Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: hM0UUMcUmPW353zsZYvrs4zZny2/aaYjJwNMVWaIKYM=
Subject key identifier: 9D:FC:62:42:CF:8F:9F:A5:77:83:E7:70:E4:B1:41:D5:96:C9:A1:4B
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 0196730AECC8BF0AB8C2BE9488283C7059DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 0EB3
Signing time: Sat 26 Apr 2025 17:00:17 +0000
Manifest this update: Sat 26 Apr 2025 17:00:17 +0000
Manifest next update: Sun 27 Apr 2025 17:00:17 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: IN0UcexQYPDPdytm3NZFLPj7lmU3w/ebjPvBdspzySk=)
2: VXcC-Aoxwj-rTTGa_uO04BMN16g.roa (hash: VurFkBc53EnvckMEwSnM6ZAN10rC6gV5KJRXaTV9e/k=)
3: jyRg9rzyp13wzC9lPn-bQBVk9SM.roa (hash: DykO+WlsvnZBAvuruj+gmcKA6ANC0St445Gn0td25pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:0a:ec:c8:bf:0a:b8:c2:be:94:88:28:3c:70:59:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Apr 26 17:00:17 2025 GMT
Not After : Apr 27 17:00:17 2025 GMT
Subject: CN=9dfc6242cf8f9fa57783e770e4b141d596c9a14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:42:51:33:15:08:f9:fe:b6:44:3c:21:af:
2e:70:33:5f:01:28:d3:4e:6f:a8:4b:7a:03:be:99:
52:7b:91:77:c6:a1:d4:38:8d:df:d5:84:31:8b:f3:
a5:7f:bf:8a:82:58:11:06:d2:1f:5b:d2:99:c5:bf:
8f:5c:6b:70:92:8f:d3:0e:f2:b2:20:55:17:7b:dd:
e4:01:9e:ba:23:1b:31:45:0e:bd:fc:32:2f:29:0b:
f7:55:6a:bf:f1:8b:3d:82:70:8d:b0:c3:d2:19:31:
13:b3:19:ac:f2:e8:82:0a:10:e7:9b:c5:09:33:d1:
b1:e0:6c:53:ff:60:55:eb:ad:4f:20:65:d2:27:49:
7a:ee:c7:c7:97:e0:42:75:d5:bf:b3:48:9c:52:78:
d2:c7:1a:3b:f8:91:e1:d7:d3:98:30:d6:f8:85:a6:
75:67:a7:3d:6b:cd:81:47:40:b4:af:9a:07:13:6a:
61:af:4c:d5:94:87:2e:07:cd:b7:aa:41:5b:37:3b:
56:68:df:8d:4c:f1:2f:e8:89:93:1b:a2:4f:c1:4f:
6c:9f:63:ee:b6:b0:3e:cc:1b:e4:87:fd:d8:9a:a0:
58:d2:2b:b6:77:85:60:dc:20:22:b4:ea:51:48:85:
77:d2:a2:1f:3a:52:c3:91:7d:f8:18:32:61:7a:5b:
5c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FC:62:42:CF:8F:9F:A5:77:83:E7:70:E4:B1:41:D5:96:C9:A1:4B
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7f:c9:48:34:8e:5f:66:24:5e:0d:4e:38:3e:87:52:57:09:
1b:e2:9d:94:6b:9c:31:e1:d1:b0:78:c9:ca:c1:e5:1f:cd:e7:
56:93:e1:6f:88:6c:98:ca:ee:57:d6:80:bd:9f:30:49:46:f9:
74:e2:a5:30:de:f8:25:24:85:39:65:e3:04:14:3c:78:d4:1f:
0a:0e:5a:a0:11:39:8e:b2:ce:63:2a:c5:f2:ad:c5:1b:3f:20:
f8:a8:04:01:c1:81:b3:65:6b:b0:11:c1:04:21:14:07:10:ac:
2d:58:f6:28:13:ba:9c:3e:2e:0e:fd:6a:fb:ba:41:f3:8b:fb:
40:40:74:a2:54:1a:a0:66:c2:0d:3d:f8:36:e9:2f:a0:12:6e:
1e:39:22:b8:b3:da:fe:61:de:a9:4e:c0:6a:17:7b:6e:e7:b6:
bf:9c:4c:ed:27:5f:9f:02:6a:80:0f:b9:89:28:e4:95:0b:7e:
c1:a9:53:bd:4e:50:be:9c:5a:c7:73:24:f2:b1:72:ca:3a:f0:
ef:c3:65:1b:46:40:ee:64:f6:ba:ab:f9:2b:5e:d6:bf:54:08:
2e:e1:38:06:32:46:be:be:7a:14:12:a0:da:29:6a:48:a0:39:
57:cd:a6:47:13:de:d8:47:2a:ad:6b:58:de:61:d4:47:15:66:
d0:c6:22:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:59:59 2025 by rpki-client