Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
File: 3R2uzTCut0ZSu92l2tlnbOSIqkk.mft (raw, json)
Hash identifier: Yt8m+mIT98heGYM63eLvPTM3540TgzBS1pDKBEDp0wA=
Subject key identifier: 50:10:9C:1B:DB:72:81:D0:3B:0A:73:17:62:5A:EC:B6:79:C2:58:1B
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 019654C9A8ED2D54154C457F62BA6CF95A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
Manifest number: 0824
Signing time: Sun 20 Apr 2025 20:00:23 +0000
Manifest this update: Sun 20 Apr 2025 20:00:23 +0000
Manifest next update: Mon 21 Apr 2025 20:00:23 +0000
Files and hashes: 1: 3R2uzTCut0ZSu92l2tlnbOSIqkk.crl (hash: I4dPoPCD68rm5xPBfqu6cIfhP59kqPSVF5wr51PYdiw=)
2: 3jwAJkscmhb8NSw4un_w0ZUqE_E.roa (hash: /Q2oG/fmxx/4QlsXXEqOyxHV9Ye6s1RkScscquc109A=)
3: 4mOa1eiOJdcewQ4JsIW-qskCauo.roa (hash: iU5a4TzwFm2kJsvICm/D9T1ZRQoz++Cq67dw1/HeL2g=)
4: CXGUOccTDu6x1YyIQfa-qjSpPdk.roa (hash: r4qpBtId2VEmuyzWlIPXdikWdV98Yneiil1e7VOsia4=)
5: IlOsEMD7ILB9j5FhhZ10NN6XXx0.roa (hash: gwOuiCu86d+6YjbDxDzDd3u72bl4nQy8FzU+NPDlo3k=)
6: cMeqdhzIVxayTI5Te-oZwPQzjz0.roa (hash: opO/yGSPCMGlHiRXXAkyr0DveRWYRoFkmjqGZrYYDFc=)
7: dsfkSXYJLfZWJjDQMc0Y0owm7FA.roa (hash: W0p5k/KWht0yDd7EzO060gDAd+rVO0Q+Y0m/UDAfM10=)
8: z21uLBAl7J5qNeu7_wTnfr1gN3Q.roa (hash: hGK3SDsyu3nnm6fMnZyOrn3oCumiT/HHk1hSsPcxxpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:a8:ed:2d:54:15:4c:45:7f:62:ba:6c:f9:5a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: Apr 20 20:00:23 2025 GMT
Not After : Apr 21 20:00:23 2025 GMT
Subject: CN=50109c1bdb7281d03b0a7317625aecb679c2581b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:53:92:59:51:90:e7:69:68:eb:b7:7a:20:
00:fd:96:fc:52:8d:3a:fe:f1:f5:8c:77:f3:9b:68:
67:8c:07:5d:c3:3f:25:62:48:e1:7b:70:93:96:8c:
5b:ea:36:52:a8:be:d1:8b:b8:f6:dd:68:85:31:a0:
3f:d4:6f:68:1f:cf:16:26:73:32:24:b3:03:d9:88:
b3:1a:15:2e:69:b8:74:0b:28:13:96:04:01:19:e5:
b9:4f:28:8f:d4:54:14:0f:54:5a:db:6a:81:13:22:
b1:0d:60:a9:8b:1b:3c:98:3a:d1:b0:58:30:7e:8c:
f1:f7:64:b1:7e:ac:f9:b2:6f:77:a7:6c:e0:c2:e1:
bb:4a:f0:51:a8:a0:12:f5:51:43:f6:43:88:11:a0:
be:ff:2a:6f:ab:40:2e:bf:11:b8:d4:2f:8b:e4:59:
32:55:eb:41:52:51:a6:70:5f:bb:80:f1:c2:3b:e9:
0e:50:ea:44:ed:db:d4:f0:fc:e1:3a:de:35:82:99:
35:01:23:ff:18:bc:5c:e7:0f:fe:4f:85:97:c6:c4:
d5:79:bf:3d:47:b2:bc:3f:48:df:aa:36:b1:74:75:
8f:b6:bf:c6:2a:ef:7f:bd:cd:7f:40:1e:16:45:4c:
ff:a3:30:e7:c7:09:90:b0:00:cf:99:d6:9f:74:cf:
32:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:10:9C:1B:DB:72:81:D0:3B:0A:73:17:62:5A:EC:B6:79:C2:58:1B
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cc:0b:31:1e:f3:2d:60:20:ab:f1:e0:37:11:7e:c1:ad:bf:
7c:7a:52:85:ce:66:32:a1:9d:49:3c:8f:c8:56:39:65:93:48:
6a:ea:cb:34:3f:dd:a1:af:29:fc:f3:86:ef:4c:cc:09:a2:7a:
b7:41:49:76:15:9a:07:de:23:80:d8:99:c1:d2:ea:af:dc:f2:
a1:62:67:6d:36:bd:0a:8c:c6:dd:71:29:fc:c1:33:ef:d5:36:
3c:c8:43:ec:fc:ce:38:ab:9e:94:fd:63:14:9c:81:fe:94:ed:
d2:32:ae:e7:12:0d:25:a1:da:40:0e:69:f2:3e:47:33:6e:04:
82:e8:15:74:1d:b4:58:47:36:93:9a:17:58:2f:b0:34:fd:3c:
b2:94:ee:6e:a6:2d:76:5e:b6:48:ce:2c:d2:14:57:cb:52:53:
e1:2d:de:21:d5:2c:3d:84:8e:76:7f:1a:3a:28:01:92:f9:b8:
7b:6a:b5:d5:09:e7:f7:39:64:fc:32:b2:7e:93:4a:24:db:5e:
d8:27:23:0d:bb:6a:f8:9e:ba:3b:3a:3a:23:b6:a5:98:22:c4:
9d:f2:86:02:d0:52:5b:a1:19:5b:8e:02:ca:5c:eb:11:9d:3f:
16:e5:ac:2d:f2:11:dd:74:1c:45:7a:24:22:67:e2:a8:ed:f1:
44:73:b0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:01 2025 by rpki-client