Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
File: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft (raw, json)
Hash identifier: 1mhruvTBFNQS/L1jyJR7dmFbw/R4rit0BWfY4ziaqZk=
Subject key identifier: 7F:8F:13:15:B2:FD:E1:42:9A:87:72:CF:B3:EC:8A:29:19:F0:00:77
Authority key identifier: DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
Certificate issuer: /CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Certificate serial: 01967C4555E81A4DDB31EBD60E71EFCB91F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
Manifest number: 0D93
Signing time: Mon 28 Apr 2025 12:00:40 +0000
Manifest this update: Mon 28 Apr 2025 12:00:40 +0000
Manifest next update: Tue 29 Apr 2025 12:00:40 +0000
Files and hashes: 1: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl (hash: MDy4U4TBVqG3Gv8R4oj6ntc2CJhNmWZMgKdpdS54ph0=)
2: Kw550ydpOki0PWOYy-6z5BR-VIE.roa (hash: DJKKlAPQ1FQMVESwtaTdBMt71sNwkspOh/dlMgsjkTY=)
3: fcEpjbgKYOO71SWou3_dCE-kLKk.roa (hash: zROet63WRPPKV6TiwIGdua33aTn4W6zOjjUbs9hhWRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:55:e8:1a:4d:db:31:eb:d6:0e:71:ef:cb:91:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Validity
Not Before: Apr 28 12:00:40 2025 GMT
Not After : Apr 29 12:00:40 2025 GMT
Subject: CN=7f8f1315b2fde1429a8772cfb3ec8a2919f00077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:6b:a4:56:5b:1f:7e:b0:dd:9e:49:9e:6a:
e7:90:77:10:7b:6a:b7:ec:8c:61:32:e7:f1:c6:98:
2f:14:d3:cc:5d:8a:10:c2:02:95:01:51:7c:87:d5:
53:82:a1:55:72:7c:61:79:32:0a:60:92:7e:37:00:
43:cd:c7:c1:df:72:b2:06:1c:50:d9:81:7c:01:3e:
71:44:ec:a8:84:0b:c7:38:fe:24:76:95:5c:af:bd:
2a:93:dc:52:d6:8d:81:f1:ca:50:c5:e8:e7:93:a7:
ba:ff:06:cd:0f:27:50:58:da:a9:04:d5:c8:fb:b7:
a1:e3:1a:3d:87:93:21:26:14:18:a3:54:5d:f8:1f:
d1:9e:3f:dc:3b:69:c5:5e:93:d4:a4:83:c8:9e:30:
b8:5b:e8:e0:40:42:57:b2:ad:e1:a5:38:3a:64:c4:
e6:b3:5d:18:bf:91:69:74:b2:59:86:8c:6d:b3:01:
45:d0:a7:26:e9:37:3f:b5:26:9c:37:bd:2c:de:be:
f1:39:f5:a4:0a:43:18:fc:d1:9e:af:c5:ff:0c:3e:
68:72:56:75:ca:16:2d:d6:43:5a:df:af:db:58:ee:
39:97:8f:7d:19:2e:cf:c4:e4:ba:62:95:72:af:14:
9a:9b:2b:4b:0b:f1:44:66:b0:19:64:fd:ac:43:6d:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8F:13:15:B2:FD:E1:42:9A:87:72:CF:B3:EC:8A:29:19:F0:00:77
X509v3 Authority Key Identifier:
keyid:DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0d:16:b6:76:3d:e0:69:43:e6:f4:20:6e:e2:86:70:70:cd:
f5:66:66:60:44:50:18:c7:b4:cc:e7:c0:ce:f7:b9:90:3f:10:
5d:5b:e1:9b:3c:22:50:af:d2:f6:32:5e:ed:16:c7:3b:94:f6:
c4:ea:a4:76:fe:1b:e2:64:5b:0d:4c:e6:ae:1e:36:fc:b4:62:
6f:49:b0:c1:37:a9:55:22:b1:e2:1e:27:09:7a:bf:40:7d:27:
6f:e8:4e:66:d9:d8:ff:cd:23:9c:fe:f2:99:7a:05:05:eb:d2:
32:d4:2f:5f:5c:45:6e:12:ac:ed:c5:75:da:95:8c:1c:18:be:
7c:99:a6:d6:15:06:ad:40:d9:40:96:bd:6b:08:17:32:b8:79:
21:77:52:03:d5:11:a2:ef:cf:30:74:62:d9:56:bf:b4:d8:f5:
50:c6:19:24:e3:f7:87:a3:04:cb:dc:01:ea:d1:99:02:6c:25:
ea:9a:03:c2:14:5a:0b:d3:3e:18:91:e6:5f:88:f6:fd:53:cd:
95:e8:c9:8c:d6:9a:bc:b7:08:e7:01:52:38:29:53:4f:38:21:
dc:c8:cd:f2:c1:cc:fc:e9:af:d3:9f:79:a4:b4:4b:c3:f6:7a:
9b:75:6c:f5:11:fc:72:5a:44:09:fe:94:3d:ab:49:eb:da:e6:
2a:98:73:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:43 2025 by rpki-client