Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
File: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft (raw, json)
Hash identifier: geOR3xjjSbWYSJsGnKmEMVBMOhWN3IJOaoHPUNbEzWU=
Subject key identifier: AF:91:72:30:ED:26:4C:FA:10:EE:38:B9:1D:CF:B5:6B:CA:5C:FD:AE
Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
Certificate issuer: /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Certificate serial: 019685EDBF002C8FED4E920FACCEDFEF3AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
Manifest number: 0E55
Signing time: Wed 30 Apr 2025 09:01:12 +0000
Manifest this update: Wed 30 Apr 2025 09:01:12 +0000
Manifest next update: Thu 01 May 2025 09:01:12 +0000
Files and hashes: 1: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl (hash: Ae+Xc2Nc8LlKHlNLJFJ0BilHPQ8IU5+1TmiCEROUp5w=)
2: s199ikwEffBbz4N51o9Z93m71rk.roa (hash: Tb9twTEkz+iPQZdYGEiHKKRquApELQ9qVFqV3IE19gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:bf:00:2c:8f:ed:4e:92:0f:ac:ce:df:ef:3a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Validity
Not Before: Apr 30 09:01:12 2025 GMT
Not After : May 1 09:01:12 2025 GMT
Subject: CN=af917230ed264cfa10ee38b91dcfb56bca5cfdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:df:cf:fd:cd:fc:7f:f8:fe:d5:47:ec:4e:7d:
7a:b5:69:1f:2b:71:49:ba:b3:02:19:eb:83:1a:bb:
11:e9:d1:cb:35:c2:09:be:21:96:e8:cb:08:e5:1d:
5d:8f:62:15:af:0c:97:f8:60:23:e6:0c:a3:c4:0b:
7c:41:d0:cb:d3:d3:6e:c7:a7:4a:a0:ba:5c:be:bd:
98:77:0c:e3:2a:2f:ed:9b:2b:9b:93:b2:5f:cb:ae:
11:f2:c8:30:0d:15:4d:47:5f:78:80:da:fe:a3:b1:
78:c6:b1:ba:c9:f6:93:ad:73:d3:f6:94:19:9a:38:
d5:12:82:a3:c9:cd:d2:47:a9:54:59:21:8a:9e:75:
c7:26:b4:40:dc:8d:cf:66:7d:0f:d7:4e:4d:76:de:
6b:ac:21:39:1f:52:fb:9d:6a:88:f2:5a:5c:3d:d2:
d0:f7:90:e2:6e:4a:65:16:8a:de:f1:87:a4:1f:d0:
30:39:49:5d:ed:b3:63:bc:bf:4a:17:a0:04:28:29:
55:d7:9d:ce:31:e9:32:e1:ce:1e:f1:f2:64:63:51:
01:fe:bc:f2:4d:93:8f:46:ff:7e:45:e6:e7:fb:9e:
89:e0:c6:10:db:90:1b:75:cc:6e:4d:76:19:64:28:
94:19:b5:49:43:41:65:a1:f9:ac:aa:80:ef:ea:12:
63:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:91:72:30:ED:26:4C:FA:10:EE:38:B9:1D:CF:B5:6B:CA:5C:FD:AE
X509v3 Authority Key Identifier:
keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d9:0f:52:59:45:82:7e:31:3e:6e:ea:6b:ee:1f:6e:09:cb:
59:d1:ab:4b:0d:08:b1:fd:59:90:f7:41:54:74:af:25:3c:5f:
2c:f4:e9:40:f9:1c:65:dd:59:e9:76:9c:dc:be:ca:ea:bf:53:
2b:47:c0:81:79:eb:a7:3e:0c:8f:03:3a:fa:56:7e:c7:91:a3:
2e:74:b4:a1:9c:ea:03:19:08:05:ff:01:34:b2:3f:18:69:42:
d7:ad:c5:d6:c0:bb:c9:4a:67:49:3a:5a:88:04:6d:e9:6c:b9:
23:4f:63:cb:51:5f:df:b9:1b:bf:f6:e6:e0:df:e4:47:0a:be:
ba:49:3c:a1:d0:88:bf:a2:e5:43:8d:89:9d:50:14:d4:d5:72:
a0:1e:b6:c6:82:6d:68:9b:8b:3a:65:69:21:ce:d8:b9:53:ea:
36:4f:09:87:87:84:cf:f2:c7:7e:ef:9c:b5:3f:9b:fa:74:d1:
89:25:1a:32:bb:f1:b5:1e:9c:b2:88:49:e5:f1:d9:41:89:fe:
ca:73:3a:46:9a:ae:00:15:38:81:05:bd:17:ae:ed:3b:95:f9:
d1:44:34:7a:c9:54:35:fb:71:fc:a0:30:77:f8:70:bb:4d:c8:
b4:04:6b:07:7e:26:8f:e4:64:d0:f2:e7:76:44:93:4d:d8:f5:
be:2a:ee:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:49:21 2025 by rpki-client