Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
File: 3NJG4YMFZ6sRUjHbd18oedma8KA.mft (raw, json)
Hash identifier: 9Gtn+Co+ljubbdLgzJpUFND1YuD1KOptqWHyNQJmbuw=
Subject key identifier: 96:EF:F5:DE:66:82:EF:8D:01:0D:D2:D9:C5:39:92:35:F0:25:0F:11
Authority key identifier: DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
Certificate issuer: /CN=dcd246e1830567ab115231db775f2879d99af0a0
Certificate serial: 019676E861F94042327ABAA88AB78CB170ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
Manifest number: 03A8
Signing time: Sun 27 Apr 2025 11:01:02 +0000
Manifest this update: Sun 27 Apr 2025 11:01:02 +0000
Manifest next update: Mon 28 Apr 2025 11:01:02 +0000
Files and hashes: 1: 3NJG4YMFZ6sRUjHbd18oedma8KA.crl (hash: FzdhkYeKLaulcfiaI9JcxwOhWWhkwU9+IhiqnvQ754Y=)
2: pMwZ_dWs8ojtwFFRIemRw2PGl-4.roa (hash: N5kw38iMWCD98CNIZvqnGspiT0ia5Z9rWUHOZazCoDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:61:f9:40:42:32:7a:ba:a8:8a:b7:8c:b1:70:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcd246e1830567ab115231db775f2879d99af0a0
Validity
Not Before: Apr 27 11:01:02 2025 GMT
Not After : Apr 28 11:01:02 2025 GMT
Subject: CN=96eff5de6682ef8d010dd2d9c5399235f0250f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d6:9a:08:a5:e2:df:81:cd:0a:1c:83:e1:31:
55:91:ac:ea:dc:fc:2d:91:0c:31:06:31:52:27:0e:
b1:49:36:5a:b5:36:b9:e6:19:23:a2:3c:27:8f:64:
7d:2e:0e:39:8c:4e:19:6d:24:8f:ae:7e:db:a4:82:
86:64:ec:3a:16:62:12:95:7e:7d:94:33:83:58:66:
2d:a7:39:68:4f:12:06:2c:64:b3:4a:52:64:db:a2:
43:73:4b:e9:d8:53:4c:50:e5:0d:3b:6d:f4:ff:ba:
e7:83:aa:d6:df:c9:3c:34:b0:ab:ae:67:4b:ec:bd:
f4:13:34:b0:96:66:7e:73:b4:b9:6a:8e:0d:f3:ab:
5f:d3:f9:ff:eb:2d:2b:a1:d2:bc:68:b0:f5:64:27:
45:a1:e6:e6:80:67:09:10:a8:2e:68:39:dc:db:02:
f2:be:a2:fd:86:93:0a:f4:33:3e:f6:a9:09:cd:24:
03:9d:16:34:12:07:62:b5:f1:84:1b:71:1a:77:42:
22:8f:0c:3d:24:e1:54:83:83:0b:70:a7:79:1f:8a:
0c:c9:b9:37:f2:e9:8c:1a:d5:b3:87:56:d1:e7:46:
2e:6f:2b:2f:c7:04:71:6b:69:34:c9:4d:3d:6a:0b:
80:96:96:19:1c:51:5b:3f:65:20:96:27:5c:fd:4a:
20:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EF:F5:DE:66:82:EF:8D:01:0D:D2:D9:C5:39:92:35:F0:25:0F:11
X509v3 Authority Key Identifier:
keyid:DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:7e:46:a7:85:56:c8:e7:36:e4:e7:72:f8:ce:7e:e0:d2:3c:
33:4f:74:ab:66:17:03:d3:9b:bf:a3:c9:6f:6d:74:c4:76:a6:
0f:92:2b:7b:8a:5f:22:4c:54:3a:7d:f8:99:78:0d:4d:b8:8c:
f6:20:a9:c2:ce:ba:1e:a0:37:3c:d2:59:ee:5e:1a:8f:98:37:
36:95:a9:d2:ef:5a:51:21:b4:6d:de:33:b0:01:d0:1c:68:bc:
08:68:b2:e6:0d:94:0c:f4:00:6b:a2:5b:9d:54:12:c2:31:b9:
10:f1:7a:60:34:cd:87:ec:c1:27:c0:64:ba:ef:bb:2c:30:ee:
91:bf:d3:98:bd:3f:7f:32:6d:7c:71:4b:4f:64:fa:5a:19:08:
e1:fe:18:77:fa:96:a8:9b:a1:bd:7f:2f:3b:1a:1e:33:ba:48:
11:cc:83:5f:d7:2d:5c:81:ce:68:b5:19:29:a9:fe:8f:cc:57:
da:d8:f5:84:0e:74:0b:47:1d:bf:6f:29:0d:96:55:11:f6:1b:
b7:75:79:2c:c2:1b:ef:61:d2:37:ab:22:89:a7:23:2c:f2:0b:
bc:78:4a:df:d7:80:26:fa:23:e2:8b:17:19:85:fc:d7:18:0f:
5e:a4:67:64:9f:d3:4c:6f:ed:e9:25:aa:b9:54:28:7b:56:f4:
f0:29:dd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:50:40 2025 by rpki-client