Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
File: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft (raw, json)
Hash identifier: 4Qe0Accb0R0P3Io+ZDjzWdH3/9SBY3L7x8arfsVeop0=
Subject key identifier: 96:E1:76:68:10:4E:97:A9:55:D1:C8:90:AA:C4:FE:55:50:2C:A3:4A
Authority key identifier: DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
Certificate issuer: /CN=dc327af32a98492757b200ea040db24ec3136592
Certificate serial: 01967266519ED4A13C345EB79F37741ADE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
Manifest number: 02E9
Signing time: Sat 26 Apr 2025 14:00:30 +0000
Manifest this update: Sat 26 Apr 2025 14:00:30 +0000
Manifest next update: Sun 27 Apr 2025 14:00:30 +0000
Files and hashes: 1: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl (hash: AF/prPwSf33o7SqlCjCDIFW+8pnmVE/myaDzLNc8pcc=)
2: 8W-Z7iZTKA-3rkNjiAd5VURXMsw.roa (hash: 2BY/rA9giuFltjXSROUw0wjIihHos+N8ZqL5OdXbUVw=)
3: SiGDnp8oSt95ArckPVGAAWtJUNs.roa (hash: j9ZTEJfSb12eUtJGUY9GVfUETUmyTkhHBnRZ+wXplM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:51:9e:d4:a1:3c:34:5e:b7:9f:37:74:1a:de:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc327af32a98492757b200ea040db24ec3136592
Validity
Not Before: Apr 26 14:00:30 2025 GMT
Not After : Apr 27 14:00:30 2025 GMT
Subject: CN=96e17668104e97a955d1c890aac4fe55502ca34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:4b:b4:e2:e9:53:ed:4a:a3:b9:e5:70:dd:
42:46:c3:94:29:2d:ab:71:61:f9:ea:dc:34:aa:9a:
f4:0b:82:67:42:9d:d2:65:3a:be:c3:5a:17:db:83:
a5:dd:19:6b:a8:ed:71:3e:a2:f5:a9:36:bf:96:03:
fb:5f:fc:10:c0:1d:08:04:d6:51:c4:2f:2c:7d:da:
9a:3e:4f:2f:25:d9:c5:a8:49:9f:1b:86:cf:26:9d:
aa:d3:df:a7:4c:0d:1d:0f:af:e3:b0:1f:68:fd:38:
82:c2:ac:b7:f8:b9:cd:9b:28:b2:44:7c:13:42:dd:
13:2b:15:99:50:fa:88:b0:18:31:96:2a:bb:7b:6c:
6e:7b:71:e3:57:fa:df:55:65:d5:7c:cc:0b:3c:14:
44:36:2d:aa:d2:d1:2b:7c:09:c0:d3:5d:8e:92:31:
4d:2b:03:6c:ff:2a:37:7f:e5:06:26:2c:09:fc:d4:
9a:0b:b7:6f:47:50:86:33:4e:27:a7:d8:c4:c0:a9:
1d:95:4e:b3:79:0e:c7:ca:06:d3:30:17:a8:43:b5:
8a:e2:b5:6d:71:b6:7c:fb:25:6d:ac:ea:5f:af:cc:
72:13:15:f9:b4:46:ae:de:69:f1:b1:97:e8:fb:cd:
f4:e8:18:ae:06:8a:f5:03:14:dc:cd:9b:c7:a6:49:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E1:76:68:10:4E:97:A9:55:D1:C8:90:AA:C4:FE:55:50:2C:A3:4A
X509v3 Authority Key Identifier:
keyid:DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:77:d2:16:8b:9a:ac:a3:51:9c:af:c1:a8:8d:e5:7d:b6:18:
65:53:04:90:0d:77:24:39:c5:79:29:d5:b4:97:30:07:59:ab:
e8:24:c7:f2:dc:29:83:30:dc:89:7b:75:f0:2b:60:97:e9:19:
b7:95:61:65:e2:86:d5:5f:88:65:c8:a0:4f:22:07:90:16:81:
bf:6f:40:a3:9c:f8:b5:22:07:e8:b5:f3:99:19:61:08:c2:fa:
7c:4c:2e:10:ca:f1:1a:18:7a:c0:6b:67:43:89:3b:ad:fc:97:
98:16:c9:6b:27:4c:44:0c:ee:ce:3f:46:31:8f:15:09:48:b5:
2f:93:e3:6c:b2:95:93:3c:57:83:63:e8:7f:fe:60:cb:ce:4b:
f8:0c:ec:0b:b8:b4:88:0b:ca:32:ed:7c:e7:26:08:74:08:23:
18:25:e6:48:47:09:21:7f:32:06:ed:51:78:fd:e4:52:b8:10:
e4:60:ef:2c:23:c0:e6:af:99:f0:28:77:72:f8:ff:75:79:5d:
1d:5d:1a:01:4a:8a:4b:ca:72:03:c2:92:92:1e:d2:13:51:05:
15:aa:16:a5:ab:dd:d4:f3:d7:4a:e8:93:bc:95:89:7f:47:f1:
83:fe:4f:1e:21:1c:b8:ac:76:dc:a4:49:b9:db:49:2c:75:77:
16:d2:01:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:26:32 2025 by rpki-client