Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
File: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft (raw, json)
Hash identifier: 5O5nWQqbkGpmmAgcM6xDIrb9YMHgPhyi62R+eLIDjY0=
Subject key identifier: D6:4D:5C:31:79:FD:A7:85:37:0E:61:B1:E6:F4:4A:A9:B1:C0:A3:92
Authority key identifier: DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
Certificate issuer: /CN=df0f32e5f098b86a8794825c81122da953466284
Certificate serial: 019680C6E04824BCE297091E8F39C3C892A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
Manifest number: 0588
Signing time: Tue 29 Apr 2025 09:00:39 +0000
Manifest this update: Tue 29 Apr 2025 09:00:39 +0000
Manifest next update: Wed 30 Apr 2025 09:00:39 +0000
Files and hashes: 1: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl (hash: HNi695ZaXAxVySQuQC+lBM63N2vTaaPurRdQGuu0aQ0=)
2: gBjKKqKZuEY4WvRauB7caOw1S-0.roa (hash: KcvP3QvpprIZ7nrbS5q17f/tcN31DqhQB7sqPQGvSG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c6:e0:48:24:bc:e2:97:09:1e:8f:39:c3:c8:92:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0f32e5f098b86a8794825c81122da953466284
Validity
Not Before: Apr 29 09:00:39 2025 GMT
Not After : Apr 30 09:00:39 2025 GMT
Subject: CN=d64d5c3179fda785370e61b1e6f44aa9b1c0a392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0f:0d:e9:e7:7a:ac:8d:a6:00:8d:d8:09:96:
21:ce:47:7e:85:7d:10:c8:a2:d3:7b:62:d0:1e:45:
75:71:83:b4:20:9d:25:5a:ed:1b:7f:14:64:7d:3b:
fa:34:e5:ad:d6:b0:15:6c:d9:5d:74:fc:98:84:c3:
55:ce:fe:43:e0:c6:f0:27:69:20:68:46:95:c6:6d:
ca:27:92:09:fa:97:c1:d7:5b:5c:a2:75:0e:ba:fa:
c8:8a:1e:ea:6b:dc:b4:aa:3a:8c:26:6a:10:e0:18:
aa:d2:f2:c7:b1:74:38:e8:a6:2e:ff:ab:b5:4e:ac:
74:29:83:66:df:b3:34:d4:93:e2:8a:5c:ca:26:70:
3c:ac:cf:67:24:82:bf:e3:9d:bf:8e:1b:c1:86:7f:
be:8a:96:ca:67:ac:de:8e:3b:f0:10:49:69:da:b4:
ba:8c:73:8c:54:34:d0:3f:9e:02:0f:de:3c:93:56:
0e:56:55:ce:48:7c:24:28:a2:92:8e:97:ee:1b:37:
96:83:0b:8a:6e:c4:7f:91:e4:da:be:18:f3:ae:46:
6a:c7:4c:4a:46:59:74:1d:37:6c:e7:ac:78:3d:95:
02:71:5c:47:cc:fd:2b:32:24:eb:c6:ff:e3:b4:52:
e4:3d:3e:38:11:9d:c0:0f:8a:95:22:de:ab:37:1e:
92:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4D:5C:31:79:FD:A7:85:37:0E:61:B1:E6:F4:4A:A9:B1:C0:A3:92
X509v3 Authority Key Identifier:
keyid:DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:03:de:e3:88:3e:de:d8:8c:b7:52:dc:ee:da:59:66:83:f2:
9f:49:15:b5:4a:90:f7:d3:f4:8c:51:05:6a:79:b8:04:bd:56:
03:71:51:98:23:39:3c:69:61:f0:84:08:57:e0:29:a9:6d:17:
0d:de:f3:b1:71:e9:87:ee:c0:88:60:8f:f1:f3:ce:16:6d:e5:
64:0d:fa:c1:1c:42:5e:39:9d:01:be:89:0d:ae:a0:75:dd:a1:
e1:54:40:fe:06:0f:1a:ca:19:a2:15:a5:27:db:d2:08:9e:6b:
b6:03:f5:a3:b0:c7:ee:95:1f:6a:19:02:b7:54:50:a6:30:3b:
25:c6:00:c8:91:f2:1e:39:e1:b9:25:94:bf:27:c2:70:4c:26:
42:78:4c:01:a8:a6:f6:0e:2e:29:21:bb:cb:69:56:12:b3:c8:
27:55:8a:65:06:5b:d8:dc:13:b5:f4:3f:5e:fb:c9:cc:59:bd:
af:5d:1c:18:4b:24:62:2a:73:e7:ab:ca:b6:e8:09:43:bf:27:
86:b1:dc:88:5c:d5:d8:c5:3c:b4:48:a9:65:9f:44:72:d3:c6:
55:17:05:67:53:a0:d4:5e:c2:26:86:bf:34:21:a8:b6:e4:a9:
a9:39:4e:6c:42:4f:9c:73:53:2e:65:12:f6:52:2c:43:d8:11:
e8:66:14:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:05:07 2025 by rpki-client