Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
File: 3R2uzTCut0ZSu92l2tlnbOSIqkk.mft (raw, json)
Hash identifier: sKF56LgQyo4sXgV9+nvUEqwekEuU1cpYiT1mA5z50Ms=
Subject key identifier: 73:31:BA:03:6A:BB:F1:09:4D:AC:AF:DC:3D:CD:2B:60:59:C8:82:0D
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 0196851142FD237699E6751BBA1E700C6D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
Manifest number: 083D
Signing time: Wed 30 Apr 2025 05:00:23 +0000
Manifest this update: Wed 30 Apr 2025 05:00:23 +0000
Manifest next update: Thu 01 May 2025 05:00:23 +0000
Files and hashes: 1: 3R2uzTCut0ZSu92l2tlnbOSIqkk.crl (hash: 3N0XXQ5o+uxEiy/3UYmi0HLozJk69lHtjpdwKt6OBnE=)
2: 3jwAJkscmhb8NSw4un_w0ZUqE_E.roa (hash: /Q2oG/fmxx/4QlsXXEqOyxHV9Ye6s1RkScscquc109A=)
3: 4mOa1eiOJdcewQ4JsIW-qskCauo.roa (hash: iU5a4TzwFm2kJsvICm/D9T1ZRQoz++Cq67dw1/HeL2g=)
4: CXGUOccTDu6x1YyIQfa-qjSpPdk.roa (hash: r4qpBtId2VEmuyzWlIPXdikWdV98Yneiil1e7VOsia4=)
5: IlOsEMD7ILB9j5FhhZ10NN6XXx0.roa (hash: gwOuiCu86d+6YjbDxDzDd3u72bl4nQy8FzU+NPDlo3k=)
6: cMeqdhzIVxayTI5Te-oZwPQzjz0.roa (hash: opO/yGSPCMGlHiRXXAkyr0DveRWYRoFkmjqGZrYYDFc=)
7: dsfkSXYJLfZWJjDQMc0Y0owm7FA.roa (hash: W0p5k/KWht0yDd7EzO060gDAd+rVO0Q+Y0m/UDAfM10=)
8: z21uLBAl7J5qNeu7_wTnfr1gN3Q.roa (hash: hGK3SDsyu3nnm6fMnZyOrn3oCumiT/HHk1hSsPcxxpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:42:fd:23:76:99:e6:75:1b:ba:1e:70:0c:6d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: Apr 30 05:00:23 2025 GMT
Not After : May 1 05:00:23 2025 GMT
Subject: CN=7331ba036abbf1094dacafdc3dcd2b6059c8820d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:84:10:71:a4:38:ce:41:e5:f4:5f:a7:55:
de:c5:6c:52:2c:af:9d:bb:55:7d:cf:cd:02:6f:01:
57:11:c8:b5:7b:22:8b:a3:1b:89:ca:aa:15:be:41:
51:29:d4:35:09:45:bb:20:36:69:cd:44:22:b9:33:
fb:29:5a:8b:c4:6b:43:07:f2:f7:53:fa:86:58:4b:
2c:a7:70:e3:87:37:8b:8f:5c:b5:ba:0d:bb:9b:ad:
e6:b2:5b:1b:f6:5b:5f:57:77:1d:e5:f0:d0:f2:74:
95:50:70:84:d7:c8:59:86:19:61:dc:94:f2:c4:3c:
18:c8:e3:d6:8b:23:7b:2b:74:45:54:f1:be:b8:75:
38:c8:9d:12:a4:ac:0f:9a:45:be:9e:d4:cc:9a:f2:
4d:fb:a1:75:bc:48:5e:44:fb:9c:c3:77:0f:02:4a:
86:06:cf:49:67:b4:b1:d4:e4:41:4d:b4:e8:aa:90:
dd:3a:4d:fe:ca:63:97:ab:73:b3:27:18:7e:8f:dd:
43:a6:dd:c2:0b:3d:30:d4:06:03:ac:16:72:69:71:
1d:52:5b:a1:5f:4d:61:f3:4f:49:ac:a5:06:36:29:
4d:ac:04:ac:c0:85:a7:a2:63:60:44:50:9a:96:d9:
27:8a:54:7d:11:7c:9e:f0:e5:9a:f9:23:47:d3:6d:
7d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:31:BA:03:6A:BB:F1:09:4D:AC:AF:DC:3D:CD:2B:60:59:C8:82:0D
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:ee:0a:06:8b:e6:e2:1b:30:57:d9:63:1b:09:ba:91:83:f2:
f4:e9:da:72:36:6d:15:60:38:4b:12:85:36:07:4c:cb:49:d0:
d7:63:24:a9:af:dd:d8:56:70:88:4d:99:3c:3a:fe:ca:f6:46:
69:37:f9:78:c3:0a:30:cd:8a:cd:67:38:ec:97:1b:06:7f:97:
9d:70:bd:14:a0:75:37:c0:ec:54:25:32:30:0b:6b:f1:5e:fc:
2d:47:31:5c:40:1e:94:68:6e:b3:04:06:0f:b4:20:23:50:76:
21:2b:e7:bc:fd:f0:4d:2e:5c:f6:ed:09:23:4d:58:a6:ee:3b:
2c:ed:48:26:53:05:49:cd:3e:00:1f:3a:6a:c4:52:9a:cf:e8:
1a:42:cb:80:19:be:2b:51:72:e6:c9:88:99:b9:c9:a3:e0:e5:
4d:f3:5f:ae:f7:ab:18:84:a2:cc:08:43:67:af:c0:ba:0c:a4:
aa:6a:83:ce:99:6e:17:03:20:7f:3b:41:25:95:c3:a4:82:67:
a0:6b:07:10:3f:c5:61:58:2d:20:24:4d:3c:1d:d3:47:f8:6a:
e7:d9:22:1e:c1:0b:7d:ef:c7:09:cc:23:91:df:42:89:4f:5d:
51:ea:fd:20:65:7a:c4:89:6a:54:22:a3:dd:b0:dd:bd:d8:8a:
a7:dd:0d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:10:18 2025 by rpki-client