Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
File: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft (raw, json)
Hash identifier: etB6hwOMERimV4ByYy62mUqQ4Q1x3Qhj1us+BbyTQwc=
Subject key identifier: DA:8A:87:13:87:BE:8C:A4:46:DE:9E:ED:75:97:9E:FB:39:01:48:FF
Authority key identifier: DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
Certificate issuer: /CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Certificate serial: 019658DD4D6DF0A497EADB672AB08E8EEB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
Manifest number: 090C
Signing time: Mon 21 Apr 2025 15:00:20 +0000
Manifest this update: Mon 21 Apr 2025 15:00:20 +0000
Manifest next update: Tue 22 Apr 2025 15:00:20 +0000
Files and hashes: 1: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl (hash: cFtg9f82GJ2g9Oq6eXhUGVzoJOztzJpnD+efdpXISIo=)
2: b98tIeNuwYS2XlZhqO3_1p2iGyM.roa (hash: KEycjnHhvF/hQmL5nDtRKOEAJMQLEc4nzVMPySVKhnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:4d:6d:f0:a4:97:ea:db:67:2a:b0:8e:8e:eb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Validity
Not Before: Apr 21 15:00:20 2025 GMT
Not After : Apr 22 15:00:20 2025 GMT
Subject: CN=da8a871387be8ca446de9eed75979efb390148ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ab:f7:53:4f:46:54:76:74:db:2c:c1:f5:89:
49:c8:cb:02:c0:35:30:a4:5a:b9:97:45:48:23:9e:
e1:d8:19:a3:8d:9b:d4:2f:5b:0d:a5:2d:54:b4:16:
a5:b6:04:43:25:9c:48:a3:46:38:72:e4:d0:70:dc:
4f:aa:c5:fd:29:2e:30:a8:26:6b:db:11:46:ff:cf:
d5:65:58:8e:cc:28:0d:35:0d:34:b8:88:77:27:cf:
4e:6d:d3:72:7d:d8:29:6a:57:07:cb:15:a9:43:03:
96:4f:ef:78:04:af:75:31:14:78:f6:a1:e5:e1:ac:
9c:e8:69:cc:30:8e:a9:0f:50:db:ce:6b:f5:92:33:
b5:65:94:dd:f2:6e:50:65:f6:c0:e3:87:7d:4a:3a:
80:0f:b1:a6:81:3a:0f:41:33:0a:87:30:9e:bf:5e:
a1:2a:b8:70:c2:6d:ee:80:9d:27:20:d6:ea:e8:fa:
b1:7b:d6:af:e6:40:84:8e:4c:ad:02:77:f4:ce:24:
40:79:ef:98:8f:3c:52:3d:52:dc:79:da:85:f7:64:
19:ec:66:a1:81:6a:a3:56:3f:e3:3a:d9:0c:71:f1:
05:eb:d4:9f:3e:26:f6:71:c5:df:75:14:52:1c:b5:
2e:11:5b:1d:48:32:56:73:2b:d9:3a:05:18:9d:2d:
fe:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8A:87:13:87:BE:8C:A4:46:DE:9E:ED:75:97:9E:FB:39:01:48:FF
X509v3 Authority Key Identifier:
keyid:DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d8:c2:55:3d:b5:8c:f6:da:8e:e1:fe:48:1b:95:e6:6e:7a:
44:cc:de:0d:f7:2d:d9:bd:ee:d1:7d:6e:94:3a:2e:be:dc:3b:
21:b0:ef:06:09:46:64:30:71:61:c7:a2:7d:e7:ec:80:5e:c5:
61:b8:1d:50:83:82:4a:a4:f3:a1:2b:00:ea:8e:17:2f:45:81:
2e:7e:1b:52:0a:22:6f:a3:3f:2c:34:f3:e0:9b:16:c3:6b:0e:
d3:b5:b7:00:fe:45:94:b9:f9:a2:e6:4b:a5:5a:de:1c:fb:c4:
94:bc:d0:80:54:82:77:c9:20:62:e7:62:14:26:48:54:48:ac:
c8:6e:16:72:70:af:59:03:90:1a:71:11:55:6c:7d:b2:22:27:
ac:c5:2e:e2:05:3f:5e:e5:4e:0f:7c:30:e9:d9:6b:a2:ae:01:
5b:3d:25:2f:50:10:b7:4b:fd:3b:a9:37:86:bf:8c:02:b9:35:
f0:73:a7:3e:a4:33:22:69:5b:9e:26:39:79:23:7d:b3:40:c3:
5f:85:b3:a9:24:da:d2:31:ff:29:c3:06:67:c6:b9:38:04:f3:
1c:dc:8b:a2:94:76:58:6d:62:ea:8b:ed:87:11:ab:05:84:fc:
f2:44:be:b4:1d:10:ff:41:df:67:4e:68:ea:17:46:c6:b5:7d:
0f:af:5b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:05:04 2025 by rpki-client