Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
File: 3HbS9D7BffyAXNsF8AChV5ie1Eg.mft (raw, json)
Hash identifier: bNzGi+Qq3X2COPvBF0CN0CoZ5SWe7l3ANscTv7bDOqw=
Subject key identifier: D4:76:3D:E5:72:0E:0A:B9:22:1C:5E:3C:EA:5D:DD:9B:5C:39:3D:FB
Authority key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
Certificate issuer: /CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Certificate serial: 0196759EADC806600FC3CE8555A456F90583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
Manifest number: 14A3
Signing time: Sun 27 Apr 2025 05:00:55 +0000
Manifest this update: Sun 27 Apr 2025 05:00:55 +0000
Manifest next update: Mon 28 Apr 2025 05:00:55 +0000
Files and hashes: 1: 3HbS9D7BffyAXNsF8AChV5ie1Eg.crl (hash: KvmCBTMFhod5ntBIkv2Dr483FnBcJLNSuzIBEBeyfnU=)
2: vMasAu2YCDgiGttPAAgT_LUqims.roa (hash: vZV6QUfnrQuKBHkkqaJTtSdtOrcdYKhNNa/gcjcEoTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:ad:c8:06:60:0f:c3:ce:85:55:a4:56:f9:05:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Validity
Not Before: Apr 27 05:00:55 2025 GMT
Not After : Apr 28 05:00:55 2025 GMT
Subject: CN=d4763de5720e0ab9221c5e3cea5ddd9b5c393dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a3:5a:bb:6f:e0:39:06:4b:54:82:b8:0f:16:
d5:07:10:aa:1a:fb:4d:52:a8:0c:32:b2:09:02:eb:
d8:6b:7e:2d:21:07:8e:a6:8b:88:56:9f:f7:ee:ce:
99:4d:57:b5:c8:a2:7a:55:df:f7:90:09:d4:b7:78:
3a:a6:c0:eb:99:bc:20:70:ab:05:cc:54:1a:f2:c1:
72:61:a6:49:f0:e7:18:3a:ef:b7:88:31:7f:a6:77:
f2:91:d2:f6:f5:35:a3:ac:7b:1b:8d:21:67:ad:c4:
92:64:59:89:83:d8:cc:af:13:94:04:7e:51:62:e5:
1b:08:9f:2d:12:a7:79:86:c9:35:08:a8:83:21:8f:
61:76:94:e9:d2:ed:ab:18:08:3d:72:5f:5c:ca:ca:
bf:92:78:75:d4:97:67:fd:27:48:16:c3:16:d8:8a:
13:b3:6c:28:75:06:9d:96:1b:e7:39:76:4c:97:86:
47:d9:fc:1c:1f:f5:f3:6c:06:46:e5:d2:c0:a4:ef:
ee:f6:8a:d7:bf:e0:08:2e:60:57:0e:15:67:46:3d:
c2:13:01:af:2e:6d:05:07:57:77:4c:81:fb:01:c0:
6f:eb:c2:76:d3:5e:5e:bf:93:71:c8:58:9d:df:ee:
76:09:37:45:0f:60:b5:2e:fb:72:9c:3e:e9:20:11:
90:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:76:3D:E5:72:0E:0A:B9:22:1C:5E:3C:EA:5D:DD:9B:5C:39:3D:FB
X509v3 Authority Key Identifier:
keyid:DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3f:08:f1:7d:74:ab:3b:08:4d:ae:d6:4c:bb:0e:9c:42:a5:
b2:62:cc:79:51:e7:d6:26:65:bb:d0:1d:cf:30:02:d7:48:6e:
09:cd:58:de:7a:ba:5e:08:03:6b:8f:eb:90:9f:d5:f8:91:c2:
47:2c:0b:f0:f9:a2:c4:7b:95:5d:10:19:90:31:5a:b8:4d:97:
7b:95:d3:6f:a0:f9:45:0d:4d:71:6b:59:fd:3e:18:96:a0:c5:
cb:69:ca:d2:8d:37:71:2d:d1:c0:d9:eb:29:eb:b6:24:03:b5:
86:e1:77:06:53:7f:74:af:c5:da:71:d3:48:cf:38:22:31:79:
8b:a0:79:94:72:57:20:5b:77:8f:3b:bb:55:e7:6d:b0:65:6f:
b6:ac:46:a9:c6:0c:40:4c:5b:30:ed:07:15:1e:1b:ca:09:a6:
c5:f5:b1:65:42:66:d1:70:45:a9:b2:91:4a:59:00:b7:ca:60:
09:34:be:e7:8e:a2:d2:4c:b2:0c:27:1e:fd:ab:a9:74:d2:37:
1b:66:8e:e4:ce:9d:f2:6a:c7:07:12:16:41:88:49:df:8f:3f:
c6:32:ea:13:a5:e2:3d:db:ad:05:8e:ad:99:cb:f1:b1:0e:a5:
2e:2b:34:ec:0b:3d:57:13:5b:0e:d6:8a:2b:3b:58:8f:b5:10:
7a:cb:62:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:43 2025 by rpki-client