Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: cxh9osNHtf/WG0Pjd/4SBxXGkZ7UIoXhuIeTpro4m+g=
Subject key identifier: 6E:E5:96:41:24:A4:26:36:4C:E0:4A:62:06:40:FF:6F:EF:A2:B4:4A
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 0196862423F764C5E1EF5D78DBD19B0CA38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 101E
Signing time: Wed 30 Apr 2025 10:00:37 +0000
Manifest this update: Wed 30 Apr 2025 10:00:37 +0000
Manifest next update: Thu 01 May 2025 10:00:37 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: 5U6/dkKIE0bWc4xu8YF7O1oa/sXnOcxTvPwk2Y4q+8E=)
2: _eQTxfZZbwefhXlLKHO7CEbeNzo.roa (hash: XwbhtEsqMzoTs493oAMc1WoC+bVurXPqsNp3fAtN59M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:24:23:f7:64:c5:e1:ef:5d:78:db:d1:9b:0c:a3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Apr 30 10:00:37 2025 GMT
Not After : May 1 10:00:37 2025 GMT
Subject: CN=6ee5964124a426364ce04a620640ff6fefa2b44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:01:d4:5d:6f:bb:8b:af:0c:01:d8:d4:dd:
66:69:2b:43:b4:f8:24:5e:48:be:4a:09:32:da:c8:
54:f4:5a:d1:b7:b1:de:c1:47:6a:19:75:c6:ab:e6:
c6:38:88:d4:47:f1:80:82:77:55:57:18:1e:f2:b7:
97:b5:be:eb:9a:c0:e3:1b:79:18:92:9a:e4:54:9d:
f9:f9:ea:9c:b8:d4:97:49:c3:6a:f2:69:d0:9c:66:
8a:dd:14:2f:68:8e:b8:0e:b0:7a:c2:8e:02:3c:83:
8d:18:0f:d2:75:8a:c6:32:25:cd:79:60:dc:51:f8:
18:10:7e:af:10:0f:48:fd:ed:d8:c3:95:98:3d:80:
35:04:a9:ac:20:b2:76:1a:2d:5d:96:56:fd:7a:76:
c8:e6:bf:38:88:80:1a:46:76:71:67:d3:19:96:3c:
36:51:2d:12:88:a9:00:42:52:d2:6c:b3:74:ab:aa:
94:a5:b2:7c:e2:c4:39:13:d2:0a:19:84:9f:86:41:
53:6c:ad:20:34:a1:bd:e3:30:65:09:aa:a7:13:55:
9d:b9:af:2a:7f:4e:61:8d:85:c4:ab:45:62:f9:90:
5b:ee:92:1a:d0:97:8c:69:3d:dd:c0:fd:a0:e5:be:
ca:a9:0b:00:16:80:49:f0:b7:d2:be:41:23:e2:05:
c5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E5:96:41:24:A4:26:36:4C:E0:4A:62:06:40:FF:6F:EF:A2:B4:4A
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:17:f1:51:64:67:e9:af:3f:f3:c7:07:33:91:3f:7e:ea:b3:
9b:5b:41:e7:89:2f:7d:75:5b:ca:b8:3c:3a:88:e1:6c:71:fa:
f5:6f:0b:e7:7c:28:f1:50:2e:b3:f6:d0:32:f5:5f:00:6b:cd:
28:5b:0a:2a:07:d9:30:62:48:fe:7b:ff:0d:28:c3:5b:6c:d7:
ce:b6:f9:98:46:5e:83:c3:ef:ce:a7:94:b5:9d:5c:d2:b7:47:
4e:5a:b8:a4:ae:e7:3e:9f:87:e0:b9:10:78:0a:6c:72:86:22:
4f:d0:ea:0c:14:c6:bf:bf:d1:50:f8:ff:8a:17:b3:9b:f9:61:
d8:2d:0a:d2:e3:bd:f2:b0:4c:61:7d:b3:e0:9a:3c:81:91:d8:
2f:90:cb:1c:40:ad:61:4b:37:e6:b5:39:b7:7f:71:ae:ec:96:
2d:c0:7e:c5:27:62:bc:c5:e6:7e:76:a1:f3:d0:85:89:9d:ac:
a4:f0:03:e8:6b:49:7d:2b:bc:48:a0:bc:01:58:f4:18:c0:e7:
3a:16:1b:c4:35:fe:dd:b6:8e:01:da:33:08:36:89:9a:88:ca:
b5:d2:06:83:3a:8d:c3:f6:d9:b8:8f:4d:ce:6d:d4:f2:d5:c4:
f7:b9:ae:31:a3:f7:6c:e9:c8:f1:1c:cb:0b:c9:88:69:c6:0a:
29:45:f5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:38:19 2025 by rpki-client