Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
File: 3ciCMsB94s3Llur551FVC6pmxYg.mft (raw, json)
Hash identifier: QsJcj+kzLOKgIb5uX1JOz8bn1zITJqawwEAStDnySUM=
Subject key identifier: B2:EE:5C:93:BE:25:0A:F6:51:16:D0:54:75:6D:09:1C:2C:F5:D8:0A
Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
Certificate issuer: /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Certificate serial: 01967B69DC017F3190257347E01BE9CA843F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
Manifest number: 0C74
Signing time: Mon 28 Apr 2025 08:00:57 +0000
Manifest this update: Mon 28 Apr 2025 08:00:57 +0000
Manifest next update: Tue 29 Apr 2025 08:00:57 +0000
Files and hashes: 1: 3ciCMsB94s3Llur551FVC6pmxYg.crl (hash: TS5frAfYLqsz6UbObObgIiKoTwQ6S0Hi3+uHrQEoUIQ=)
2: OK60eEXoBVz15pEwVmX0yYULZbk.roa (hash: irOuBXNJpmhp7Bb40BZggz4rGVp00h/PvH1AyeAmbL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:dc:01:7f:31:90:25:73:47:e0:1b:e9:ca:84:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Validity
Not Before: Apr 28 08:00:57 2025 GMT
Not After : Apr 29 08:00:57 2025 GMT
Subject: CN=b2ee5c93be250af65116d054756d091c2cf5d80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:93:26:d3:fc:3b:a2:fb:c5:69:38:46:30:57:
60:91:d0:8c:99:b8:68:14:55:2d:36:59:00:14:24:
c6:04:4c:c6:d0:b4:c7:61:0f:27:51:24:ff:6e:4c:
39:47:4a:0b:88:e6:82:69:fb:8a:c7:95:88:89:f9:
de:31:a6:41:17:a1:37:97:b0:83:a5:6d:ed:ab:f0:
9d:dd:ca:a7:94:f1:06:ce:c2:c4:95:9d:3f:22:68:
a3:9a:d5:d7:e3:e1:91:40:98:e3:ac:c6:54:43:ce:
9d:8f:03:af:b1:07:b1:a8:5c:11:6e:79:4f:42:c5:
7b:55:a9:24:d3:9c:f8:44:f8:7e:c2:fb:03:a1:5e:
4c:b8:8a:1a:8b:0d:ce:51:93:be:81:7a:b5:6d:4c:
22:72:ae:c2:c7:9c:e0:47:7c:d6:4d:68:cd:1e:94:
66:35:ee:e2:4c:60:75:9d:67:da:42:8d:61:81:4f:
4f:3a:30:69:8b:9c:ac:a6:d2:ee:11:bc:53:71:f3:
14:95:a6:30:50:e3:04:fa:19:0e:71:43:9d:a3:3a:
e3:88:cc:22:da:3e:bd:a4:57:f6:c8:27:a8:9f:96:
1d:c2:ef:0b:99:60:77:4e:f4:62:9b:40:5c:d3:b7:
34:8b:7b:21:a3:54:62:31:e1:31:2c:c3:ec:55:9d:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EE:5C:93:BE:25:0A:F6:51:16:D0:54:75:6D:09:1C:2C:F5:D8:0A
X509v3 Authority Key Identifier:
keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ed:8a:b1:fd:a0:1d:99:1f:8f:a2:f6:42:97:af:19:1e:c5:
a3:81:9e:e5:15:8b:6c:23:cb:6a:3f:db:02:3c:06:32:4d:e2:
e8:d4:c2:7d:b4:10:be:53:b5:a9:af:e1:c2:71:fe:79:d4:44:
b8:45:e5:0c:29:6d:47:f1:96:b9:ec:b5:74:31:8b:f8:f4:16:
48:08:44:35:43:74:e3:57:f5:f4:80:65:d5:03:68:86:17:57:
ed:09:26:9a:0c:f2:cc:aa:ad:7f:fb:78:e7:0d:ce:cc:95:7d:
81:7d:c5:aa:9d:d3:b5:59:ce:ad:2a:df:07:8c:87:de:a6:f5:
71:4f:b2:29:0e:75:71:5d:1b:60:20:f9:40:3b:66:d4:f6:8e:
bf:9f:06:32:f9:70:57:c6:9a:c0:ff:73:eb:ec:66:17:bf:1b:
a3:fb:1f:aa:b6:d7:24:ce:52:c5:c9:4e:3f:ac:43:ff:b2:f9:
7c:9a:60:73:76:b0:09:bb:51:eb:8d:4c:54:bf:80:65:55:20:
c3:44:82:8e:ac:d2:1a:39:25:6e:50:0e:68:97:22:31:4a:52:
a3:74:39:d9:c8:64:aa:2b:45:21:c6:05:9d:7f:fd:5c:d8:71:
b0:aa:1d:00:df:08:f2:c9:27:5d:2a:e9:da:03:8e:84:51:69:
1d:08:ca:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:17 2025 by rpki-client