Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File: 3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier: SG1SkpglPvaZR69vvN7fGxvlh+8y/o3HX/iM4uQ3MMY=
Subject key identifier: 31:0E:5A:4E:3F:73:E0:5F:9E:40:86:C2:8C:43:40:75:62:EA:BC:3A
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer: /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial: 01964DEBD57E31B97D7181F4DB3364995EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 12:00:23 +0000
Manifest this update: Sat 19 Apr 2025 12:00:23 +0000
Manifest next update: Sun 20 Apr 2025 12:00:23 +0000
Files and hashes: 1: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: fFnIWUUubw/rUhbXi3fQkOvx0R4+73Huu32zGcYPGsQ=)
2: JiXA3NEuZkH0QXN05zeuUA5jMwY.roa (hash: YFDd4vweHXAu3AFKCBPOWScIToP/BlFEZooHjiGGKLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:d5:7e:31:b9:7d:71:81:f4:db:33:64:99:5e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Validity
Not Before: Apr 19 12:00:23 2025 GMT
Not After : Apr 20 12:00:23 2025 GMT
Subject: CN=310e5a4e3f73e05f9e4086c28c43407562eabc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:93:29:36:d4:51:71:f3:c4:bb:46:52:1d:f6:
ad:49:30:22:33:12:6d:d3:f2:84:20:2c:bb:81:0e:
f3:bc:31:4d:4f:7b:46:14:39:f9:07:f2:dd:71:0f:
e9:c4:0c:14:74:a8:ca:ea:23:44:8d:05:f4:26:7d:
0a:f1:db:74:e5:45:c9:22:dc:c7:1b:3d:d4:0a:e8:
24:32:67:74:e0:23:88:a0:8c:cf:3c:44:9b:15:32:
37:19:b7:ad:b0:51:19:36:0d:64:6b:ee:d8:91:2f:
4b:6d:65:8e:55:26:88:ed:94:3f:b7:5c:f2:38:a7:
52:0f:61:94:61:44:09:8b:00:7d:7e:1b:46:17:04:
c2:37:b2:0d:4f:14:17:e8:f4:e9:cf:7e:53:f2:8d:
29:66:91:bf:7c:71:6b:46:44:00:30:cc:c5:bd:f0:
50:bf:73:06:97:29:f2:c2:7e:76:2f:d2:c8:2f:ed:
e1:8b:30:5e:0f:0d:d2:1b:af:3b:71:d5:4d:a9:47:
98:90:ab:bf:eb:6d:65:c4:6d:c4:a8:a9:b7:08:af:
b6:b5:58:6d:6f:81:9f:8c:4d:ea:e2:b5:96:e6:da:
f3:0f:36:64:5d:6d:d0:78:49:29:ec:9f:2d:d4:f2:
ff:4d:59:8b:15:7a:d0:6d:4b:cd:65:d3:4c:09:29:
69:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0E:5A:4E:3F:73:E0:5F:9E:40:86:C2:8C:43:40:75:62:EA:BC:3A
X509v3 Authority Key Identifier:
keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a5:57:65:de:3b:8b:ab:04:83:74:f4:6c:80:81:33:02:eb:
7f:2c:b1:27:1e:5e:d0:76:d9:c4:34:cc:06:dd:a2:17:dc:5e:
d5:be:c8:53:75:30:7e:30:23:0f:0b:a3:9a:0c:bc:71:9a:1a:
37:9f:8f:be:2f:4a:73:00:41:7b:5a:68:ba:3d:44:7f:80:39:
6b:0e:24:89:ea:5d:b2:7b:1a:79:f6:61:8b:2e:48:32:40:04:
41:0c:ce:d5:d6:1f:69:ac:c1:ff:0d:95:66:98:fa:8a:23:b4:
15:5d:85:12:c0:6f:91:2e:21:9b:7d:bb:7a:f7:9a:9b:1d:69:
54:46:3f:c0:41:10:21:f1:1c:9f:37:af:d4:b5:26:e5:9b:e1:
67:77:97:eb:2f:14:5a:5a:b9:5f:fa:1a:2d:a0:ae:74:56:01:
80:3b:80:cd:06:84:62:77:ce:04:a5:e5:a3:5b:43:8a:be:ce:
74:1c:27:dd:2f:1f:b5:c9:17:85:44:bb:9c:36:73:39:eb:0a:
b3:f8:52:a6:d6:15:34:c7:b3:09:3c:ed:72:b8:57:2d:bd:c9:
42:5c:3e:bf:b5:5d:9a:e7:b3:da:90:94:70:a4:c2:81:60:73:
e9:28:ee:1f:3a:6c:d6:a5:cd:a5:55:c3:1e:29:ff:0b:33:90:
1f:aa:a0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:33:06 2025 by rpki-client