Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: Vtu73aVi2ke7xbP/nWeU84JGg/I+TtG2IjkfJEzs084=
Subject key identifier: C2:9E:11:A6:FA:F7:2F:2A:76:E1:E2:F5:03:B1:41:92:24:43:DE:45
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 01967567B54C443BE2AAF793C4F2A4464BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 04A1
Signing time: Sun 27 Apr 2025 04:00:52 +0000
Manifest this update: Sun 27 Apr 2025 04:00:52 +0000
Manifest next update: Mon 28 Apr 2025 04:00:52 +0000
Files and hashes: 1: 1eJwg5skWWcGDXFLNTcOwNfaXOs.roa (hash: 7FGDI31rrxDDlErzYzWSkDOB2c3i2HKAdvNrAxAMr8I=)
2: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: qCJaWDjXxxxdJThEYMGX/6ExCt6gWLyGsQl2t/MB7N0=)
3: Pu9BTwuj73Y1OYZEEjY0ZHH4Hw0.roa (hash: wFwRyxZLAd3FNxCgO3OSOt8i3+YrAeILPNwkW0awCVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:b5:4c:44:3b:e2:aa:f7:93:c4:f2:a4:46:4b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Apr 27 04:00:52 2025 GMT
Not After : Apr 28 04:00:52 2025 GMT
Subject: CN=c29e11a6faf72f2a76e1e2f503b141922443de45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fb:b9:bf:7a:2d:59:51:e4:b7:48:94:15:9d:
f8:3c:ef:59:88:74:1c:df:2f:cf:59:e1:9d:51:25:
84:4d:08:a1:37:e1:f5:6a:51:6c:4c:97:7e:24:a8:
db:08:c5:2b:c0:c3:63:2e:6c:35:fb:04:98:e7:bf:
4e:ed:d8:e7:5e:b3:36:4b:ec:6c:60:34:a0:12:9e:
22:6b:59:6a:5d:02:b8:1f:3f:cb:be:eb:9f:0d:6b:
9a:bd:a9:a6:fb:c4:54:6d:ff:24:52:f3:dc:50:e4:
98:2c:f4:ee:cc:3c:a6:c2:38:10:28:10:76:97:d4:
fd:80:97:e2:b1:a1:de:47:87:c1:22:68:bc:51:88:
ea:02:ca:84:6d:d7:7c:3a:54:6b:ad:de:cd:dc:92:
7d:4a:a5:45:f8:f2:b5:81:82:8c:9e:ad:16:7f:c0:
55:93:40:72:a5:d5:9b:fe:0d:8a:1d:96:54:95:64:
0a:02:ba:a1:ce:b2:5f:a2:ff:63:3f:92:06:3a:c2:
65:d2:67:ee:f5:13:20:97:00:2d:e5:e7:0a:5f:cf:
13:1c:a6:2d:24:91:5a:bd:51:df:c1:ec:2b:7a:8b:
56:49:50:09:1a:08:9b:24:06:54:6e:1b:78:35:a4:
d1:a7:32:9c:27:84:3d:ba:94:13:d5:df:35:f8:7f:
af:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9E:11:A6:FA:F7:2F:2A:76:E1:E2:F5:03:B1:41:92:24:43:DE:45
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:16:12:33:8f:9b:cf:5d:51:91:9a:95:3c:b8:94:29:14:d7:
fb:4e:02:e4:68:3f:3b:a0:a2:7d:42:db:91:83:3a:2a:f8:f1:
62:7d:59:b3:29:b7:f5:5c:55:67:89:4b:92:99:39:a6:95:f9:
0f:c1:d3:fa:a3:95:a1:23:c7:41:b9:05:6f:bd:05:06:70:92:
68:e6:89:be:0e:54:2e:21:c6:78:43:85:dc:86:7d:46:53:2c:
7d:6f:9c:77:31:13:e6:3e:52:7a:fc:e1:22:9d:80:68:22:05:
c8:4f:cc:70:59:7f:31:b4:5c:de:9f:b7:b7:cf:e4:8c:e9:5b:
8d:1c:2d:1a:85:60:63:a0:30:05:41:42:29:dd:77:cb:61:3e:
71:f2:77:63:9a:8b:10:3e:9f:1e:9c:49:a1:71:40:b8:17:69:
46:79:8b:53:75:14:0a:4a:7d:4d:8a:b7:51:44:9c:d5:86:d0:
c6:5f:c6:b8:97:cf:7a:d5:08:77:1b:0a:57:03:34:ae:f4:c2:
56:20:1c:db:24:33:4c:f2:cf:18:80:65:a7:50:0e:07:be:f0:
0a:39:a6:02:a9:5f:fd:58:67:b4:a7:43:e9:36:2b:0b:51:a5:
b5:c0:ff:a8:70:8d:44:be:c5:42:aa:3b:a1:24:00:5d:bc:fc:
70:44:63:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:03:11 2025 by rpki-client