Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier: 9KvmWHcrr+wmPdjQimVV2Rth9OpTXghc54ZiVuHp+L8=
Subject key identifier: EE:C7:BA:A7:2F:FD:F6:0C:24:17:CA:65:44:AD:D2:39:B3:2E:B4:14
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial: 01965C83787C302F01193A79663B0EDCBD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number: 0A3A
Signing time: Tue 22 Apr 2025 08:00:41 +0000
Manifest this update: Tue 22 Apr 2025 08:00:41 +0000
Manifest next update: Wed 23 Apr 2025 08:00:41 +0000
Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: RrLvEnm4oAsPTzh8FN8WM3ACO1YlRv/ojWQHKUFjOp8=)
2: 17Ijw7DnA-ky4M-qBTdOY4I7ec4.roa (hash: iu+mQ1jbZcSsyxSnbAMCeHovGJfrloyLqIxmClTwTuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:78:7c:30:2f:01:19:3a:79:66:3b:0e:dc:bd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Validity
Not Before: Apr 22 08:00:41 2025 GMT
Not After : Apr 23 08:00:41 2025 GMT
Subject: CN=eec7baa72ffdf60c2417ca6544add239b32eb414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:9a:ee:02:9c:88:77:9a:e9:6e:50:c4:d8:
7c:ac:12:3d:65:bf:ed:5d:e5:c5:c6:e2:af:a6:7e:
cd:d5:ae:87:3c:6c:b5:44:6f:5a:87:65:f8:17:a9:
a5:79:aa:11:9d:c1:43:b1:bf:b1:42:9b:75:a0:96:
d2:29:77:f9:5d:d7:d6:78:b1:d2:b0:7e:1d:87:c0:
de:06:c4:33:eb:2f:15:56:09:1c:65:40:15:cd:ba:
ae:f8:61:db:22:4e:76:e9:4d:7e:74:da:aa:68:e6:
63:32:5b:2e:ee:33:53:90:78:b0:2b:f3:31:60:bf:
7d:78:df:73:11:81:65:36:82:4b:7c:09:7e:8c:ea:
70:ab:13:70:60:2b:0d:2d:05:cc:9c:1f:25:c2:48:
29:aa:1e:43:89:1f:93:49:b1:cf:05:ff:4f:57:3b:
6d:22:7d:ea:8a:00:45:d1:c7:81:ae:2b:4b:de:31:
32:0d:3c:c6:de:0e:dd:ee:59:c4:c3:ad:ae:6c:0b:
ee:e2:fa:88:cd:b1:ec:1f:69:51:6d:fe:77:cb:01:
1f:55:76:06:db:e4:3d:08:b2:f3:df:8c:ea:17:94:
25:06:aa:8d:49:1b:6d:ad:0b:21:eb:de:d7:6d:34:
69:39:f0:2a:6f:0e:b0:f6:d4:b5:a3:f4:b3:d5:fe:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C7:BA:A7:2F:FD:F6:0C:24:17:CA:65:44:AD:D2:39:B3:2E:B4:14
X509v3 Authority Key Identifier:
keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:dc:fb:70:5d:7c:a4:7a:b7:bb:17:bf:80:58:77:c7:d2:0e:
d4:d2:38:fd:1e:70:39:ef:ae:d9:b8:25:15:cc:8a:39:d2:c4:
f4:40:a3:8f:30:a3:e4:d3:7d:37:93:97:d8:d2:dc:48:8d:d1:
1e:4f:17:79:62:7c:11:c1:20:b2:38:34:a7:38:7b:09:84:c9:
28:26:fa:ad:e8:89:4d:af:0d:dc:a7:39:95:68:92:76:4c:25:
c3:17:35:e1:a7:86:53:77:fc:c2:66:21:74:ec:d4:49:57:b2:
27:92:cd:ba:e3:1e:95:f3:0b:50:73:c8:9b:df:a7:37:9c:a8:
39:e8:52:9c:e2:1f:4b:9e:d0:fb:f9:f6:56:b0:58:96:20:56:
f0:4f:0d:f5:8e:11:57:59:c8:c0:34:2a:9b:7a:69:61:16:7c:
3f:d6:c0:b2:3e:e5:27:22:09:17:a5:a6:29:ae:43:e8:0c:84:
b9:cd:1f:ee:9d:1b:ee:98:d3:ec:99:ab:26:14:66:b3:89:db:
f2:ed:45:4c:b0:e0:52:e8:ff:f2:76:41:11:91:97:3f:0b:bd:
7a:69:6b:6e:da:c6:ed:de:f2:98:29:e1:b8:84:57:df:73:65:
d5:54:c0:ae:78:02:b4:a8:9e:7f:aa:99:69:0b:5d:e1:cd:84:
d3:7a:69:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:43:25 2025 by rpki-client