Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
File: 3YpOHe5bseZXmxFhypEsqcA7Ru0.mft (raw, json)
Hash identifier: KDCUVFi/ztPlkk4uhvZaU2ZNVgVN4SkbBR7Tq/NGQ6A=
Subject key identifier: 2A:77:12:00:82:31:C4:1D:E9:F4:37:9C:D6:C6:1E:41:A3:53:A0:1B
Authority key identifier: DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
Certificate issuer: /CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Certificate serial: 0196876E342F7DA5651B57D9FED2A4FA3E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
Manifest number: 0E6B
Signing time: Wed 30 Apr 2025 16:01:08 +0000
Manifest this update: Wed 30 Apr 2025 16:01:08 +0000
Manifest next update: Thu 01 May 2025 16:01:08 +0000
Files and hashes: 1: 1-hdiWMY5l0xAZuqxRKYMnls1-tQ.roa (hash: T86Jb9a9Ub4X+hYRFQtCytnDevJ3Vo4p0E2BCYldVL4=)
2: 3YpOHe5bseZXmxFhypEsqcA7Ru0.crl (hash: 0I/uk2tlybP7KVZg5Y3e8EkrfuQzNgiSTPhgIyuN0C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6e:34:2f:7d:a5:65:1b:57:d9:fe:d2:a4:fa:3e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Validity
Not Before: Apr 30 16:01:08 2025 GMT
Not After : May 1 16:01:08 2025 GMT
Subject: CN=2a7712008231c41de9f4379cd6c61e41a353a01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:26:8e:11:30:ef:f1:75:ae:c0:52:19:40:
d4:6b:88:27:c1:bd:3c:9b:16:5c:39:82:67:66:22:
40:e7:22:00:6f:69:f4:67:77:16:3f:0b:f4:0f:79:
53:45:38:50:a8:91:0a:5c:7b:c7:95:07:d6:b5:1b:
47:5c:12:ca:ff:f0:f8:bb:a1:08:09:d1:31:c1:ad:
a5:3e:de:fe:fc:ef:1c:82:0f:f4:6c:43:0d:17:d0:
5e:57:b1:49:24:89:73:a7:6f:db:2f:c2:b3:82:a3:
69:7e:e4:f0:7a:c5:fd:9f:2d:30:ed:d6:6b:6c:c1:
ae:52:f7:27:ad:bd:8b:85:94:c4:a0:13:42:04:4f:
f7:0c:8e:11:67:e8:db:00:2e:f3:a7:2a:4c:69:00:
74:08:aa:61:7d:30:bf:26:f0:08:5e:22:e1:80:06:
fb:33:23:a1:d1:06:06:2b:b0:69:4c:63:b4:fc:48:
af:3e:49:98:25:97:33:55:ae:a4:a1:70:46:eb:be:
b9:eb:69:b3:06:33:2f:d9:d4:af:6a:5f:6c:14:0d:
e7:a7:24:bc:a5:80:94:6e:43:fe:ac:a7:c7:af:3b:
70:c3:3c:52:9e:87:67:34:51:0b:11:89:1e:b9:f7:
12:50:71:f5:40:26:a8:9d:15:1d:48:ef:4c:96:ca:
d0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:77:12:00:82:31:C4:1D:E9:F4:37:9C:D6:C6:1E:41:A3:53:A0:1B
X509v3 Authority Key Identifier:
keyid:DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e2:8d:f3:70:38:b3:91:6b:4b:44:a5:23:88:ec:f6:a0:e4:
af:8b:f8:18:7f:9d:c1:69:ab:28:d3:ec:4c:18:ae:e2:31:5d:
15:ef:db:b0:b6:dc:13:c1:01:d7:f2:e0:38:6c:7b:69:77:2f:
4d:90:a0:e2:b9:15:78:5a:03:5b:f9:0c:2c:3c:5a:1b:29:4a:
01:35:d5:19:34:44:ae:a4:c1:5a:e9:1e:67:11:64:fe:5c:2f:
c1:aa:e4:fb:71:b6:82:c3:85:aa:92:bf:14:f8:e2:30:20:42:
ea:60:14:ba:e5:e6:a1:ba:6e:e8:a2:7e:64:1f:20:f8:8b:c7:
25:5f:b4:47:51:79:3e:90:1e:c1:c1:6a:33:a4:fe:82:52:7e:
54:3a:04:88:b6:0c:4c:18:2c:1a:36:63:0c:51:96:e6:11:49:
04:a5:23:39:65:f3:81:7f:af:1e:aa:0a:ea:b6:d5:8e:f0:2b:
71:8c:35:e8:2c:89:fe:84:5e:7a:5a:52:1d:0b:5c:77:f2:0c:
8b:8f:86:3b:e7:3c:a1:3d:d5:de:88:ae:59:58:5c:da:8d:5e:
81:5c:cb:34:f3:7a:c9:a9:6d:a1:7f:08:70:1d:f6:7b:75:cc:
23:7f:15:f7:fa:72:3a:33:b1:a9:c7:53:ea:41:a9:ea:de:06:
45:b0:c4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:04:49 2025 by rpki-client