Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: 4rREK1+RAgd2vuUWSUqsfGIKB/Gk3YcRzQY2gMj9bCA=
Subject key identifier: 71:FA:CA:A9:07:A4:F1:41:A4:F1:AA:B9:17:E7:DC:EA:02:EB:E9:44
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 019673B032953E5702BFAB687945A55A4142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 0B9B
Signing time: Sat 26 Apr 2025 20:00:49 +0000
Manifest this update: Sat 26 Apr 2025 20:00:49 +0000
Manifest next update: Sun 27 Apr 2025 20:00:49 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: EDAZKjlyqILwxpfUvUvr88eOZVPQRlj5wCuDZGZKabA=)
2: zxXrJCgqT81AO-d4vpKnqCQPEGE.roa (hash: WugT5zcayhMYDSTA/kF2PldTCBDPYZiQht5Wqh3j65Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:32:95:3e:57:02:bf:ab:68:79:45:a5:5a:41:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Apr 26 20:00:49 2025 GMT
Not After : Apr 27 20:00:49 2025 GMT
Subject: CN=71facaa907a4f141a4f1aab917e7dcea02ebe944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:47:d7:f0:ba:a4:de:07:11:0f:88:5d:84:
63:0a:63:5d:52:4e:dd:34:d8:3c:2b:a5:ca:ce:e5:
af:44:87:9b:e0:72:dd:ed:e8:52:b5:93:a0:ca:17:
2c:43:c2:d0:20:a1:4f:f5:37:ad:70:64:97:e6:52:
f8:c4:44:18:58:68:8b:14:da:dc:bd:88:ca:51:d9:
34:92:e8:89:46:91:c9:34:56:51:76:69:f2:09:7e:
20:12:ae:c2:e2:e4:0c:4b:a6:f6:60:6f:7f:ad:68:
58:30:af:66:45:08:06:66:33:3a:6b:94:86:62:c8:
b1:f2:09:c4:68:ac:71:78:d7:63:91:d3:4d:d1:10:
73:49:1d:22:f2:a2:3a:51:84:3e:b0:12:c8:f2:81:
63:01:70:eb:38:65:4f:8b:e7:41:fa:11:ca:08:5e:
34:93:79:7c:5b:aa:09:16:d3:e4:2f:39:f0:8e:54:
db:4b:64:df:9b:83:fe:1e:ee:c2:02:ff:b4:a9:7e:
df:85:be:fd:62:2f:ed:92:01:3d:96:2d:b9:6e:66:
e7:68:47:ad:45:bc:ff:0d:3e:23:2f:d6:9f:86:17:
4f:ef:9d:94:17:72:2f:0c:11:20:dd:db:aa:ea:ef:
58:91:22:56:cc:57:e8:cf:8a:7d:69:8b:f5:47:e7:
69:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FA:CA:A9:07:A4:F1:41:A4:F1:AA:B9:17:E7:DC:EA:02:EB:E9:44
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bf:a8:f2:1c:4e:00:1d:08:c1:e0:a5:58:a9:3c:12:20:1b:
02:68:d4:16:73:16:f8:71:af:76:a3:d4:dd:2d:8c:e5:20:75:
f1:0d:8c:ac:46:82:89:0e:2b:49:3e:7c:5f:3e:5e:a0:99:c5:
6f:7b:d3:92:22:c8:e1:76:ec:f6:4a:86:e0:03:8d:0f:c8:c1:
ac:d2:e4:3d:9c:7b:ac:87:42:64:ff:83:53:7d:ae:f4:20:2f:
08:6e:5e:bb:8c:35:c6:59:4e:69:c3:05:e2:7b:ef:b2:cd:63:
f5:9f:d9:f0:1c:c0:33:6a:b2:d5:81:99:a7:99:b6:ab:6b:46:
23:a9:4a:de:2f:82:dc:a6:e1:d8:cc:60:6f:63:df:5a:ff:71:
f0:d9:c1:a0:d3:ec:67:59:e2:2f:3e:ef:73:a4:7e:94:b0:17:
d0:db:0d:c4:0e:39:6e:36:39:d7:cd:c9:12:10:fc:dd:59:6c:
e2:da:55:ac:35:ba:2d:bb:6c:1f:bf:fa:1d:cc:29:6d:dd:ce:
f2:69:20:df:32:2a:08:cd:10:9f:01:7d:14:5a:58:ae:40:39:
58:21:86:8d:ca:ad:43:48:e9:01:ac:67:3e:cf:c8:e9:d4:a6:
05:d6:0e:d5:2d:70:5c:56:4b:5e:f1:6c:62:c3:7e:51:8e:3a:
02:fd:0a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:44 2025 by rpki-client