Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.mft
File: Po3UOSjt-xIA77xixEH5zSkEhYU.mft (raw, json)
Hash identifier: DZ9HHkJidsGwNxTLwuNnc9IspHKdgL6eJJQEB0MpYGk=
Subject key identifier: 3C:49:EF:6C:2D:B0:05:6E:16:33:69:1A:52:DF:72:62:C0:22:37:D9
Authority key identifier: 3E:8D:D4:39:28:ED:FB:12:00:EF:BC:62:C4:41:F9:CD:29:04:85:85
Certificate issuer: /CN=3e8dd43928edfb1200efbc62c441f9cd29048585
Certificate serial: 01967CEA507040B0DED19392BE4C474120F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Po3UOSjt-xIA77xixEH5zSkEhYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 15:00:52 +0000
Manifest this update: Mon 28 Apr 2025 15:00:52 +0000
Manifest next update: Tue 29 Apr 2025 15:00:52 +0000
Files and hashes: 1: Po3UOSjt-xIA77xixEH5zSkEhYU.crl (hash: MdqYJAN+DVD5gyE/jEMC1xuWqHnk5Ir0Gw7TmvZoSxM=)
2: iLnTG4KE8dlv3U1b1zLTb14pMfs.roa (hash: umNqCdl7NmuDT1iFaPafaeRzRV1NstNTawuuz+ySb2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Po3UOSjt-xIA77xixEH5zSkEhYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:ea:50:70:40:b0:de:d1:93:92:be:4c:47:41:20:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8dd43928edfb1200efbc62c441f9cd29048585
Validity
Not Before: Apr 28 15:00:52 2025 GMT
Not After : Apr 29 15:00:52 2025 GMT
Subject: CN=3c49ef6c2db0056e1633691a52df7262c02237d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:9d:7b:65:1f:2a:88:79:79:8c:5d:b2:19:
28:90:31:87:8e:98:46:44:72:53:c7:3e:af:b4:96:
41:05:2c:78:00:eb:7e:b2:ed:bf:75:d1:87:05:53:
b3:1a:99:c0:6a:79:fd:53:8f:b0:36:3d:2b:2d:ae:
85:4f:13:a1:41:b9:91:2a:43:04:91:2c:bd:55:9d:
b1:bb:6c:77:55:ed:41:e2:85:f4:a9:70:96:9b:85:
55:47:0e:47:90:ad:6b:b0:0b:96:67:51:af:0c:77:
3d:e6:0e:fe:c3:5f:54:cc:fd:3e:63:de:f0:a0:78:
4c:72:94:76:4c:d1:fa:2e:33:7b:b6:4e:73:36:df:
8e:cc:b8:8c:0d:d9:a3:38:e9:7d:55:03:15:52:07:
0f:56:31:c4:a0:a8:52:04:4c:2e:54:cb:50:40:78:
fe:fa:c6:ef:2b:1c:07:2b:3c:94:47:85:39:36:75:
09:01:57:78:6c:51:8d:2c:3e:3a:f5:67:84:6d:5d:
37:0c:42:8a:1f:a0:67:d0:9d:d5:99:91:af:5e:34:
af:b2:94:37:58:bf:fd:21:d0:23:54:ab:c7:bb:36:
82:22:82:47:55:0d:42:a3:b0:dc:f7:09:c0:c3:6c:
0f:0e:0d:aa:87:35:81:fd:d5:fa:df:de:d4:89:e4:
44:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:49:EF:6C:2D:B0:05:6E:16:33:69:1A:52:DF:72:62:C0:22:37:D9
X509v3 Authority Key Identifier:
keyid:3E:8D:D4:39:28:ED:FB:12:00:EF:BC:62:C4:41:F9:CD:29:04:85:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Po3UOSjt-xIA77xixEH5zSkEhYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:45:68:65:86:60:a7:10:8c:21:99:42:1d:ac:f7:0f:39:ec:
ce:26:46:31:21:ac:f8:2c:d2:6e:ef:e9:ba:c5:c5:e6:73:c4:
d8:7f:47:02:75:79:6a:35:c8:b0:a7:e9:44:e2:bb:10:c6:58:
71:33:e5:25:f6:b4:62:47:3a:3e:9c:cb:de:60:19:a4:84:6d:
d4:0c:c2:03:31:14:5a:e5:3c:57:ba:7a:af:93:3e:ff:73:34:
15:c5:c7:2a:91:09:74:db:27:3f:37:22:7e:c5:ff:e9:1e:71:
71:3d:86:98:b3:03:c2:2d:8b:b4:2d:21:ed:95:b6:1f:01:3a:
3e:c4:90:88:bb:10:1a:64:eb:4e:34:4b:11:0f:9c:58:48:6c:
4f:74:fa:93:1d:56:9a:60:09:f5:e0:bb:b5:97:51:67:03:8c:
db:76:35:97:41:57:62:35:e2:02:ca:a9:ba:d0:2a:63:29:65:
ac:f9:52:97:ba:17:6e:9b:f7:7b:3d:f5:a1:e0:a1:b9:1f:35:
14:87:89:5e:64:f3:93:ae:25:fc:ee:62:fa:fe:ce:ac:ef:04:
31:06:d5:5f:a3:0d:3b:26:f6:61:12:6c:de:20:d1:f7:f9:47:
02:11:1b:be:76:95:57:55:d8:98:10:27:65:3e:a4:41:94:4f:
b8:eb:0e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:36 2025 by rpki-client