Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
File: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft (raw, json)
Hash identifier: TuibFyeZRBdpMN2GDqmoYD4QIelWSNneO/eu6HAEE0Q=
Subject key identifier: 0E:47:79:23:3C:85:7E:6D:37:F6:FA:3B:D6:D6:7F:AB:33:9F:E2:C5
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Certificate issuer: /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial: 019677FAF170C197443FA599E30D3D8F8DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
Manifest number: 04AA
Signing time: Sun 27 Apr 2025 16:00:56 +0000
Manifest this update: Sun 27 Apr 2025 16:00:56 +0000
Manifest next update: Mon 28 Apr 2025 16:00:56 +0000
Files and hashes: 1: 5Glc2B08f5NNNCUv9fqw3ZiV604.roa (hash: qKV0O/uQL4URhMfYX9S0ZOufXlqcIe3xRJXIrY3RJwE=)
2: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl (hash: AKL75Wglwh167KXHPdKwd8MvuJCo4WPVvzCt3F2aV8Y=)
3: wzyOntPyHe2_vob8ftvNa_NHz8Q.roa (hash: jsopFRalC2C1iJbieVLkelaTdE/c46JWYuJBBa2M4iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:f1:70:c1:97:44:3f:a5:99:e3:0d:3d:8f:8d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Validity
Not Before: Apr 27 16:00:56 2025 GMT
Not After : Apr 28 16:00:56 2025 GMT
Subject: CN=0e4779233c857e6d37f6fa3bd6d67fab339fe2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:58:31:72:cb:3e:05:71:da:80:3d:50:c9:
64:e1:ce:5b:e0:0a:b9:fd:02:ee:51:bd:cc:62:01:
c4:6c:46:3b:89:ec:09:90:8f:81:41:32:f5:11:9b:
fc:4a:28:c2:dc:4a:66:95:40:5e:e8:20:6a:62:43:
c4:98:c6:6d:4e:ca:f4:1c:d2:a0:74:65:88:89:b1:
ed:f2:6a:13:d8:e3:1a:fa:bb:63:22:37:ba:25:01:
c8:05:5a:cd:2c:63:6d:2d:9f:4d:be:bc:9c:2f:03:
9a:47:9b:c8:5e:ef:2e:13:24:48:81:52:96:f7:94:
ee:6b:e7:eb:1a:ff:a8:76:24:b7:85:11:85:76:87:
6c:e8:7c:72:27:88:59:57:c7:88:a2:f1:16:26:f5:
92:fb:07:c1:e7:81:63:8a:18:fe:c8:7d:f8:6c:f9:
44:31:4b:d0:88:a1:91:e6:0c:fd:d5:c3:df:62:99:
a8:4b:7c:81:d2:92:3d:f6:c3:2e:58:5a:10:46:68:
7f:5d:4d:b4:bd:80:30:1e:1c:91:7c:e3:d5:de:c8:
a6:19:c9:b8:ba:8f:60:52:39:d6:df:c8:15:57:ae:
3c:8b:f4:17:81:43:d0:ee:05:03:5c:6d:0b:79:60:
cf:08:9c:8c:06:86:5f:38:b0:ee:4c:06:d6:25:57:
0f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:47:79:23:3C:85:7E:6D:37:F6:FA:3B:D6:D6:7F:AB:33:9F:E2:C5
X509v3 Authority Key Identifier:
keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ad:83:c8:51:62:a9:bb:d9:4e:3f:08:cf:ee:09:bf:f5:c0:
27:e7:ac:15:5a:61:08:96:b1:40:a6:18:ea:8a:49:39:d8:7b:
b1:3e:4c:6e:69:21:dc:ee:bf:97:6a:0a:63:fe:ac:5b:2c:af:
19:c1:95:66:a7:f8:e4:a6:84:89:e1:47:b0:f9:af:c2:db:7b:
d9:bd:05:97:6c:14:85:70:e8:cf:e5:f2:f3:05:7e:6d:89:62:
e9:6a:1c:0b:66:b1:b1:43:2b:54:4f:d3:a1:09:e7:42:7d:3b:
35:b8:06:6b:c5:14:be:05:6c:5b:6b:7a:29:9a:aa:9d:79:2b:
fc:01:da:71:a6:72:27:72:6a:b3:36:58:b1:9a:b8:af:e5:4d:
70:b1:32:44:e6:d0:8c:ae:eb:be:4c:3c:a7:1d:03:a9:0e:ae:
0b:e8:f4:79:51:16:4a:fe:2e:b6:92:03:f0:fe:bc:aa:61:40:
03:ba:aa:1e:09:9e:8f:52:a9:05:27:89:31:22:e0:a8:9a:3f:
cf:28:dc:e0:2d:ac:1f:85:82:b6:7a:42:93:be:f3:4e:7c:9d:
84:f6:c7:c2:5b:40:d7:31:81:9d:8a:22:05:30:db:77:a3:3e:
39:f0:f9:f6:92:e6:9a:30:b7:a6:92:09:86:59:4f:50:9f:21:
22:b2:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:55:42 2025 by rpki-client