Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: AMEwG+mm91206TJ1o1H3NlvuNpCG876jKzhX0TB6Lok=
Subject key identifier: 60:48:DD:D6:F0:70:F4:2E:1F:C5:FC:91:D0:FF:8C:96:54:52:E7:E2
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 019676433ACFFCDB0DFD74510D162B665682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 08:00:39 +0000
Manifest this update: Sun 27 Apr 2025 08:00:39 +0000
Manifest next update: Mon 28 Apr 2025 08:00:39 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: rqNFOEIHXjbRkTrfo1cd+P67PgFXtNcjmhh0wsndIuY=)
2: 3o2OhEX8D-C9sW1xo7_jlOmD_j0.roa (hash: k3QEknU5rjZnXpONxqfvLO581xpn3+pyaYB6EDwI7ck=)
3: 7vdY6fKyJL6xOTEWHPQznWg1cuQ.roa (hash: LAvqsJ06fMyPoV983D+eGZunyZuIfO7UCXuYbTjEljc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:3a:cf:fc:db:0d:fd:74:51:0d:16:2b:66:56:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Apr 27 08:00:39 2025 GMT
Not After : Apr 28 08:00:39 2025 GMT
Subject: CN=6048ddd6f070f42e1fc5fc91d0ff8c965452e7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:f8:4c:0a:cd:88:33:d1:30:9a:5a:ef:0a:
4a:2c:f6:13:97:49:d1:ce:d2:b7:13:e3:15:83:0e:
a6:c4:0a:18:c8:50:43:52:f0:4d:77:b4:60:ee:b5:
44:60:6c:47:9e:b4:87:98:d5:b3:88:6e:31:66:bd:
c9:19:75:ee:13:ad:b8:40:81:1b:7a:18:a3:23:9c:
b8:ab:0f:4b:1d:df:1a:b1:f1:a7:87:1f:21:9b:fb:
7e:c0:a1:aa:ba:7e:09:0a:a2:dd:7d:ed:16:8e:86:
1e:bf:77:61:53:b0:cc:b8:96:b4:45:a5:31:51:76:
92:d5:8c:6a:6c:aa:2c:61:2b:97:2c:e4:99:1e:db:
0e:52:2e:4e:20:e5:3c:60:5b:78:0f:8c:c0:85:de:
95:e2:ee:18:5b:1e:ae:a6:ca:3f:fa:18:0f:66:d8:
c1:07:9a:35:27:cc:f8:c1:e1:c0:25:2b:8b:42:d5:
8a:9e:09:38:57:66:6b:91:42:8c:38:d0:a2:a1:0b:
53:05:14:4c:e5:a0:1c:f1:12:b0:5f:7e:e6:ec:62:
4f:3a:db:c6:f8:59:11:bf:be:e6:20:f1:49:dd:ca:
96:23:f5:f5:a7:8e:4d:b3:ce:88:32:11:44:2e:cd:
cb:93:2e:79:53:60:b6:1e:3d:3f:ea:dd:c2:fc:86:
a1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:48:DD:D6:F0:70:F4:2E:1F:C5:FC:91:D0:FF:8C:96:54:52:E7:E2
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:74:98:4e:0d:10:58:a1:cd:b2:61:bf:24:e5:c5:7c:5d:81:
35:b3:69:6f:70:cb:c1:3a:29:d9:37:56:bf:12:10:2e:07:22:
1f:4f:4f:ba:3c:cd:31:39:94:21:a2:dd:ba:a4:87:b1:6f:3f:
91:97:81:ac:60:a5:10:87:4f:ec:e1:14:99:23:b8:71:57:8f:
d9:a7:9f:da:64:42:a1:9a:5c:47:5d:d9:7a:7c:ee:3e:a2:f1:
18:f9:e7:19:cc:ca:96:8f:7d:18:b1:38:b3:7b:da:c7:ae:26:
f8:6f:f4:4b:2d:2a:e2:be:32:6f:22:90:a0:d5:1d:9b:74:da:
e7:a0:55:f2:7e:e7:e4:0b:66:85:06:18:a1:c3:12:ed:b8:27:
d6:66:90:d9:e1:1e:13:0f:bb:f2:9e:b6:a7:4d:4e:77:79:47:
e4:2d:13:3c:63:06:19:a2:ca:7d:9a:b0:7d:99:b7:3b:7d:ac:
48:5c:cb:41:c5:f6:62:b4:f6:2c:f7:46:01:01:02:30:9b:95:
5b:3d:e6:bf:3d:21:c4:81:b0:b2:71:4c:02:e7:ca:54:d2:56:
bb:b8:9f:07:b3:f8:9e:cb:33:da:70:a9:3c:8a:df:34:90:37:
8a:be:72:c9:6d:19:ba:92:82:68:37:8c:3b:63:a1:8e:13:fc:
99:d6:5d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:16:22 2025 by rpki-client