Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
File: 3SppXEEiHdjt3PxcS1zAt4nLlTs.mft (raw, json)
Hash identifier: 87ZyVJdr2DKfwaTblHc+YxsHIoBUTfRaL0js7vIMPls=
Subject key identifier: 5A:37:5B:C9:41:85:06:63:E0:34:EE:19:B7:17:B8:E8:60:32:2F:8F
Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
Certificate issuer: /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Certificate serial: 0196507EFC281DCB07F3685D684FBA847F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 00:00:21 +0000
Manifest this update: Sun 20 Apr 2025 00:00:21 +0000
Manifest next update: Mon 21 Apr 2025 00:00:21 +0000
Files and hashes: 1: 3SppXEEiHdjt3PxcS1zAt4nLlTs.crl (hash: skNCx5XJnC7sLs1ifRVsWdUiIYaJprgAR7pqkj3esnM=)
2: ZxKbEdzKxauu7o-Y7eoipbP5kS0.roa (hash: bVgUBiwiMttSarotQ+bYBGzvg0m/rWkM8yb5LV2CZwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7e:fc:28:1d:cb:07:f3:68:5d:68:4f:ba:84:7f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Validity
Not Before: Apr 20 00:00:21 2025 GMT
Not After : Apr 21 00:00:21 2025 GMT
Subject: CN=5a375bc941850663e034ee19b717b8e860322f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:31:f9:48:55:d6:50:e6:01:a2:24:a0:9d:
c2:ba:3d:43:c0:90:bd:3f:d2:a6:13:70:5a:f7:fa:
99:04:c7:11:68:69:6f:73:6f:ee:d1:b4:81:be:e2:
ff:e8:1f:de:fc:60:1c:25:6b:d3:e6:d4:0c:3b:3b:
51:4d:12:b1:32:80:2b:ff:9f:ba:8f:31:07:63:cd:
6a:6c:5a:80:16:f3:3c:90:92:87:37:b4:c2:f8:55:
53:cb:e8:b4:8e:98:8f:5f:4b:8f:66:48:d8:01:63:
da:e7:31:54:88:4a:5b:3f:5e:2f:1a:42:c2:db:8c:
9c:ca:28:bb:2e:78:23:b5:5a:d9:81:8c:96:4d:20:
7c:4f:dc:0a:ef:6e:2c:36:f0:52:fc:2d:bc:77:5d:
54:8e:8d:cf:ea:2a:1e:96:a2:76:09:2a:42:95:fe:
0b:97:4c:ce:6f:ea:a4:e6:f2:39:42:97:fc:16:ab:
27:1f:32:d8:05:52:8f:d4:bd:bc:d9:11:78:1f:44:
bf:d4:8d:a4:07:ea:d7:f2:91:d0:c1:e8:10:01:17:
c0:e2:74:2c:22:17:89:a6:0e:67:14:5a:ac:3e:19:
99:f7:3a:5a:c6:e3:c8:5d:21:79:46:62:97:16:38:
da:a9:fa:19:ff:f4:02:e3:8f:a8:5c:59:f0:91:75:
76:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:37:5B:C9:41:85:06:63:E0:34:EE:19:B7:17:B8:E8:60:32:2F:8F
X509v3 Authority Key Identifier:
keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0e:35:ee:c2:cd:52:a1:73:d9:f4:52:39:f2:55:05:cf:78:
84:f1:a3:e0:c7:5a:da:2e:a2:78:f1:57:b7:91:67:27:80:31:
c4:46:e2:eb:7d:e6:84:b8:14:16:b6:5a:04:bd:af:3d:6d:1e:
86:3d:e9:02:4c:8c:a6:f9:09:85:5b:67:a9:17:b5:a8:15:70:
eb:49:7a:75:f1:d7:d0:2f:ad:a6:ed:a0:e5:b7:26:d9:30:54:
11:42:1b:27:5c:00:c6:50:eb:b9:d4:86:0f:5f:86:ba:5f:a1:
d5:ca:aa:71:4e:27:d8:83:4a:06:98:31:d4:c7:98:f1:8a:3c:
2f:0f:fd:05:ec:75:31:54:ca:86:d3:e7:9e:0e:53:83:be:2d:
5b:c3:de:56:fa:40:cd:4a:06:d0:71:e0:bf:3b:88:d7:80:27:
aa:4a:70:8b:a1:36:2f:5f:1f:2b:6c:fc:59:34:8b:10:d1:9a:
02:c4:98:2d:16:bf:84:e6:df:9a:09:8d:37:e7:c5:b7:ba:23:
45:7e:dc:ca:e1:59:56:10:34:90:93:e0:c6:e0:c5:0c:bf:95:
97:10:37:60:a2:36:41:60:e8:15:7f:fe:40:5d:33:5d:cb:fc:
83:d9:a7:b3:21:5f:a0:31:31:54:d1:df:6e:23:24:eb:3f:e2:
8e:5d:31:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:01:08 2025 by rpki-client