Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
File: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft (raw, json)
Hash identifier: 2flBnDkAJ5fDJ4BLyrjQITpeUE4VBzeaCU9Il8irLS8=
Subject key identifier: 60:AC:3C:67:26:02:A1:61:40:D1:F2:E4:82:F7:CE:19:94:61:7D:8F
Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
Certificate issuer: /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Certificate serial: 01968D3888F6C186E0302821C129F81F436F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
Manifest number: 1470
Signing time: Thu 01 May 2025 19:00:14 +0000
Manifest this update: Thu 01 May 2025 19:00:14 +0000
Manifest next update: Fri 02 May 2025 19:00:14 +0000
Files and hashes: 1: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl (hash: pRsmrkooyb9xGDz0/uhtDFWTU7YChEDF0mCjSvMgeAk=)
2: Ldu0EGXQ1MYyGdeyQmSIejuBpSw.roa (hash: zigF7LOpUtd1pS/tfQIWkRyp68k6cu70RaVSak3Qv0w=)
3: Y2gjl-Swzk92ryq3Z-Z6gp7HzLE.roa (hash: PMTJytzI+iwFKg204deNXF6qN+csOXo8Jl+I9xD+TfM=)
4: agxYPLnYdjCRAQfydoFhcZumCgg.roa (hash: NCy7EyPm/0lV8RywpILyDqtiIlQ48M258Jt/bjYI+0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:38:88:f6:c1:86:e0:30:28:21:c1:29:f8:1f:43:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Validity
Not Before: May 1 19:00:14 2025 GMT
Not After : May 2 19:00:14 2025 GMT
Subject: CN=60ac3c672602a16140d1f2e482f7ce1994617d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4f:0f:14:cb:d8:aa:48:a6:43:e9:b7:b0:39:
82:6a:20:9d:e2:8c:a0:8e:00:b6:d4:86:00:e9:7d:
ed:e3:21:45:cf:40:a7:8e:24:74:99:fb:47:be:cb:
27:2d:eb:a7:5c:f2:e6:75:7f:b4:c8:5d:37:65:7d:
6c:fd:b7:21:b4:69:59:c9:c2:95:1f:94:a1:10:5f:
cf:d8:85:fc:77:17:53:4e:9a:9e:e1:4d:77:50:7e:
35:53:b2:d5:82:36:00:5f:30:7b:a6:5d:99:2d:3d:
1d:f1:88:bc:9b:a7:1e:b8:6a:08:80:92:46:50:f7:
0c:85:6e:30:5d:25:20:0b:26:59:3f:4a:1f:19:ac:
c0:71:c3:4a:b2:be:50:da:cc:c6:7f:61:0c:0c:ad:
c9:71:a8:cf:06:ad:1b:9b:16:c3:83:a9:ef:f0:21:
dc:ae:20:6b:47:bf:d0:52:90:43:3b:84:d2:cf:1f:
cb:3a:c1:84:82:d5:c8:60:da:2c:87:0e:3e:f6:23:
ef:85:16:14:3f:06:c4:3b:fc:08:a9:ad:db:86:c5:
ca:c5:68:f9:15:49:3a:16:43:6a:8f:ab:47:ea:54:
dc:14:f5:c2:3d:ab:d7:d0:89:a0:f8:6b:fb:74:26:
40:48:d2:93:a7:cb:9e:8c:ac:80:8e:7b:08:6e:18:
6c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AC:3C:67:26:02:A1:61:40:D1:F2:E4:82:F7:CE:19:94:61:7D:8F
X509v3 Authority Key Identifier:
keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3e:0d:5f:14:38:7d:33:e3:b0:a0:51:0e:a9:18:d0:0d:14:
38:ba:93:c2:1d:89:ab:74:9d:27:85:7d:99:0c:45:e7:24:33:
22:8b:7f:59:29:a3:3e:24:41:ef:28:8a:0f:a2:0c:27:82:21:
4c:28:78:84:fa:db:66:e9:04:03:3f:97:3c:35:d1:bb:68:ca:
6e:3c:b9:65:7d:37:41:3b:0d:d9:f4:f7:d4:ca:b0:05:d3:67:
87:49:e2:21:13:bc:ef:1f:3d:f9:b7:e0:39:cd:4f:da:e9:d7:
a8:58:f0:ec:6d:d6:7a:bf:a8:a9:fa:7c:79:fd:de:be:a3:27:
28:92:97:1d:ac:5e:1d:65:6f:bb:96:09:d6:28:ce:9c:09:a9:
aa:b1:0c:28:92:45:3d:ab:56:fd:40:09:af:8f:a4:f5:55:d1:
70:8d:53:3c:1f:2c:ff:a4:3e:89:b6:52:5b:b1:3f:a2:4e:ba:
94:2d:92:3a:9c:40:fc:58:66:bf:c7:38:b4:a5:be:59:22:68:
83:ac:8d:4c:02:94:25:e4:14:01:e9:2d:ff:20:6b:34:58:ae:
24:44:f6:8a:33:e0:db:b3:ca:9a:d7:4e:da:47:ea:07:40:48:
f2:f6:3b:14:0e:57:ff:1f:db:74:2d:6a:4a:26:da:ac:17:6c:
db:bc:61:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:01:05 2025 by rpki-client