Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: u4RfVU73AOUhSDm8vQ32lQpRMblAI6l3goUOs/guNNA=
Subject key identifier: 40:60:12:27:60:14:1E:7F:22:F6:88:55:3B:7F:6A:BB:1F:CC:FF:93
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 01963EE67C7E92F18BEC67555E38A919B9D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 14FA
Signing time: Wed 16 Apr 2025 14:00:14 +0000
Manifest this update: Wed 16 Apr 2025 14:00:14 +0000
Manifest next update: Thu 17 Apr 2025 14:00:14 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: LRwX2COgKINBQVsehLDRsfauv3VY9Sw7TcLr1TJi3bw=)
2: cTvIsND0rcbhO2LRnW_ioplG7i0.roa (hash: cEDaT4nTfiZsrwarP2rDKx77YlDRn3t6MrTdDfbMfn0=)
3: ejCuuXb3IPaAQbLGykjSnhsrUI0.roa (hash: 2O/6jwQ1UqJYAgAcDjt8a/MDPHZ138YPWORfwXR/3iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:7c:7e:92:f1:8b:ec:67:55:5e:38:a9:19:b9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Apr 16 14:00:14 2025 GMT
Not After : Apr 17 14:00:14 2025 GMT
Subject: CN=4060122760141e7f22f688553b7f6abb1fccff93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7a:27:e3:1e:c9:ca:0c:df:d7:d8:e8:8d:1c:
67:6e:ca:bf:ca:4a:1c:ed:fb:bc:65:08:93:cc:26:
97:35:86:5a:11:ad:8d:56:b3:7a:96:85:11:16:cb:
e4:63:51:c1:9c:45:21:f5:55:7e:99:52:e4:9c:04:
15:c7:35:d3:a5:a9:a7:8e:29:52:8d:c3:83:f6:b9:
99:c9:dd:54:80:62:22:71:e0:57:3d:eb:c3:c1:1a:
c3:a9:a2:54:55:d3:3a:49:09:a8:2f:3e:0d:fc:97:
7a:e4:0c:81:15:b3:c7:6d:dd:08:1d:38:78:34:a1:
3d:0a:a2:f5:5a:8d:f5:a1:25:2d:94:04:e8:51:0a:
b7:79:96:c0:5f:f5:42:d1:d3:46:d4:45:3a:31:ac:
e5:95:3a:a9:b9:91:2b:14:f8:2c:ee:29:84:ca:c2:
17:5b:47:8e:5e:52:fd:06:bd:bb:93:ef:41:6e:3e:
69:b4:ab:fa:8d:b2:4e:60:cf:ff:60:f2:71:99:47:
ac:23:c2:aa:c0:97:b9:bd:75:59:5c:84:e8:b6:c6:
0e:98:f3:d2:db:7f:6b:39:fd:10:7a:b4:45:71:0d:
f8:cf:a4:ec:98:e3:e0:60:44:83:c4:57:ef:a2:14:
f1:37:c6:8e:c0:69:c5:35:1d:cd:e9:e1:c7:3e:ca:
0a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:60:12:27:60:14:1E:7F:22:F6:88:55:3B:7F:6A:BB:1F:CC:FF:93
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:35:8d:b7:73:cf:0d:79:74:32:b0:a7:bc:7c:a6:bb:e0:42:
1e:32:a2:22:65:eb:5f:1a:14:8f:db:c3:43:df:e3:d2:6f:c0:
68:46:a6:99:99:7d:a3:c9:4e:a9:9f:78:e5:85:85:90:65:ae:
91:24:34:f7:09:7c:e1:f0:ea:ee:7c:fb:1e:77:2a:ef:01:93:
b8:3f:51:db:9b:17:d2:01:04:c5:8a:df:38:3e:f9:c4:bc:3e:
fa:3c:ea:dd:19:71:63:0f:7b:26:e7:2d:b6:b7:fc:09:df:72:
bf:d5:90:27:53:b8:fb:6f:05:c4:69:5d:56:d7:83:a8:12:15:
b5:f9:35:13:18:a0:3e:5f:d5:b4:b7:3c:15:98:a0:ee:17:3c:
96:6c:8e:86:5f:a7:39:5d:39:da:df:54:d5:db:33:a6:76:75:
0c:06:fa:0b:70:f3:8a:3f:c7:26:21:92:30:bb:c2:2c:01:b4:
a6:db:ae:26:46:45:c9:bf:c4:3f:19:c2:ea:ff:e4:6a:7f:ed:
11:4e:9a:52:a4:bc:c8:94:6a:5c:56:ca:0d:8e:ae:f3:1d:78:
9e:4b:7c:d8:7f:03:92:d8:c5:64:ff:7d:db:ae:0f:7c:77:0f:
38:46:d9:09:60:41:a1:b2:80:75:45:79:6b:f5:cd:cb:df:9b:
62:c6:92:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:50:02 2025 by rpki-client