Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
File: 3dya0lC4XNOZSUZbZoGy8d8U1qM.mft (raw, json)
Hash identifier: oTQsjZ70xXKxHkni+9pSEQBY1i9V8ucNb7qxve6InhI=
Subject key identifier: A2:5A:C2:92:69:21:B2:40:1A:7A:6F:13:0A:46:CD:D1:33:3D:5D:6D
Authority key identifier: DD:DC:9A:D2:50:B8:5C:D3:99:49:46:5B:66:81:B2:F1:DF:14:D6:A3
Certificate issuer: /CN=dddc9ad250b85cd39949465b6681b2f1df14d6a3
Certificate serial: 0196789F3CBA20A134B08E18747EF1D40B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
Manifest number: 03F6
Signing time: Sun 27 Apr 2025 19:00:23 +0000
Manifest this update: Sun 27 Apr 2025 19:00:23 +0000
Manifest next update: Mon 28 Apr 2025 19:00:23 +0000
Files and hashes: 1: 3dya0lC4XNOZSUZbZoGy8d8U1qM.crl (hash: rootj1fS3cxIFCHop5LX6ixky9Dz6Lpgvej093X9JrE=)
2: dA9DZPAABtlejc0G0adjQxYBv5c.roa (hash: 3UVeFl3N3ODI+QVLphkmL5y9dyL4Gw+YagDr/4SW4gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:3c:ba:20:a1:34:b0:8e:18:74:7e:f1:d4:0b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dddc9ad250b85cd39949465b6681b2f1df14d6a3
Validity
Not Before: Apr 27 19:00:23 2025 GMT
Not After : Apr 28 19:00:23 2025 GMT
Subject: CN=a25ac2926921b2401a7a6f130a46cdd1333d5d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:19:2f:5e:81:85:bd:8c:5a:44:f0:0a:38:
92:b1:50:80:da:db:36:dc:88:4c:04:c9:d7:c3:35:
57:dd:54:34:6b:3b:d8:20:7d:6e:b8:3c:41:55:3d:
8b:e3:a4:a1:3e:2d:28:82:a0:a1:e6:e2:6e:39:86:
20:65:9f:87:8a:2e:4f:56:95:fa:c6:77:ff:26:d2:
d2:26:98:d0:00:4b:da:c1:b9:72:c6:16:61:02:04:
a0:7c:31:4a:55:34:da:da:85:34:b9:e7:af:42:d5:
f7:1e:2e:1a:6a:fe:36:8f:56:d2:2f:74:82:9a:94:
55:e9:3f:bb:a7:85:57:2e:9d:3e:b3:e6:41:63:c3:
c4:c5:6f:e0:a6:15:4f:15:c8:d7:33:73:54:da:d7:
f5:10:3d:7c:eb:d8:6a:c9:f4:d1:72:32:be:12:99:
93:6b:b8:92:02:17:13:33:85:47:b4:14:85:05:4c:
88:31:a2:cd:c5:1f:3d:46:ce:b2:b1:41:a4:b9:c7:
73:0b:f9:7e:da:15:13:42:e0:02:18:5d:d7:f1:8a:
73:2b:6e:f2:3d:90:b4:b6:aa:e6:10:9b:d3:0f:3a:
13:64:6e:f7:04:c9:b7:eb:1e:17:68:25:9c:09:b4:
96:3a:df:59:b8:88:6d:83:61:0f:95:22:f6:a2:0e:
f2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5A:C2:92:69:21:B2:40:1A:7A:6F:13:0A:46:CD:D1:33:3D:5D:6D
X509v3 Authority Key Identifier:
keyid:DD:DC:9A:D2:50:B8:5C:D3:99:49:46:5B:66:81:B2:F1:DF:14:D6:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b0:3b:ae:77:c8:75:8c:12:99:83:f9:a4:65:13:c8:0a:38:
1a:52:83:99:35:53:4c:57:49:c0:67:f8:be:2a:cc:b4:20:40:
56:85:e3:54:20:76:3d:06:2d:5d:dc:88:d6:13:e1:81:94:54:
f9:9e:54:72:e6:ce:aa:eb:db:e4:fd:6f:98:d7:e2:41:eb:4a:
dc:e4:89:de:7f:6e:6c:e1:fd:c3:02:b7:a3:eb:57:30:38:59:
85:5e:08:66:01:ee:5d:5e:07:e6:8f:1c:44:d2:6f:c9:2c:c8:
bc:8a:81:20:67:8d:99:9b:89:10:50:20:81:8b:bc:c0:b4:11:
96:4d:a7:92:30:4c:b8:b7:b9:fe:e4:f4:74:3a:1d:93:e4:73:
6b:aa:76:ed:ec:ae:7c:8f:e7:d2:21:0c:11:4e:2d:d2:88:c0:
72:92:04:f5:32:54:ac:3f:e6:50:2f:cf:81:98:11:51:54:4c:
13:da:35:0e:0c:f5:aa:fb:66:db:7d:d7:97:2c:aa:43:d4:7c:
94:5e:de:ef:ad:40:e4:59:d9:f2:c5:26:8c:4f:d3:a0:51:95:
73:13:e9:e2:4c:be:d7:16:2e:bf:d4:de:67:9e:d7:5f:07:82:
12:15:b2:97:34:87:a5:0c:50:74:7b:09:64:ef:bd:ba:2d:65:
16:df:5b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:23:54 2025 by rpki-client