Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: Anx7MD4o9THd13Y+hveETKDXkL5jGjIyT2WFJN/cyeI=
Subject key identifier: 50:1C:78:BC:E2:EB:E9:CE:35:01:30:BF:79:88:FF:E3:2E:3B:24:AE
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 01968992F0FAF91939269DA1582637673196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 13FA
Signing time: Thu 01 May 2025 02:00:30 +0000
Manifest this update: Thu 01 May 2025 02:00:30 +0000
Manifest next update: Fri 02 May 2025 02:00:30 +0000
Files and hashes: 1: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: axYf1IJReN07BDUGkK2+ojgc3ISF0H1E6Z7lug5avP0=)
2: EoONLCC0uBU4UnkK6hGEDKnLwOs.roa (hash: BvTXgf3VZmemwuiX/6PvTlFRYmGF/FW7bb7KGQyaCiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:92:f0:fa:f9:19:39:26:9d:a1:58:26:37:67:31:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: May 1 02:00:30 2025 GMT
Not After : May 2 02:00:30 2025 GMT
Subject: CN=501c78bce2ebe9ce350130bf7988ffe32e3b24ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:3a:f5:dd:b1:0a:27:48:9a:2c:48:84:df:
d3:8d:e5:bc:95:98:e2:36:6e:07:d5:19:56:db:04:
01:e6:c5:85:11:34:c0:ab:6f:14:12:30:d7:5c:47:
9f:9e:79:17:87:95:bf:88:fc:d3:5c:7f:7e:29:13:
03:78:19:e6:e8:4a:c8:13:7d:9c:9b:c1:d3:b9:1f:
b7:df:bb:c1:17:eb:d7:4a:5f:36:5e:68:e3:ad:e7:
c8:57:a1:c1:17:3b:f4:ec:ce:61:ec:0c:1c:97:61:
66:52:60:80:f7:ce:d5:39:7f:25:10:ca:3f:5b:b4:
21:6f:36:b5:60:d2:f2:6e:67:c4:74:c9:95:03:d4:
cd:3c:40:1a:cd:33:2c:7b:3e:f4:4c:cc:54:4e:d0:
93:8c:3e:d0:a6:9e:96:e8:3d:f8:80:18:e8:a9:97:
04:e2:3e:e4:3a:0d:63:e4:74:32:0c:6a:8f:e9:23:
14:1b:98:73:fa:3f:58:a2:ce:2d:0b:1f:9f:f5:ed:
b8:d6:d9:d8:7f:ca:5f:52:77:f4:fb:b8:86:3e:0b:
4b:54:ef:b7:3d:37:9b:44:1e:c4:a5:8f:aa:0e:e6:
c0:4c:f2:d6:f9:1d:d3:b2:3b:1b:31:d6:e3:a1:f5:
bc:20:2e:17:8b:44:e5:8d:20:1a:50:e1:fb:e2:8b:
28:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1C:78:BC:E2:EB:E9:CE:35:01:30:BF:79:88:FF:E3:2E:3B:24:AE
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:81:07:41:36:c8:58:60:7e:76:b4:29:96:45:6d:8c:6b:37:
12:a4:06:ae:7e:8d:f1:83:37:eb:cc:6b:07:06:0c:5c:58:8f:
6d:4b:84:43:54:62:e7:5f:f9:08:64:a7:5b:16:3c:a4:89:21:
e2:39:b3:14:a9:db:0c:0f:29:d4:40:94:73:3a:11:05:28:07:
aa:66:05:65:45:9b:cf:be:3f:20:68:6a:5e:b8:fd:c2:5a:bf:
d0:48:4d:22:68:71:d8:c2:3a:6d:3e:60:94:7e:7e:af:8a:e4:
5f:e2:0f:1d:22:bf:49:9a:e6:fe:af:d9:86:e7:76:d9:e8:ce:
7d:bf:1b:9e:e7:fb:79:aa:92:96:c2:40:cc:0c:2b:d2:81:d3:
c2:93:3a:12:31:45:ae:dc:e7:1c:c6:e1:26:75:b1:b2:06:7b:
d8:34:dd:2b:59:4c:f6:3e:38:55:cd:27:23:0d:d8:83:b1:32:
b9:eb:af:ab:36:ab:b6:6e:71:68:0c:d7:a4:d2:a6:1d:d7:42:
a8:fa:96:da:dc:a7:a6:af:5a:91:a4:3c:c4:9a:23:16:dd:a1:
ad:18:2f:68:58:61:33:2f:42:0d:ed:4a:62:16:dc:33:bc:4e:
58:8f:20:1a:63:5f:fb:08:82:ee:ca:98:cf:c6:ef:b2:71:49:
84:fc:27:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:23:57 2025 by rpki-client