Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
File: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft (raw, json)
Hash identifier: tkqTu/fAHsyT0U2RVv6rHqL7K9nif6Mahx6beIgHgzg=
Subject key identifier: 9F:D7:4A:FF:39:F6:54:8E:68:E7:5D:90:63:C5:F9:AE:B6:C8:F4:F0
Authority key identifier: DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
Certificate issuer: /CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Certificate serial: 0196771E9D2636C69683CDA1053D866117B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
Manifest number: 0B6B
Signing time: Sun 27 Apr 2025 12:00:17 +0000
Manifest this update: Sun 27 Apr 2025 12:00:17 +0000
Manifest next update: Mon 28 Apr 2025 12:00:17 +0000
Files and hashes: 1: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl (hash: GImPz3aFqspytUqluqrfAqychGjh6UFMQAPZ/2LBIDU=)
2: bJQvsBvbQPoYZP2_LHbwvNkWsqI.roa (hash: 6bSavq+Amxtx/G0AW8vYM/flHBEJUHj3DU6R3v4xOug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:9d:26:36:c6:96:83:cd:a1:05:3d:86:61:17:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Validity
Not Before: Apr 27 12:00:17 2025 GMT
Not After : Apr 28 12:00:17 2025 GMT
Subject: CN=9fd74aff39f6548e68e75d9063c5f9aeb6c8f4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:60:96:58:e2:56:1f:e3:3b:ea:a0:9a:92:
c0:d5:c1:05:e3:bc:41:bc:fe:28:a7:94:bd:f5:57:
d9:a8:c9:32:bf:47:d5:e5:63:06:4c:43:47:ec:58:
11:fc:2a:67:34:a2:96:09:15:cb:ba:9e:0a:21:20:
2a:15:91:dd:13:f4:4d:34:1c:14:5a:e3:ab:c8:90:
be:fb:5a:37:fb:ec:da:2d:a3:c9:59:e3:9f:25:ca:
3c:b1:9a:6c:f1:f3:2f:4b:32:72:98:3c:1d:62:94:
c1:e1:04:6a:08:0e:5e:13:ed:a9:01:4d:8c:d0:09:
77:38:4c:7f:76:54:28:b3:03:c9:d4:ab:75:89:89:
67:3e:31:a5:98:f3:b4:4e:b0:32:b2:e3:7f:c3:ac:
5b:4e:cf:77:ac:52:ce:bb:c4:7b:91:5d:59:b9:1b:
1c:34:b7:c2:de:41:e6:88:b3:58:29:77:cd:db:82:
f6:7d:f4:d9:a0:fd:4d:ea:49:28:2f:8b:a4:7f:a0:
fa:b2:c5:63:d6:74:69:bf:e3:0e:f1:cd:8b:2f:36:
fb:c6:17:5d:ee:da:19:e4:ea:a6:b3:2e:66:af:3a:
be:cf:5b:9e:4c:d0:95:ea:d0:84:bc:41:03:fb:a9:
1a:9c:ea:c1:47:32:8b:f3:9b:4b:86:64:1b:47:15:
7e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D7:4A:FF:39:F6:54:8E:68:E7:5D:90:63:C5:F9:AE:B6:C8:F4:F0
X509v3 Authority Key Identifier:
keyid:DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5b:b0:d7:76:1b:54:74:3d:c6:77:1e:81:1b:7f:3c:f5:15:
31:c2:67:d9:6e:43:1a:3e:8e:db:72:9a:45:1c:c4:f6:85:b1:
31:1a:f7:c8:5d:87:c2:5c:57:8a:b7:b2:6d:7b:a9:05:c2:1a:
12:79:56:97:87:de:da:fa:d7:a2:d5:d9:79:8e:35:09:cf:a3:
81:0e:2e:37:1c:84:f1:d7:a0:24:c7:b3:2f:98:57:f6:04:ae:
2b:fb:1b:70:1f:ca:08:44:01:61:c6:64:fc:d1:03:25:56:59:
f5:ef:7e:f8:c2:5d:3f:e3:2a:d5:4b:73:ed:cb:7a:03:36:3c:
78:45:31:b9:c5:d6:48:06:08:5a:b4:ae:0a:37:da:f6:ef:9f:
f2:c2:08:21:dc:f5:d7:78:81:82:00:26:06:b0:82:b1:ee:da:
3a:4a:ae:c8:c5:fa:47:20:6b:63:41:9b:b0:97:8c:8e:f1:35:
3b:c8:5e:25:ff:a7:f9:4a:c2:23:dd:43:69:ff:80:c6:ff:e3:
0f:13:08:e1:dc:96:ff:09:c7:91:72:c6:46:ae:09:82:ad:3b:
d4:90:41:39:87:57:3b:49:62:c5:27:91:24:ae:29:0f:71:ee:
13:9e:41:53:22:35:5f:3e:72:46:9f:f2:14:fd:f4:52:46:5a:
37:cb:dd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:17:40 2025 by rpki-client