Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.mft
File: 3VP2PxOgyVKgefRXihDtv246pYs.mft (raw, json)
Hash identifier: SyAgWdAMXsQ1GUPh5hRarltEZiKUnI7/ArUWa/eIaaU=
Subject key identifier: B1:45:F9:CA:25:F1:28:5E:E4:38:09:6C:60:C1:DA:4C:94:FD:DE:AD
Authority key identifier: DD:53:F6:3F:13:A0:C9:52:A0:79:F4:57:8A:10:ED:BF:6E:3A:A5:8B
Certificate issuer: /CN=dd53f63f13a0c952a079f4578a10edbf6e3aa58b
Certificate serial: 01965D965268395529CF8D6C12C61B8220A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.mft
Manifest number: 1471
Signing time: Tue 22 Apr 2025 13:00:54 +0000
Manifest this update: Tue 22 Apr 2025 13:00:54 +0000
Manifest next update: Wed 23 Apr 2025 13:00:54 +0000
Files and hashes: 1: 3VP2PxOgyVKgefRXihDtv246pYs.crl (hash: lTgvKLZIUAqnsJmy2noAjZ1sMFHk2BrD+BEhkwPZX+Q=)
2: 42kA1PGA8no_1otOl8ofpG12v3U.roa (hash: xUXq/2K3klfSiQDOaLNutcuHJyhv84PrwrhgM3PQUAM=)
3: LkJec_DKJKY3truWJ2sI8NcpsVM.roa (hash: b6Bvufz+fttjZflFNHVPDFRMwRxNIOBdrZIhpdVt6mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:96:52:68:39:55:29:cf:8d:6c:12:c6:1b:82:20:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd53f63f13a0c952a079f4578a10edbf6e3aa58b
Validity
Not Before: Apr 22 13:00:54 2025 GMT
Not After : Apr 23 13:00:54 2025 GMT
Subject: CN=b145f9ca25f1285ee438096c60c1da4c94fddead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cc:11:d3:10:1f:d0:50:f6:8e:69:a1:7d:a9:
06:d3:33:85:35:81:09:40:ef:90:47:66:11:e3:5d:
93:c8:08:97:c0:41:58:ff:7c:5e:2a:71:af:0a:2b:
8e:2b:f0:c7:77:0d:2c:71:21:67:d4:d6:4a:89:9e:
88:00:f7:56:75:b8:db:95:72:5b:af:d5:b0:12:74:
b1:71:91:8d:da:ad:2e:e0:17:08:18:74:72:fa:9e:
4f:9e:4f:31:d5:98:02:87:b5:dd:47:44:a3:45:fe:
fc:06:0b:8d:20:1f:f1:82:20:3b:65:66:83:bc:fb:
ba:5a:1a:45:ef:be:5b:a1:22:54:a2:de:de:85:3e:
79:32:1c:ba:2a:1a:18:e1:84:00:af:b4:18:87:67:
64:51:32:5c:e6:c8:13:00:4a:6c:b2:64:a5:f9:dc:
4f:8f:bc:f3:f5:4a:d3:53:f2:39:76:43:d5:dc:92:
11:78:d4:60:39:53:0b:c0:22:2d:c9:96:0c:fc:67:
03:d2:7d:39:05:31:b8:dc:29:b8:a8:8f:71:9e:bc:
7e:7a:b4:b0:1c:09:35:c6:09:b8:47:20:5a:65:84:
1b:58:c4:e7:bc:f0:d2:ea:7f:c6:1e:e2:1c:b8:e1:
ad:35:8d:10:fe:01:82:35:c5:e2:e8:d0:25:74:c4:
12:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:45:F9:CA:25:F1:28:5E:E4:38:09:6C:60:C1:DA:4C:94:FD:DE:AD
X509v3 Authority Key Identifier:
keyid:DD:53:F6:3F:13:A0:C9:52:A0:79:F4:57:8A:10:ED:BF:6E:3A:A5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:21:0d:e0:d4:f7:82:13:5e:11:e9:a1:9c:4a:60:58:2a:f3:
94:85:a9:bf:c5:cf:62:1c:8c:f3:05:4f:12:3b:ce:74:f7:8c:
27:84:4d:78:98:66:13:6d:85:73:94:93:b5:4c:3c:5b:2c:1d:
48:e4:ef:c4:06:74:38:da:a8:89:03:90:ec:06:5b:dc:fd:62:
4f:3c:fb:6d:22:e6:d1:1d:d3:e1:6f:dd:84:92:09:a4:af:a8:
70:25:24:d6:ad:56:94:fa:16:3e:29:74:7d:62:83:11:a6:9b:
f2:22:8a:13:e0:22:30:ea:12:c7:e5:dd:94:14:c6:8f:0a:58:
0f:85:cd:52:7a:48:1d:80:3a:e9:9d:b7:80:74:4d:ab:74:24:
01:66:4e:84:18:ec:1c:d3:d8:9b:b9:b2:92:24:9d:6a:c0:c8:
a7:13:0e:b9:6d:6c:65:ab:21:cc:61:80:b2:77:71:62:da:44:
6b:20:1c:93:ca:38:2f:6d:43:11:00:4e:82:a6:ac:71:f8:7f:
ea:af:8d:47:56:1d:94:dc:5c:e0:00:36:14:15:39:47:09:bf:
81:17:1c:e3:34:40:13:d3:aa:17:ee:b4:5f:15:24:f7:4c:03:
39:31:a5:ed:2c:9c:02:d7:dc:54:1f:b6:5d:8c:f9:44:30:66:
6d:8a:d5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:04:54 2025 by rpki-client