:f6:07:2a:78:57:86:11:2d:ff:e2:
a6:65:42:34:47:a8:4c:58:2f:36:3c:fa:54:9b:1b:
83:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AE:27:AF:B0:28:4A:C9:78:85:E7:78:E9:09:8A:6F:C0:D0:2E:E8
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:94:67:cc:fc:4a:42:12:cd:fb:6f:69:36:ee:0e:8c:c7:1b:
00:94:5a:f4:6f:76:9b:75:ad:27:56:42:3f:8a:f7:e0:98:55:
c9:59:f6:65:0f:17:e2:2b:a3:4d:99:87:7c:51:94:1d:ea:9c:
6d:44:45:08:03:78:45:1e:4c:25:31:82:9f:eb:33:26:fa:8a:
7e:db:93:7b:23:c2:ed:33:2b:b3:61:ba:06:86:54:c9:a6:81:
4a:ab:46:35:30:41:a8:52:a0:3a:54:54:05:62:dc:43:7b:a8:
a0:73:3b:01:f1:e8:ef:b1:44:b3:91:df:e0:03:8b:27:b3:40:
cd:9c:72:10:45:df:69:b2:53:4e:0d:9d:71:0e:a7:38:bd:08:
94:f1:6f:51:09:c1:f4:3b:ff:db:67:cf:e1:b7:5e:81:67:3a:
d9:79:f5:19:59:8e:dc:e3:30:29:f3:77:5e:01:b9:f4:e0:b9:
04:f5:6a:52:09:ac:bd:12:55:13:d5:25:ca:df:c2:88:d7:4b:
c4:bd:ca:66:3a:8b:31:7e:44:00:4a:79:73:c4:cd:08:d9:08:
21:a0:53:e1:35:44:cd:2b:19:e8:de:35:75:5c:84:2c:d0:fd:
95:3c:4b:48:cf:2b:65:49:ae:bb:b7:e1:27:8a:bd:2e:cd:0b:
8b:e7:89:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:35:11 2025 by rpki-client