Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
File: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft (raw, json)
Hash identifier: I6Qdgnr3TDVxQoAYnMgZ/r4vfVZeyI2MuRBtJk36PLw=
Subject key identifier: 3D:55:A3:6B:80:61:38:E4:8E:AF:8E:0A:DA:58:2C:B0:C3:CE:BF:53
Authority key identifier: 0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
Certificate issuer: /CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Certificate serial: 019685EDB29D75881A01FD4888946E3E2327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
Manifest number: 3F
Signing time: Wed 30 Apr 2025 09:01:09 +0000
Manifest this update: Wed 30 Apr 2025 09:01:09 +0000
Manifest next update: Thu 01 May 2025 09:01:09 +0000
Files and hashes: 1: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl (hash: 17LcAKaHpuuL7Gr/bXxVIQgDo0qlNEN7sU4OUg+ORmc=)
2: jcTO1fBkVXsp4y6wlcBbebFM8iw.roa (hash: NkT9ooqiKYOuDT79Rkr1WXdOvqeB/1D8TcQH5fNDnzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:b2:9d:75:88:1a:01:fd:48:88:94:6e:3e:23:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Validity
Not Before: Apr 30 09:01:09 2025 GMT
Not After : May 1 09:01:09 2025 GMT
Subject: CN=3d55a36b806138e48eaf8e0ada582cb0c3cebf53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:1c:4f:d0:e8:dd:08:db:bf:73:11:90:c0:
5e:49:1c:37:fd:4d:46:e9:95:1c:27:07:a0:55:4b:
dc:c0:90:41:15:4e:39:dc:10:d7:d3:99:29:ae:81:
66:26:72:84:93:82:62:b6:0b:58:55:52:10:af:5a:
09:7a:f9:e8:80:1b:78:be:70:df:8e:b3:65:74:fb:
53:4a:bb:44:8c:a6:46:c0:84:b4:48:78:3e:f8:f7:
4a:24:74:31:6b:48:15:e0:64:df:53:b1:77:26:ed:
d9:1e:e1:d1:f1:d9:be:b0:25:c1:36:3d:47:d4:70:
b1:b6:78:f9:99:62:5c:df:82:00:03:d1:f9:a7:e5:
6d:33:41:b4:de:65:20:79:e7:62:12:be:de:11:f1:
92:08:ae:e7:a8:5a:f5:dd:fd:a3:1b:ec:ad:c2:b0:
62:e3:94:71:c3:d5:fd:48:a4:79:4a:5d:0f:93:ed:
c8:24:a1:5b:0e:fe:1a:13:77:7f:bc:39:d6:e4:de:
ce:8c:d5:52:bd:75:5b:8a:37:9c:9b:5f:db:8e:73:
a0:a0:b9:a5:75:67:b0:7f:90:17:aa:32:28:ab:7f:
08:59:53:2d:b5:bb:16:f4:b9:7c:48:d4:87:13:8c:
0d:5a:ad:8a:dc:98:81:c1:2e:bb:57:f9:fe:4e:79:
0b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:55:A3:6B:80:61:38:E4:8E:AF:8E:0A:DA:58:2C:B0:C3:CE:BF:53
X509v3 Authority Key Identifier:
keyid:0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:94:ad:fb:b6:2e:c5:d7:46:bf:40:a0:6c:10:8e:7e:53:af:
42:b7:1b:25:0d:d6:7f:65:bd:45:14:6f:d2:36:5c:d1:f6:d8:
7f:d5:fa:4d:85:90:d1:1b:f6:97:70:85:19:92:3a:b8:1e:40:
c0:2c:f6:a5:13:1a:97:a7:9f:39:37:4c:00:a3:ee:13:2f:2f:
55:0d:6d:0e:46:f4:a5:f7:19:9b:69:fa:c7:13:3f:01:ac:db:
26:fd:09:88:64:9e:30:b7:09:65:af:89:ff:5e:10:19:4a:b5:
ba:fc:57:cc:f4:89:a4:99:08:d9:f9:94:bc:a7:2c:a3:d4:14:
61:55:3c:aa:47:1a:90:e1:d1:e9:04:14:ef:ac:b3:11:a7:bf:
66:ab:3f:8a:a5:f5:ba:ef:8d:d3:65:27:32:cf:e7:52:50:f8:
46:37:47:65:93:16:b1:9e:e1:0f:10:29:06:aa:51:5a:72:a7:
92:87:6f:62:f7:a4:16:58:0c:ef:8f:0f:18:8c:bb:48:3c:9a:
38:7d:55:d9:33:89:23:3f:b9:11:99:0d:8e:18:bf:e8:fe:2e:
79:3c:c0:e6:82:9e:8e:09:6b:23:b6:c6:6d:3c:43:05:ef:d0:
e7:dc:ba:ab:f2:fb:34:94:a9:7a:c5:56:9c:61:d2:49:6a:76:
7f:8c:08:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:22:02 2025 by rpki-client