Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
File: 3SBri9IhV0yWWSRDGVuQBXacck0.mft (raw, json)
Hash identifier: 8leXhJiW7AoYBv37mEjO50+yFkZ13wYbJ53b78jMnEY=
Subject key identifier: 6E:96:84:44:22:32:AB:83:80:C0:E0:B4:BE:39:8B:50:95:BB:6B:DE
Authority key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
Certificate issuer: /CN=dd206b8bd221574c96592443195b9005769c724d
Certificate serial: 01965BA7ED982CF7766BAEDF0C411B0C3EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
Manifest number: 14FF
Signing time: Tue 22 Apr 2025 04:00:53 +0000
Manifest this update: Tue 22 Apr 2025 04:00:53 +0000
Manifest next update: Wed 23 Apr 2025 04:00:53 +0000
Files and hashes: 1: 3SBri9IhV0yWWSRDGVuQBXacck0.crl (hash: MsDNQErwxo8pLzeJllk4q5YkbBvWzVEyFEqtcWuQkDM=)
2: 5cvTQhZb21i8dsjZHSMpM2dxt9k.roa (hash: Jg1xw/OZvnd1OLClxYEzrvwZ5HBLqquVy880Rp6Vr+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:ed:98:2c:f7:76:6b:ae:df:0c:41:1b:0c:3e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd206b8bd221574c96592443195b9005769c724d
Validity
Not Before: Apr 22 04:00:53 2025 GMT
Not After : Apr 23 04:00:53 2025 GMT
Subject: CN=6e9684442232ab8380c0e0b4be398b5095bb6bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:13:00:16:6b:ac:cf:e6:b4:02:ba:70:bb:91:
64:ac:0e:fc:df:53:0d:ab:d3:d7:c9:74:fe:0b:11:
28:a3:88:3e:0c:5b:d8:1b:35:40:cc:e6:79:79:03:
63:ed:08:4f:e1:55:fe:1c:0a:fa:b3:00:63:77:d2:
07:24:eb:5b:aa:45:91:b0:c7:10:f7:e0:56:e1:43:
ba:84:3a:1f:2c:b8:48:9a:99:49:bf:bd:31:23:55:
75:24:c2:32:1a:8d:f2:0c:38:9a:c2:c1:c9:ff:da:
9a:48:1d:5f:2a:96:64:c1:10:e1:c7:42:0f:3b:9e:
32:92:de:6e:2f:46:9b:b9:b1:c2:8c:8c:1b:1b:fb:
12:58:22:e2:06:57:1a:e7:50:61:8f:09:8c:b0:37:
a6:d6:d5:c6:4f:79:8f:55:f9:be:09:30:bc:fe:e8:
92:2d:2d:40:ac:27:28:06:b4:3e:a3:a6:fb:c1:eb:
2d:5a:75:6b:f3:d9:2d:d1:58:7b:04:c8:78:b1:59:
52:c2:21:21:2f:bf:3e:c3:19:ef:13:e1:75:07:aa:
1a:78:09:95:97:53:11:74:49:17:a5:1a:71:ed:51:
5b:46:71:82:d6:16:c3:40:ab:5a:1c:fe:52:ed:6e:
fa:b7:77:70:40:54:6e:c6:6e:18:4c:11:d4:28:77:
85:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:96:84:44:22:32:AB:83:80:C0:E0:B4:BE:39:8B:50:95:BB:6B:DE
X509v3 Authority Key Identifier:
keyid:DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:98:5a:0d:ad:1e:43:8e:cf:ca:61:17:aa:eb:08:ab:55:d3:
af:19:63:a7:a1:68:9a:9e:c5:ee:ac:ac:0c:30:8e:f4:0e:d5:
d9:f9:2d:15:01:fe:f7:99:54:e3:ba:2d:ab:0a:cb:11:28:02:
75:21:9f:0e:e1:5b:4f:c4:dc:e8:ea:40:a7:a1:d1:34:d0:02:
fd:18:fe:a1:62:1c:54:a4:90:63:03:ae:75:ee:45:a6:38:d0:
b8:d8:fd:c9:ce:97:70:c9:05:51:ab:70:92:14:ee:9d:3f:6a:
5d:c8:d3:ac:c1:90:6a:8e:70:8e:ac:65:1d:07:d9:b5:27:0f:
f1:a8:a4:a3:de:d2:ec:46:cb:1f:99:1f:e8:2b:bd:0a:26:56:
e5:8e:cb:ce:8e:3b:fc:26:8b:e5:7a:8d:a2:14:5e:51:31:ab:
86:ae:cc:c6:67:f6:30:1f:d9:b1:18:b0:77:00:33:5f:c1:56:
91:c5:97:eb:60:31:ac:c4:11:23:a4:24:a0:62:2f:0f:71:51:
7c:2b:c3:f2:96:78:e9:de:fb:f9:aa:b6:a9:79:16:98:8c:9a:
c2:65:60:c4:87:f2:38:06:72:86:e1:e9:c6:90:43:f0:0b:d6:
5d:53:f7:0f:ad:24:e7:cf:26:78:95:1f:a8:b7:d5:71:93:08:
1b:d9:ea:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:05 2025 by rpki-client