Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
File: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft (raw, json)
Hash identifier: wXlgxVib8Xy5PHpigwRybYIHcv3kgYkCRPgXXNy7QkY=
Subject key identifier: 87:B1:77:E5:53:AD:C6:EE:91:78:72:7A:5D:F2:59:68:A3:36:52:E0
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 0196786829D0EA39EC9B8DCC0BA3013AB4E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
Manifest number: 0CF1
Signing time: Sun 27 Apr 2025 18:00:14 +0000
Manifest this update: Sun 27 Apr 2025 18:00:14 +0000
Manifest next update: Mon 28 Apr 2025 18:00:14 +0000
Files and hashes: 1: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl (hash: x+jKv6dpCFFUiQenapYN+mXat6oOR1nsOUMCKs2h8Ao=)
2: C9mugrtzW_-CpWlbrAzn7HLndJs.roa (hash: us/IF6tfe4s5IdJAAyc5z0B0e23waKBVaik+zvz/TyQ=)
3: yll503ISaq2wNzfEAk_Qb_MtGbg.roa (hash: LYtS+Gvc0u0aK5E+MP2oP4ZNnIbSc6rSwiTMseFfpYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:29:d0:ea:39:ec:9b:8d:cc:0b:a3:01:3a:b4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: Apr 27 18:00:14 2025 GMT
Not After : Apr 28 18:00:14 2025 GMT
Subject: CN=87b177e553adc6ee9178727a5df25968a33652e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:17:2a:ce:6a:b8:68:a2:d8:a0:84:39:2e:32:
86:d8:b5:9a:9f:03:45:2a:a3:75:d4:1d:66:40:38:
cb:04:dc:90:40:0e:fa:c0:45:5d:ef:68:2c:22:a7:
dd:ec:d6:b7:b5:4f:99:a3:77:81:80:20:81:58:46:
92:4e:e0:d1:59:7b:79:08:15:19:0e:0d:cf:bd:ac:
79:09:7d:01:65:12:80:7a:25:b3:a8:a6:3e:8c:22:
09:9e:1d:51:1e:38:cb:1b:d1:95:7e:c0:60:11:ee:
d2:fa:37:71:bc:bc:40:9e:00:4d:c5:2b:fd:00:71:
46:15:13:62:c7:37:a4:58:5f:14:f0:84:de:63:51:
4d:16:95:c3:2f:01:eb:d7:c8:b4:ef:3c:7e:f7:30:
16:b1:6e:a6:2c:b0:c2:97:0b:bc:88:38:b2:27:28:
36:5a:0d:e7:52:c8:2e:bb:69:71:16:44:db:47:ee:
bc:13:8c:b8:fa:0e:c6:1f:35:7e:94:c6:7f:c8:f1:
4a:f1:e6:5e:df:28:1a:7d:14:ce:cf:5d:6a:ed:54:
9b:12:16:76:4f:ef:2a:62:f9:2e:41:e4:19:d1:a7:
b2:30:ee:ec:8c:70:74:6d:bd:94:22:85:6a:c1:ee:
1e:4d:ae:63:39:25:07:79:1c:2c:95:f6:72:e4:77:
0f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B1:77:E5:53:AD:C6:EE:91:78:72:7A:5D:F2:59:68:A3:36:52:E0
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f9:66:37:7b:0f:fe:cc:72:0b:f6:b8:19:85:7c:9d:a3:97:
14:27:58:22:3f:1e:df:89:f7:d7:3d:43:96:53:07:67:9d:96:
37:51:a7:06:66:f2:0c:8f:00:4e:11:8c:61:39:b6:2a:9d:81:
d1:63:e4:c9:10:d4:97:a1:95:18:42:b8:c0:01:fc:38:cc:69:
1f:c0:94:02:d9:91:74:ad:3a:ae:12:cf:f3:cd:df:d3:4c:5c:
7c:da:ba:1f:8b:d0:01:ae:9c:55:2f:62:d3:f7:55:49:f4:e1:
95:2b:df:30:8c:32:ba:f9:8e:77:5c:4d:15:7d:b5:e5:9d:60:
17:ac:17:75:7a:23:ec:25:18:53:a4:c6:2f:a4:d5:1e:2d:4b:
60:e5:cb:0b:d9:30:21:d1:40:28:08:79:cb:24:35:53:50:80:
01:1b:d0:46:d3:d3:b9:39:2d:f1:5d:e9:ab:f9:9f:26:14:91:
05:35:fe:b0:f1:c0:1b:d1:bf:85:41:50:2f:0f:14:dc:62:d6:
b2:ed:a7:ab:0f:32:ae:ba:8f:26:58:b2:4c:c4:63:cb:d5:eb:
6b:0c:09:ce:fb:af:88:cb:a1:0a:4a:47:1b:9e:25:de:be:82:
af:89:7c:d2:a6:cd:cc:c9:02:fb:2b:46:d0:08:5d:f3:f3:e8:
f7:17:8a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:34:06 2025 by rpki-client