Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
File: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft (raw, json)
Hash identifier: +WHfL3KkSTlWcB8hAzGfchGekmVR9rEuthQ2sOIbpyg=
Subject key identifier: 22:72:37:45:21:48:FE:A1:BB:92:C9:10:0D:76:C1:78:2E:E5:9F:6B
Authority key identifier: DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
Certificate issuer: /CN=dcfa86863c55865700634e1135e617e4079af8b9
Certificate serial: 01967F0F97120C7CE37AAEE9436D5B6D879A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
Manifest number: 106E
Signing time: Tue 29 Apr 2025 01:00:50 +0000
Manifest this update: Tue 29 Apr 2025 01:00:50 +0000
Manifest next update: Wed 30 Apr 2025 01:00:50 +0000
Files and hashes: 1: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl (hash: V12TwuPN64JAM+4XLOfRDIWJnhe2N4FHxHhqnhJxCJI=)
2: Rsq1KtzfZb2Gv4ObbEjxGcXkZwI.roa (hash: peUxHeNiz+fH8nbCOCYsRkuwwMY+SxJRD7icSc0BEwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:97:12:0c:7c:e3:7a:ae:e9:43:6d:5b:6d:87:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa86863c55865700634e1135e617e4079af8b9
Validity
Not Before: Apr 29 01:00:50 2025 GMT
Not After : Apr 30 01:00:50 2025 GMT
Subject: CN=227237452148fea1bb92c9100d76c1782ee59f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dd:8f:73:b7:36:74:7d:6b:86:c3:bf:ee:40:
fb:d8:02:c8:1b:5a:5c:42:a0:6c:ee:57:ff:ac:db:
83:a7:9a:45:6f:ae:fe:c6:45:32:e4:14:e5:3a:ad:
36:bf:69:e8:ed:85:f2:c4:d1:ee:92:73:40:47:04:
d3:5f:c9:eb:03:dd:e5:80:dd:c5:81:09:97:2e:b9:
d9:de:1c:b2:51:e9:9d:f0:5e:26:99:07:5e:7a:5c:
26:66:5d:c3:11:bc:b5:8a:1d:cd:87:9e:02:c0:3b:
ae:0f:a6:ea:e5:bd:8a:8e:0b:f3:30:3b:1e:95:e5:
16:a4:96:ca:e7:55:8d:ea:3a:0b:6b:1f:29:8f:54:
69:bc:ce:7b:89:54:0f:9e:eb:02:56:44:db:f8:cd:
2b:1d:c6:62:97:c6:c1:96:28:b6:e3:3a:be:f5:71:
56:cc:ad:51:70:87:a3:c7:25:76:53:4b:e5:42:2b:
50:b0:a8:7e:b7:a0:1a:69:57:47:00:87:2f:e1:63:
96:7b:4a:c5:c3:8f:b0:20:20:f0:7f:fd:65:a0:d9:
3f:8d:de:48:f2:b0:8a:d9:13:89:73:15:0b:a2:fc:
a0:db:2c:c5:03:25:5a:b8:5b:bc:f2:91:cf:fe:0e:
9e:96:68:f7:3c:0b:7b:6e:87:f2:ab:3c:a2:db:b5:
f2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:72:37:45:21:48:FE:A1:BB:92:C9:10:0D:76:C1:78:2E:E5:9F:6B
X509v3 Authority Key Identifier:
keyid:DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8b:32:33:2c:2f:24:20:9b:63:33:f3:4d:ec:af:a8:81:d7:
ed:aa:1c:de:84:61:df:5b:51:20:6a:9f:b6:96:29:e5:e6:00:
aa:81:1a:c6:05:f9:21:d7:95:1c:8a:16:04:f3:73:35:27:21:
1b:3d:be:f8:60:a1:71:1f:fa:02:e4:fb:fe:28:c6:40:bf:87:
9d:7a:e9:0b:9b:55:2f:00:e9:b2:24:5d:88:bd:9b:da:d1:4b:
3b:50:45:b8:4f:80:84:74:4f:21:12:13:f8:1a:2b:72:a9:58:
4a:59:57:0d:9f:3e:d3:da:95:3a:74:9d:27:09:7a:65:e5:ac:
b6:99:28:8e:b5:f1:0b:9b:a0:f4:9c:4c:b6:fc:a3:52:c9:16:
4a:dc:2e:2f:6d:df:93:c8:85:79:c5:a7:bd:a7:de:d3:0d:9f:
33:5b:90:b9:05:c2:a0:fa:42:f0:19:a5:49:58:5d:db:db:92:
15:09:88:82:9d:1f:9a:5a:89:56:84:59:a4:9d:d7:10:2e:0b:
16:54:52:36:b5:25:3f:2e:c4:b4:79:09:54:4e:9e:9c:df:85:
5f:04:07:6b:3b:34:43:89:53:8f:d2:6a:47:da:ea:23:5d:1b:
3f:0d:25:78:2f:29:de:95:27:60:1e:1d:39:a2:c1:7e:ec:d0:
67:ff:76:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:51:46 2025 by rpki-client