Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File: A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier: 23UIqYRqbRmfBy23GQx5hENMKuQbHB5i0cFTLrl/Zig=
Subject key identifier: AF:AD:45:D6:2C:E5:1A:63:E4:4B:AE:61:7B:A1:43:68:84:B1:8F:20
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial: 01968021CC86E0301834952E70736DB0CF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number: 123E
Signing time: Tue 29 Apr 2025 06:00:20 +0000
Manifest this update: Tue 29 Apr 2025 06:00:20 +0000
Manifest next update: Wed 30 Apr 2025 06:00:20 +0000
Files and hashes: 1: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: PrU9aMzIBDM2v81oEI92U2AsPwF4uu8qx76FMHnwOl0=)
2: AB4qyh-GFm_4fCIscWpIBFj0Kek.roa (hash: eMCLNriDfdANy3mBQaEbKePj36AsyrGRMWbPR231aA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:21:cc:86:e0:30:18:34:95:2e:70:73:6d:b0:cf:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Validity
Not Before: Apr 29 06:00:20 2025 GMT
Not After : Apr 30 06:00:20 2025 GMT
Subject: CN=afad45d62ce51a63e44bae617ba1436884b18f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:50:59:ce:33:a6:17:11:96:79:b1:0a:17:c0:
65:16:23:92:a4:25:88:9f:38:91:0a:d1:f2:ea:51:
12:ab:c7:a7:42:34:6e:ac:87:b3:f0:16:87:3b:d8:
c7:a0:51:d0:17:75:16:00:61:fa:03:86:03:8c:f9:
8c:24:4e:5c:6f:37:d2:b5:3d:01:21:a5:c1:19:03:
6f:87:ed:ce:2f:0a:f3:d7:73:10:43:33:84:a6:62:
d0:c9:16:a2:d3:3b:b4:a0:65:4d:1d:9d:63:e1:48:
28:54:86:74:5e:bb:0b:63:d2:bd:13:54:0a:57:23:
51:10:71:55:a7:9c:4c:e9:ce:7b:18:56:14:da:0e:
0f:4d:0a:51:ff:50:21:5a:c1:51:b3:60:6d:e0:86:
2b:dc:a4:ee:00:95:02:1a:96:55:80:cf:9b:00:4d:
c4:36:98:71:19:c1:73:4d:03:cc:4d:db:a0:eb:51:
48:2b:0c:d1:96:f5:72:e4:ed:9a:fe:a7:0a:9b:6c:
64:7c:59:ce:d0:8a:8c:f9:84:6a:45:f1:f9:c6:8b:
81:25:c9:1a:a2:6c:00:82:99:fe:59:6b:ba:2e:9c:
a0:17:fa:fe:da:3c:6a:3e:1a:3d:b4:3c:7a:da:79:
63:56:e5:92:21:b7:e3:d3:c5:72:ef:37:74:40:eb:
26:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AD:45:D6:2C:E5:1A:63:E4:4B:AE:61:7B:A1:43:68:84:B1:8F:20
X509v3 Authority Key Identifier:
keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8e:e1:fe:50:c1:1e:95:5f:85:ea:40:d0:b8:63:5c:b7:2f:
64:b1:ab:1c:1e:50:cf:5c:c8:8b:9e:56:79:cb:ec:fc:02:2c:
35:85:ba:f3:76:4e:9c:65:30:f0:62:23:bb:35:b9:0b:3d:42:
b4:e7:f6:85:35:b3:e9:3b:74:10:4a:32:d5:6d:28:1a:2f:ff:
44:b5:0f:ff:2b:e3:5e:e9:6a:ad:a2:9c:b5:66:59:49:c1:b8:
2e:13:f4:9d:be:24:dd:0a:13:0b:c9:61:17:28:74:a7:be:57:
29:4e:f9:da:21:b1:51:29:bc:c4:4b:5d:f2:de:7b:0a:fa:83:
6e:97:2d:35:09:59:11:83:e7:2d:88:d6:6f:ee:eb:da:5a:6a:
1a:0a:37:03:88:2f:5c:56:d1:03:a1:00:af:90:08:a0:25:e1:
03:ce:b7:05:d3:e2:a0:fb:08:24:25:91:8f:ba:78:21:75:4e:
8a:03:ff:c0:b4:c6:aa:15:e1:df:e9:aa:d1:00:80:b8:3f:48:
da:0f:8d:0e:a2:54:4f:2b:f8:3d:0a:e5:88:d6:d8:f5:c5:eb:
a2:08:24:a9:4e:45:bf:04:81:e7:22:d3:e3:ac:22:73:3c:ba:
b5:e1:09:62:dc:5e:70:04:66:f1:69:02:c6:8c:5a:f4:69:34:
e2:94:83:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:49:47 2025 by rpki-client