Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: FBNeJ3zvUQBhqp2JyXN7iwjWEoyMnMb0LvpV38IeIXM=
Subject key identifier: 96:29:0F:D4:8D:82:1D:83:C7:B3:92:15:9C:57:3C:AB:EA:B6:A9:69
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 01967ED8503DD94E8D4324A51C6BD3A56F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 1054
Signing time: Tue 29 Apr 2025 00:00:27 +0000
Manifest this update: Tue 29 Apr 2025 00:00:27 +0000
Manifest next update: Wed 30 Apr 2025 00:00:27 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: RE9n1D4krEnfb+EzZm9bFu5/Bzuh0Bs8/D2uoJZEFjY=)
2: _Sn3RhfY--fiVliyrSpcw_Dpx8U.roa (hash: 0DlsX3tbgemelzimR5EC4gu2Xnu0fF/hzb1n4QMYZI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:50:3d:d9:4e:8d:43:24:a5:1c:6b:d3:a5:6f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Apr 29 00:00:27 2025 GMT
Not After : Apr 30 00:00:27 2025 GMT
Subject: CN=96290fd48d821d83c7b392159c573cabeab6a969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:ed:9e:67:22:43:37:66:5f:75:58:6b:b5:
e0:91:65:ae:54:69:64:28:e6:e3:cd:b3:11:37:77:
53:09:e6:71:96:fa:65:57:d5:44:75:56:de:e5:7d:
7c:28:64:80:b4:41:83:44:33:a1:bc:66:5b:37:4a:
61:1a:ae:a3:2b:4f:20:fb:af:fc:50:d5:4b:d8:5b:
b1:86:aa:58:f9:e5:64:be:b0:d6:fd:6f:8c:96:93:
d8:33:6e:54:e3:15:8e:47:6e:28:ff:df:38:e9:93:
14:d9:0b:fc:61:dd:8b:da:ad:68:29:25:0f:b5:85:
24:9e:41:2f:20:bd:5b:e5:ee:f8:a4:9b:3d:0e:5d:
88:de:68:20:b7:88:82:e8:2d:b7:50:67:77:79:c7:
9d:f6:ad:43:8a:a4:86:50:38:b3:88:ac:97:ba:4e:
6e:7f:f3:78:56:42:bb:a4:1e:ac:42:dc:79:f1:fc:
a8:80:02:b6:80:2a:dd:5c:a3:91:6f:98:d1:87:54:
0a:a3:6c:82:f7:f8:b4:5d:43:2d:00:6f:d6:2d:3e:
42:a5:27:59:32:7c:34:23:6d:cb:68:a0:5a:17:cb:
6d:3e:f7:59:7f:10:19:57:b6:92:a1:01:08:b5:ea:
c7:76:b6:f5:cf:54:f2:ee:9f:0a:5e:d4:b1:8a:7e:
6d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:29:0F:D4:8D:82:1D:83:C7:B3:92:15:9C:57:3C:AB:EA:B6:A9:69
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a3:1b:29:e7:f2:14:ad:56:0d:4b:ff:10:47:c5:b1:60:cf:
62:c3:43:ca:3c:49:5b:94:d4:a8:3c:a2:c3:19:ff:b4:3d:1c:
1e:ac:3e:5b:41:c4:b4:5f:82:7d:db:50:26:9d:fd:53:67:ca:
7f:ac:93:19:00:95:30:de:97:16:29:53:77:4f:45:24:f1:62:
2e:57:9c:9a:7c:99:90:c1:f0:e9:f1:7f:3a:ba:c4:cc:e6:06:
75:3c:25:2f:a7:a6:b4:e7:fd:6d:31:58:da:e2:6e:72:42:a1:
84:dc:83:60:9d:17:50:5c:ce:c0:14:e9:d5:19:2d:58:a9:51:
35:80:8a:69:db:67:01:12:b6:f2:2d:d1:17:19:2f:16:1d:4a:
1c:cc:25:70:f3:7c:04:3a:a8:33:5b:f4:16:c5:ae:c9:bd:80:
34:e1:6e:49:bc:70:c2:8a:03:5c:1d:0c:1d:21:8b:51:a5:a2:
b3:62:ea:55:18:9d:b0:73:0f:37:11:b1:65:7d:54:0d:a8:a9:
94:fd:61:b1:e2:03:e6:30:10:d7:13:54:8d:61:bb:0e:4c:48:
86:70:61:7a:8d:b8:89:ed:33:2f:2e:4b:90:64:a2:01:02:c6:
ec:63:5d:2d:01:d1:be:5d:19:6e:db:4a:fb:d3:1d:cb:e8:c1:
14:80:cd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:20:26 2025 by rpki-client