Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
File: 03fcZqVjo68h7gerM-i__nr5KI4.mft (raw, json)
Hash identifier: tTQBb3AGBRyrqTAJLkAvHG7po05I5GuUONPZ4s5PKJU=
Subject key identifier: 87:80:3D:D6:0C:A6:AD:1E:7F:96:33:CE:A8:E8:88:74:B6:CC:22:AB
Authority key identifier: D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
Certificate issuer: /CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Certificate serial: 019683FF3CDE35329A91838735D0D58F71C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
Manifest number: 0361
Signing time: Wed 30 Apr 2025 00:01:04 +0000
Manifest this update: Wed 30 Apr 2025 00:01:04 +0000
Manifest next update: Thu 01 May 2025 00:01:04 +0000
Files and hashes: 1: 03fcZqVjo68h7gerM-i__nr5KI4.crl (hash: SCSdcCl/MLFzVSXQjuySnzY3YC5BCOAWHPza9qKq8fU=)
2: 6NWP4SmZYIKGrMKHkiHYbZ6J5I4.roa (hash: m+2x+5LklJoq5rlCh1u/r9pBwdaQs57tN+EGau9SsmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:3c:de:35:32:9a:91:83:87:35:d0:d5:8f:71:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Validity
Not Before: Apr 30 00:01:04 2025 GMT
Not After : May 1 00:01:04 2025 GMT
Subject: CN=87803dd60ca6ad1e7f9633cea8e88874b6cc22ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7b:a1:a0:f5:d0:02:b3:0e:38:75:a7:29:49:
3b:74:5c:e8:5e:89:89:a1:84:4c:30:9e:ae:79:cb:
5c:13:b2:32:96:83:87:7f:9b:47:82:3a:71:a6:53:
e3:6b:53:47:7e:3e:88:78:de:54:dd:7f:6f:f6:67:
a9:d2:7a:bd:80:2d:86:17:02:b5:da:fb:a0:bc:43:
75:15:eb:0f:6e:ff:5e:82:9f:0e:c6:42:8a:68:b8:
00:ea:f5:c7:a9:c3:83:11:65:83:37:c1:ec:bb:db:
5f:3a:fb:db:67:7b:98:e2:56:0e:44:22:61:14:c2:
80:d2:0d:50:6a:11:81:22:5c:ea:cc:3f:46:12:d7:
09:a2:c6:0d:1e:85:05:19:97:4f:9c:03:76:5c:55:
53:08:b4:8c:80:18:54:9b:89:71:95:30:d3:59:70:
5e:3a:45:50:f4:37:53:0d:06:8a:d7:d9:9d:ee:ba:
46:e0:78:2a:5b:0d:4c:e3:d5:fa:d5:3d:4e:8a:56:
46:1f:df:a4:05:d0:86:f4:28:1e:7c:c8:f9:2e:e0:
32:f3:a2:d1:3b:39:a3:aa:66:fa:92:e5:66:98:f2:
0e:d5:f2:07:83:7e:9e:04:5c:f1:41:3a:0d:bb:35:
3e:2c:8e:53:d8:09:41:db:8f:c9:db:18:ab:58:4b:
11:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:80:3D:D6:0C:A6:AD:1E:7F:96:33:CE:A8:E8:88:74:B6:CC:22:AB
X509v3 Authority Key Identifier:
keyid:D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6d:9d:07:37:17:fc:ed:ba:0a:af:56:f0:3f:cc:29:a4:0b:
c2:8a:aa:53:f4:56:08:23:91:bc:1f:0a:ba:c1:c4:bc:6f:1c:
3f:6a:02:b2:75:00:8c:4c:7c:03:d9:b7:6c:49:cd:87:40:26:
d6:fc:8d:e0:02:85:06:6b:a1:da:f7:07:9f:19:22:7f:05:de:
09:4b:06:82:56:01:3a:10:38:ca:df:73:d1:b2:11:51:67:b4:
8b:c3:92:64:0a:13:e6:04:1d:c8:f5:9c:fd:9b:71:a6:52:6d:
c9:5c:03:52:7e:fa:87:14:4e:82:e2:c8:cf:2b:8b:d0:47:69:
59:4b:f5:81:9f:04:1b:5a:5b:c8:f2:7a:24:e1:04:d2:11:f2:
0a:d5:c6:54:17:9d:28:09:a4:f0:04:cb:6c:1b:87:7f:29:0b:
78:41:e4:12:92:33:fc:f3:19:df:dd:65:c8:d5:f5:ac:f8:c5:
af:8c:7a:f9:79:c9:bc:80:f9:e2:57:5a:bd:ef:d3:e2:e4:2b:
8a:81:10:e4:b0:8d:7a:47:e9:42:cf:47:c5:7b:8b:f0:b7:b8:
a8:d9:c5:24:b5:11:67:9c:a7:94:ff:ef:cc:e4:25:a9:46:83:
53:98:ad:71:41:aa:62:66:d8:4b:80:6d:75:3d:5e:7f:1e:6a:
01:13:3c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:14:21 2025 by rpki-client