Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File: 3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier: QtkjFdBtdoADDUVESSQXs/vdEhaDbfxLWETkDPmgImE=
Subject key identifier: 7F:46:F3:B7:31:A2:52:A3:98:32:FC:24:8F:EF:86:36:B6:3F:A6:3A
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial: 019677FACCB2619AC8C7AAC6D7D256CB818E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number: 0588
Signing time: Sun 27 Apr 2025 16:00:47 +0000
Manifest this update: Sun 27 Apr 2025 16:00:47 +0000
Manifest next update: Mon 28 Apr 2025 16:00:47 +0000
Files and hashes: 1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: S0SK7IDue/uJEpIRmrmVmbtwkcPqfS/BACtM3Y0r7lM=)
2: HrIwTwMD6cd99R3d7bEiTOryXZg.roa (hash: 1wrHqn0lkUk+GnZl+JBgqFqtnLiVA3gNpwduqpO2T9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:cc:b2:61:9a:c8:c7:aa:c6:d7:d2:56:cb:81:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
Validity
Not Before: Apr 27 16:00:47 2025 GMT
Not After : Apr 28 16:00:47 2025 GMT
Subject: CN=7f46f3b731a252a39832fc248fef8636b63fa63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:62:d2:a9:1f:08:96:72:9e:33:0c:12:54:
81:9f:04:44:a3:12:3d:56:a4:17:8a:5a:39:36:0e:
88:d8:c8:1d:ac:eb:dc:17:66:ed:28:bd:a8:98:26:
0a:ea:8d:29:ae:2a:ed:8b:23:40:76:b7:67:e1:11:
8e:d6:fd:00:51:67:d8:42:58:e1:4a:77:50:29:f9:
5d:1e:4a:ba:b7:89:c4:00:32:8a:a4:02:a4:84:98:
d3:0f:5c:f5:b4:96:ba:37:29:46:81:c4:d8:30:10:
c1:37:ae:36:ff:92:53:2d:28:47:cf:e6:bd:34:f5:
fe:ae:bb:3e:2e:02:0e:33:48:2c:df:9c:ce:9c:f7:
54:8c:44:93:80:e9:2b:4c:bc:47:07:92:24:54:ef:
33:53:52:f1:17:60:17:5e:a1:b2:45:95:46:69:90:
46:38:f0:d6:af:25:88:83:c4:3f:f4:4e:21:48:11:
5d:03:aa:20:6e:76:7b:f2:01:e2:28:0e:fe:a0:c5:
9d:66:9f:75:d2:d8:03:61:df:6a:6e:a2:24:f5:c3:
63:a8:d8:68:98:b4:4f:c1:bd:af:08:ab:62:84:96:
3d:e4:eb:1f:c5:26:5d:28:30:f0:a4:32:73:e5:5a:
dc:8f:fa:93:93:52:dd:0a:92:81:e5:56:3f:b8:db:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:46:F3:B7:31:A2:52:A3:98:32:FC:24:8F:EF:86:36:B6:3F:A6:3A
X509v3 Authority Key Identifier:
keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:86:cd:ff:b7:44:a2:42:ac:a7:22:de:9f:3e:4f:79:56:f5:
c4:e9:f8:8b:56:60:4f:a8:7b:16:20:eb:fa:98:b0:d3:dd:6d:
5d:8c:47:21:fe:35:9b:67:cd:50:d1:81:b2:b7:9b:7c:d2:84:
bc:85:d1:99:9d:0d:35:75:3b:2c:cd:79:0c:e6:cd:e5:1f:73:
b8:0b:c9:bb:b5:1b:36:02:ff:cf:fd:8c:20:29:0f:c2:cf:19:
e2:98:0f:46:fa:94:b5:28:2c:28:d7:a6:f7:f4:f4:dc:e1:0d:
fc:0e:53:01:a6:f1:82:50:93:f1:dc:a2:da:13:c4:59:d3:e4:
c1:ed:f6:ec:c7:c6:1c:4c:f5:ae:d2:2b:50:c4:0d:39:8e:69:
48:6c:1c:64:65:8f:3f:fd:8c:cb:90:8f:0b:47:90:31:2a:f0:
52:24:c0:af:b8:09:42:4f:29:89:4c:04:bc:c6:cb:f4:8b:15:
f5:9c:2c:7e:94:8e:b9:1c:29:8b:09:52:2c:b4:8a:d9:96:df:
e1:1c:56:85:0f:12:95:23:cb:6d:b1:9c:e1:67:d1:81:4b:a4:
60:9a:fc:bd:7d:32:05:06:42:45:be:15:06:1c:43:51:1f:86:
14:27:4d:0f:44:28:e1:ff:7e:f8:49:ed:6c:04:80:da:f9:52:
59:48:0c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:23:11 2025 by rpki-client