Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
File: 3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json)
Hash identifier: uiTc8DRUuudCmUsqWZcrrJB5X7C/a9wevN2QNmgdxpU=
Subject key identifier: 23:44:FE:B0:3F:65:0D:CD:DF:36:25:13:F4:B2:A5:13:A5:AE:1B:8B
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial: 0196722F6F31332FD6DC50BA9B9C6F5C7EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
Manifest number: 0482
Signing time: Sat 26 Apr 2025 13:00:33 +0000
Manifest this update: Sat 26 Apr 2025 13:00:33 +0000
Manifest next update: Sun 27 Apr 2025 13:00:33 +0000
Files and hashes: 1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: NSS/gYVqwuV/bwZfuU/bnzfh50XWieHFs/nH+KKzE6c=)
2: 44ZqBQfHQ2zRmdEU_-3buvFEgjQ.roa (hash: +FQ7Yxsx54S5E/fsFkrVJI7F04W5149y4n08z4CM2Kc=)
3: A_DdgpizT--rlZ-ab-YZdIwkNLE.roa (hash: hfZgPH/DllsEyaUJjbheadfPG1jNf80tTNcLY41EaYQ=)
4: J29KR6WIqb2jKkibcGzZyVD-APE.roa (hash: cX4I13kG6IWcU4y27MvdylWTn5/srzMdc6rdtCLCSL4=)
5: RVm4PleqV8m6zGkcPiKBRGWO1cI.roa (hash: 3p0hXdk+JmHhQEiq1MExor2f3lGKmZyobEJTxOu9buE=)
6: eHnC0ZqJNqxv3y7mak9QRJMJw-o.roa (hash: +LqAwsdmA3jPuO+2IgsX5kZHBO+HuvNtjbjVsU8ziig=)
7: f25v4uVZY4JbTyMqNXKXGA35WKk.roa (hash: Cmqw5364kiAvR31aujca3rQebhgV1WXm34C80bI/lTU=)
8: xJ0_FRg6EplS-mzoDbYvP1y_mUw.roa (hash: 7evtOJQCPXqekbIigyPzPGbzquzgJixLY3c438GOL/g=)
9: zTq6cqLbZBiRPZ7jFpyiF-kS2nU.roa (hash: 58LUL/KkVIlVDMCj1/N1vyBYpPzDWYfUKAfSIQ9KHh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:2f:6f:31:33:2f:d6:dc:50:ba:9b:9c:6f:5c:7e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Validity
Not Before: Apr 26 13:00:33 2025 GMT
Not After : Apr 27 13:00:33 2025 GMT
Subject: CN=2344feb03f650dcddf362513f4b2a513a5ae1b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:0f:39:e1:e9:68:50:66:4b:f1:7e:c4:5a:
c5:14:ff:03:c9:36:4f:2c:18:c0:1b:1a:26:70:e2:
53:37:b3:68:a1:50:72:84:fb:f8:78:bc:9e:5a:a6:
43:7d:8e:95:99:b8:8a:3a:bf:1c:5b:a1:9a:db:2c:
bf:ce:04:8f:7b:e7:e8:80:3b:8c:2d:1d:3a:23:c9:
0a:b8:8b:cb:60:5d:8f:80:fd:b4:2a:e1:24:e4:d4:
bc:ff:57:97:d7:25:00:b2:52:ef:00:b4:41:fe:95:
8b:58:cb:8b:33:00:25:22:4a:f5:38:f6:21:4e:e4:
38:44:b8:8a:16:48:80:96:a9:c6:f2:a6:45:1a:8a:
34:91:cf:8c:d3:2a:37:51:54:f2:41:6c:1f:5e:c0:
72:5b:7e:ab:d6:8e:06:e8:fe:92:22:e4:16:68:42:
75:4e:31:63:a3:53:8b:23:b1:d9:4c:57:82:40:ad:
20:8e:74:e9:ec:08:da:72:6d:ad:94:7d:24:9e:cc:
a5:52:15:71:14:55:18:2a:80:b0:1f:c2:7a:93:77:
1d:28:ed:bc:07:ef:bf:c8:65:1f:99:5d:38:e1:6c:
b1:a6:f9:86:75:29:c5:57:ed:7d:52:be:a3:08:24:
54:74:ce:db:dd:ab:71:f9:49:37:8c:23:45:31:e1:
66:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:44:FE:B0:3F:65:0D:CD:DF:36:25:13:F4:B2:A5:13:A5:AE:1B:8B
X509v3 Authority Key Identifier:
keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:14:43:14:71:98:c8:c2:20:3e:a2:bc:57:fe:39:43:80:43:
0b:18:bc:fc:84:ad:b9:d8:11:ad:c0:8b:07:e7:d5:7e:23:00:
04:59:39:40:dc:08:cc:e6:5b:a1:e9:7f:4f:dd:f0:23:2a:4b:
57:4b:81:98:fc:1a:f6:15:22:70:60:68:a3:0b:ea:d9:57:67:
b0:e5:32:fb:d8:ac:f9:96:21:a0:cf:ce:1f:13:39:26:dd:fe:
75:27:3b:82:60:78:6f:4f:92:98:e0:33:06:e5:b8:36:bc:da:
de:be:8c:7b:c6:0e:f0:87:78:ef:32:42:62:3e:0c:10:ad:eb:
a2:6e:84:3d:1c:58:b4:5f:06:f2:ba:59:15:cd:25:77:09:bb:
ad:44:aa:54:5d:93:1a:24:ff:57:50:60:4b:5b:5b:28:d6:c3:
e3:8b:97:74:ff:c2:ed:10:35:c4:97:3c:9c:26:9e:8d:79:bf:
2c:3e:ac:8e:e0:3d:d2:61:36:8f:ce:1d:a8:1f:31:74:3c:87:
99:60:24:80:a0:23:50:aa:88:3b:8d:35:48:f3:ce:9d:3f:1d:
58:0e:bb:c4:ff:ac:66:23:29:03:23:2c:2b:b3:80:4c:51:53:
8b:b1:a9:a8:3f:12:34:26:44:36:f0:93:fa:da:ef:fa:17:e5:
94:e0:67:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:17:57 2025 by rpki-client