Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File: 3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier: 8vZkNbTZc/z04GsZKPfIY6YX2r/yM5LkYZNVRaq6kJ0=
Subject key identifier: C2:72:A4:B2:39:9D:A8:FE:98:73:27:B5:51:5E:7A:DA:D1:F3:0A:2B
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial: 0196778CA9C80FECBA4E79E14CBF031E4667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number: 131D
Signing time: Sun 27 Apr 2025 14:00:29 +0000
Manifest this update: Sun 27 Apr 2025 14:00:29 +0000
Manifest next update: Mon 28 Apr 2025 14:00:29 +0000
Files and hashes: 1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: F+8xrtLPNFFrpkInRtwFxgreZkfSwxAu8CN6ce8Ua88=)
2: UXWSLhVlTXSrRh4vQjiJGZfTc28.roa (hash: GwWbj030dqXFgPoZUUmrOygMcwYdz6TWzzcKF95NLWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:a9:c8:0f:ec:ba:4e:79:e1:4c:bf:03:1e:46:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Validity
Not Before: Apr 27 14:00:29 2025 GMT
Not After : Apr 28 14:00:29 2025 GMT
Subject: CN=c272a4b2399da8fe987327b5515e7adad1f30a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:f9:2d:5a:93:f0:bb:95:18:a6:1d:8d:ef:
fa:d0:2d:f0:26:ca:58:23:80:e4:b9:72:69:90:af:
82:ab:8b:c0:9a:88:4f:e0:25:9c:a7:21:40:71:f3:
0f:63:3d:95:30:e8:b3:0e:56:6a:07:a5:c2:a6:e4:
81:fa:5b:df:e4:c7:4e:d2:bf:48:3d:c1:fe:da:70:
1e:83:2e:a8:c1:37:e9:34:b0:a6:65:2e:59:7a:cd:
62:78:66:e2:8b:25:cf:ee:d1:d9:c3:1f:bb:77:c3:
49:67:b8:b3:c1:ef:c7:78:7a:14:b2:17:c1:51:e0:
ad:8e:00:a9:1e:b7:a9:36:cd:3f:33:91:22:73:e5:
a4:8c:82:eb:38:1b:0a:0d:22:35:46:0c:32:f2:cf:
02:c1:1f:cf:50:ae:8c:97:8d:f6:d9:32:a4:85:25:
64:58:04:fd:5c:be:88:ba:55:52:5e:8d:f6:0f:ef:
c6:60:61:37:c4:51:fd:49:80:63:45:34:45:a7:b8:
96:16:6f:d1:65:85:2e:9d:d0:09:a2:0a:17:6c:f9:
18:04:0e:f1:08:58:eb:df:b4:fb:f4:b7:6d:35:6f:
cc:c8:2e:5d:55:95:99:05:4c:46:6c:ff:8e:29:25:
b0:79:ec:3e:6f:c5:e9:3f:b1:7d:02:e1:92:61:89:
c0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:72:A4:B2:39:9D:A8:FE:98:73:27:B5:51:5E:7A:DA:D1:F3:0A:2B
X509v3 Authority Key Identifier:
keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:be:6c:42:91:d6:56:29:1b:0b:d7:23:51:af:ad:df:2b:0b:
15:f1:8e:65:0c:31:f5:c4:50:a7:4d:b5:2f:92:0b:8a:3c:98:
c1:29:f8:da:39:43:40:6c:76:a1:c7:20:ef:bb:69:f0:af:a6:
01:12:16:0f:99:6b:56:3c:e4:5c:ac:6e:9b:01:f3:27:01:ea:
31:71:0a:74:e8:92:b7:73:b9:2c:d4:fd:62:eb:8a:ea:18:0c:
86:8c:9a:57:e3:70:42:26:84:e6:11:e3:a3:7b:67:4a:9e:65:
ab:cf:02:d5:5e:22:d9:18:5c:4d:f7:b3:34:36:bd:18:32:c3:
b0:3c:e5:88:f6:fc:96:bb:26:d7:78:7a:b9:c4:15:7c:bc:f7:
08:fc:d4:8a:91:0d:2e:35:40:ac:2d:cd:7c:c2:7f:f4:ec:aa:
4a:89:b6:18:dc:31:96:3b:6d:d9:3f:ce:96:1a:42:2e:07:8b:
19:62:18:b8:3f:a2:fb:df:00:e7:73:e2:66:eb:30:ce:c0:a7:
fa:14:a4:58:b7:80:1e:8b:2e:a9:de:98:9a:3f:93:03:e7:7f:
76:d0:20:ab:50:6b:82:5d:00:82:12:29:db:80:ee:8e:1d:05:
51:25:db:39:a3:1f:8f:e3:d6:ea:da:49:bf:1b:24:f0:15:aa:
ca:ff:c2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:13:55 2025 by rpki-client