Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: /p3FjhM+ckWN7bSyGorEKof38uLBF7c8f/zn/Vx0zQQ=
Subject key identifier: 48:2B:3E:80:25:CB:85:3F:77:C5:AA:85:0F:AC:FF:C9:15:42:D6:CD
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 01967B3257BC92455475130458F51F96285C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 0ECD
Signing time: Mon 28 Apr 2025 07:00:18 +0000
Manifest this update: Mon 28 Apr 2025 07:00:18 +0000
Manifest next update: Tue 29 Apr 2025 07:00:18 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: tJ21+OENDRRyQRsWT/oaTFerlDdUegmPn0XScPGdcEk=)
2: 6f05f7w22zRcUpz28tjM6XCdsYk.roa (hash: kl4KaLs8etslFAKNgVQw6su1C8PWL6O+HJhYp1T4Tak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:57:bc:92:45:54:75:13:04:58:f5:1f:96:28:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Apr 28 07:00:18 2025 GMT
Not After : Apr 29 07:00:18 2025 GMT
Subject: CN=482b3e8025cb853f77c5aa850facffc91542d6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:f8:80:79:7e:03:b8:47:85:45:70:e3:ff:
33:5e:ec:35:fd:be:64:9b:d1:44:8f:9d:c3:fd:fd:
f8:7a:eb:3f:bc:06:5e:3d:19:48:cb:05:b0:9b:83:
78:47:5e:76:79:89:de:c0:26:fd:55:6b:ec:82:fd:
25:37:e0:33:1c:53:1c:06:48:76:94:92:d1:2f:4a:
8b:83:a9:95:45:ac:2c:73:dd:50:48:c3:7f:a0:54:
75:c0:0b:9e:49:9c:e9:c9:e8:44:14:6e:44:ec:65:
de:fe:0c:46:ce:8c:e0:d3:8a:8e:6d:3d:1f:a6:41:
58:ce:84:a8:37:ba:bd:96:47:9b:f7:57:7c:67:ed:
ee:6f:26:79:e1:b0:aa:f3:2f:2d:5f:e0:7a:8e:8e:
9b:6f:df:42:0d:65:70:fc:64:31:56:17:4a:e4:c8:
d0:3a:4b:e5:4f:a3:e2:5c:68:42:94:c9:2e:96:c9:
e9:01:9e:a2:b2:e7:c5:44:37:fc:3c:6e:2b:83:3a:
73:db:0f:a9:b9:e1:98:d2:31:79:ef:84:06:78:4f:
2b:2e:00:12:2d:34:f5:2c:80:55:2e:64:f3:39:c3:
6a:05:85:8d:46:09:e4:6e:f9:ca:a4:a0:49:bd:cc:
16:a2:08:63:0a:10:d8:c6:3a:85:9a:9e:aa:e1:88:
23:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2B:3E:80:25:CB:85:3F:77:C5:AA:85:0F:AC:FF:C9:15:42:D6:CD
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:74:c5:68:ee:bb:7d:21:08:9b:40:87:ce:d2:39:44:81:2a:
b8:34:30:46:33:33:29:04:fc:55:b5:fa:76:d5:1e:17:cd:10:
72:bc:c5:66:7b:70:9b:6b:f5:48:b7:f8:6d:74:52:92:58:de:
e8:a2:58:a0:a0:e6:bc:bb:d8:a2:f7:8b:8c:70:76:47:cc:b5:
ba:18:e7:40:ec:d8:e1:84:d9:d1:b8:b6:fb:d4:52:24:2a:bc:
ef:ee:6d:e3:2f:20:9a:32:e9:57:c0:c8:0a:fb:00:f7:d0:1f:
a3:f0:a7:b3:d8:30:c1:99:9f:3f:4f:7e:4e:87:58:b6:da:78:
7b:3b:b6:39:5f:6e:f5:06:20:b2:54:bb:c0:11:d0:5f:97:2f:
45:7c:77:41:b1:d5:dd:bd:9d:44:4b:f9:56:f6:73:54:14:53:
71:6c:60:66:51:f6:4e:4b:c2:ac:4f:00:cf:11:e4:c9:14:ff:
23:c9:51:cc:7c:06:e3:95:80:11:69:0a:ec:48:11:26:5e:62:
16:a9:79:b1:97:15:ab:c8:f2:83:08:b9:6a:e0:46:86:d9:5e:
a8:67:73:c2:90:3c:46:bd:1c:5c:9f:01:26:8c:4d:55:db:1b:
69:9f:53:74:25:c7:29:74:a8:a7:9d:be:18:5c:a3:44:fa:10:
ca:d9:62:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:51:08 2025 by rpki-client