Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: cB90MCrQklZCEjFUblOHrCTRD5rrkm+/0sN06Gx2rps=
Subject key identifier: FE:A9:FD:95:AA:CE:98:95:B2:1C:96:E3:54:0F:2F:27:3E:A9:41:36
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 0196895CF252C520B952024EA9A6D2A4B9F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 0E8A
Signing time: Thu 01 May 2025 01:01:31 +0000
Manifest this update: Thu 01 May 2025 01:01:31 +0000
Manifest next update: Fri 02 May 2025 01:01:31 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: vZ1R8hFQhsHPcxadg+qdO0N+ZvDrirHFyVS3YxJStGc=)
2: i8FpzgugtZcFKDdMebgRZ16RoIg.roa (hash: Z0Wnkrs5xvwFBERJB5wvtxVMhqH4ul49O/mmtU48/Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:f2:52:c5:20:b9:52:02:4e:a9:a6:d2:a4:b9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: May 1 01:01:31 2025 GMT
Not After : May 2 01:01:31 2025 GMT
Subject: CN=fea9fd95aace9895b21c96e3540f2f273ea94136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:f4:19:20:21:cd:42:b4:8f:32:d7:9e:c1:
5a:56:6d:0f:e9:cc:33:2c:4a:69:54:b5:f5:c4:7c:
45:10:55:23:cf:e2:85:44:8d:4a:d1:76:f0:44:12:
0c:fa:c0:2f:5d:99:32:ad:75:5d:39:69:bf:99:88:
10:0c:d6:a1:18:7f:0f:a9:56:8a:33:9e:e5:8a:d8:
db:36:b0:93:6b:b1:26:8c:10:f5:19:94:86:d7:75:
77:a2:26:37:e9:82:0d:6c:34:a4:17:88:05:19:b8:
be:70:49:71:3e:31:c6:2e:33:c5:bb:56:da:07:7f:
eb:0d:ba:fe:ae:05:d2:c0:03:4e:ba:32:63:93:5c:
b3:00:3d:c7:79:64:a1:9b:c5:dc:2d:c8:d8:87:5b:
f8:c6:4b:48:20:4a:5b:ff:c7:69:fa:d8:8c:67:e6:
4c:9c:95:b7:11:a3:ff:09:1f:1a:53:ef:d0:23:7c:
73:f0:88:cd:bb:b0:6c:9c:8a:cf:d4:4e:21:29:f2:
13:5c:fb:78:8d:78:c6:67:2e:35:b9:32:0d:7a:53:
71:f9:33:95:12:41:43:1d:2c:6a:f3:8a:bc:23:58:
b4:f4:d2:ef:f3:bc:7d:2b:9f:e8:99:58:84:8f:61:
6d:e3:6c:6b:73:ae:bb:15:e9:0d:5e:18:a2:7b:8e:
52:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A9:FD:95:AA:CE:98:95:B2:1C:96:E3:54:0F:2F:27:3E:A9:41:36
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:17:6f:e9:68:47:05:2a:8e:b6:f1:72:ca:40:fa:4a:80:19:
b8:7e:0c:c3:e9:62:da:61:82:5c:62:4b:5d:f8:e0:c0:8b:27:
06:f2:66:a6:93:90:b4:44:ec:3d:cf:c0:bb:3c:f5:e0:b8:b6:
b9:67:11:17:84:37:e9:7b:5a:6c:c2:69:ca:a7:f6:d7:1b:6b:
11:93:25:ce:9e:b1:a7:c6:15:f5:82:72:5f:cc:ca:01:e5:fe:
9e:61:4d:28:99:1a:0b:9b:da:98:49:bb:ab:bd:e2:fa:09:54:
3d:04:d5:22:cf:a6:d1:66:39:ac:a6:dd:a8:54:3c:98:9d:73:
6e:75:1d:ef:27:2b:2d:32:17:f0:e9:2e:54:66:2e:57:8e:ed:
62:6f:11:f4:97:a9:e0:db:77:16:ba:59:62:93:56:93:3f:40:
e3:32:bd:cf:b1:c8:e6:7f:10:3b:20:a8:03:a3:ff:4f:1c:7d:
ce:9e:69:ca:48:fb:6c:1d:f4:a8:48:0a:1b:2a:ae:d3:96:46:
cd:2e:8b:43:71:a5:7a:01:30:c3:a4:3f:2b:e6:2a:10:3b:43:
35:ef:ee:58:f9:af:88:a7:24:e0:44:43:59:7c:19:51:e8:c1:
f9:f8:fb:81:20:33:3a:52:dd:19:43:65:1b:b0:bb:6a:1d:1b:
a9:71:19:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:17:54 2025 by rpki-client