Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
File: 3F-syhTeCBdO9clskfHngl9C0Hs.mft (raw, json)
Hash identifier: p3E1ECkRyNOiIyT4oU4QLWOVIvyNk3gORS1l1LecjMo=
Subject key identifier: 21:FF:34:36:36:FE:EB:67:1B:74:30:43:0D:2B:F3:30:8D:38:B0:D5
Authority key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
Certificate issuer: /CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Certificate serial: 0196767A2474AA223203352C90CAE92EEB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
Manifest number: 1201
Signing time: Sun 27 Apr 2025 09:00:38 +0000
Manifest this update: Sun 27 Apr 2025 09:00:38 +0000
Manifest next update: Mon 28 Apr 2025 09:00:38 +0000
Files and hashes: 1: 3F-syhTeCBdO9clskfHngl9C0Hs.crl (hash: zcubIdwcVGUO6diOdFDMszl0NuQdyvnHKEhNn1iILDw=)
2: nyyFnipIH8x-WXxVr5E31pzM3bw.roa (hash: F30BRqsOUfGjHcN42efG2ZXnRs6ncB05ESHRlvFrG98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:24:74:aa:22:32:03:35:2c:90:ca:e9:2e:eb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Validity
Not Before: Apr 27 09:00:38 2025 GMT
Not After : Apr 28 09:00:38 2025 GMT
Subject: CN=21ff343636feeb671b7430430d2bf3308d38b0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:2e:d6:a0:48:0e:66:29:bd:15:69:0a:53:
67:23:da:f6:56:f6:0f:c5:85:de:1f:08:82:9d:13:
fb:e7:26:0a:d5:16:c1:8c:8c:40:80:36:76:42:fc:
0f:ee:24:7c:b6:bc:c5:36:b0:bc:05:e4:66:b7:92:
72:ae:d6:f2:70:e3:ab:f0:b1:ca:9d:76:76:1b:00:
bd:df:70:8d:12:91:ef:73:fd:93:3e:f1:48:c6:f1:
0c:eb:9e:eb:86:14:82:2f:9c:58:61:be:01:0f:15:
76:63:71:ba:43:fe:d9:6e:3b:cf:01:ee:01:1b:46:
78:6d:c8:21:21:20:62:0f:a1:27:af:46:3e:95:2b:
7c:5f:22:41:f4:f4:1f:86:9e:5e:65:1c:1e:d2:d5:
be:33:4d:9a:62:2e:af:7c:8f:c1:a6:b8:8f:64:ff:
d8:c4:fe:44:cd:ad:58:3c:df:92:8e:7c:9e:d4:37:
dd:09:fe:8f:48:d0:f6:4f:c5:80:3f:dc:3f:0a:a1:
cb:14:82:83:d1:b7:bd:cf:ef:cb:13:5a:2e:aa:03:
78:6f:e2:54:11:45:b9:a2:e0:fd:bd:c1:33:d3:de:
3e:44:f3:ec:47:2b:ef:fe:92:ae:c4:4b:52:3b:5a:
8b:62:2b:52:39:a9:67:66:6d:d4:1e:68:0d:54:9c:
eb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FF:34:36:36:FE:EB:67:1B:74:30:43:0D:2B:F3:30:8D:38:B0:D5
X509v3 Authority Key Identifier:
keyid:DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:be:23:3b:74:58:a1:e3:72:19:2e:a1:26:b0:9b:7b:4b:f1:
b4:ef:5f:22:93:16:ce:a8:05:42:f8:61:bc:6d:0b:be:1e:09:
27:63:21:01:5c:04:b5:5c:bd:55:60:91:76:c0:af:c3:6f:5f:
a7:f3:ee:10:78:7e:d3:ea:8b:78:18:ee:72:db:7d:01:e5:e0:
e4:3b:a1:fb:6e:e1:d6:4e:6f:bc:68:24:56:91:ab:9a:86:f7:
d8:dc:c7:fa:04:85:bf:f2:25:03:62:53:d4:ed:96:e9:f6:b0:
32:ed:ef:cb:43:4f:21:c4:50:63:4b:d5:f3:81:35:a0:77:84:
64:f0:e4:e3:8a:73:fa:f9:00:8a:39:31:09:46:d6:ce:f8:7d:
05:a7:c4:4b:59:06:88:e2:a6:04:a4:55:8e:92:91:b4:fe:a2:
70:fc:fe:52:38:e6:bd:27:90:42:09:10:db:d9:46:b6:1f:a3:
f9:be:03:08:05:8b:77:0a:54:32:6c:b3:d6:f3:99:c6:ce:8f:
41:2f:fe:a0:cb:ac:fe:58:c1:df:aa:4a:aa:40:27:3b:80:ad:
3c:bd:e6:f1:0a:57:01:8a:eb:11:c9:2f:24:05:e2:04:d2:df:
3a:98:cc:23:76:e0:75:7e:1d:be:04:c9:68:ee:15:cf:51:86:
e2:da:15:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:13:11 2025 by rpki-client