Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: xBpYUaUPm8KrlKxpqhDhzGYCNGevPmpCqJj5mZFuejQ=
Subject key identifier: 60:3F:A2:F6:EB:E0:FF:A6:4E:1B:01:17:B7:89:8D:94:6E:5F:EE:4B
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 01965F4D902A06361DA5133BC0F158D15016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 0E19
Signing time: Tue 22 Apr 2025 21:00:40 +0000
Manifest this update: Tue 22 Apr 2025 21:00:40 +0000
Manifest next update: Wed 23 Apr 2025 21:00:40 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: eVR6b8z3td5wgU155jraQQfRMazts4yMgkuDnZaen58=)
2: f98-QGGyvPNag3NBWDooTVrQ2vI.roa (hash: HJhPbHQVg92t7q01K4xm1xNnj11AYPaciJd3bC3Ng+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:4d:90:2a:06:36:1d:a5:13:3b:c0:f1:58:d1:50:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: Apr 22 21:00:40 2025 GMT
Not After : Apr 23 21:00:40 2025 GMT
Subject: CN=603fa2f6ebe0ffa64e1b0117b7898d946e5fee4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:38:6b:cc:5a:d0:37:d0:b8:ad:c1:9e:96:4f:
e9:f8:ba:ee:24:08:52:53:70:45:3b:64:96:a1:5c:
80:22:d4:07:14:c3:79:a0:f2:af:74:e1:e4:eb:11:
e2:72:7f:c0:9d:94:7f:cb:66:a0:1f:ae:95:3c:71:
96:61:e1:eb:b1:5d:a3:c6:27:32:7c:24:4a:08:8e:
54:66:81:41:e8:e8:9c:f3:26:65:5e:be:f4:e5:0b:
26:f4:c3:e7:82:e4:7f:cb:96:be:d7:3a:8c:c8:5d:
41:a4:76:3e:1f:2c:9e:d8:9b:2a:13:85:17:c1:19:
ef:e7:00:a4:80:f0:49:bd:d4:8b:b9:ef:60:3f:1c:
67:93:25:0e:c3:29:c3:7d:5b:90:2a:63:e2:b6:97:
c2:83:f1:b1:d0:8c:98:4c:45:a8:8d:4f:67:14:7c:
a9:76:c7:90:b7:64:ee:a3:ca:d8:a5:f2:99:5b:9b:
08:7f:98:ef:02:74:3d:7a:f5:3d:5a:d3:47:e3:f1:
cb:6f:15:83:d7:22:ee:0c:ea:0d:91:42:ef:98:13:
24:62:19:97:29:7a:be:be:a4:08:19:8a:97:af:af:
b7:40:fc:9d:ab:3a:08:84:de:7b:38:ba:64:f9:70:
c5:ae:83:90:68:62:6b:18:b4:54:b8:8a:be:4f:79:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3F:A2:F6:EB:E0:FF:A6:4E:1B:01:17:B7:89:8D:94:6E:5F:EE:4B
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:76:7f:78:79:5d:aa:1f:7c:dc:3a:37:60:74:01:45:04:24:
f9:d1:ba:d7:66:9c:ef:a0:4b:bb:50:fd:95:15:d8:06:ee:9b:
45:fb:b9:19:12:0f:c5:77:69:d0:55:ab:00:ef:64:b4:5b:2c:
34:b2:92:3b:cf:26:06:4a:8f:05:52:23:d7:53:4b:ae:98:f5:
ed:b5:7b:dd:80:d3:2c:ba:93:85:bb:88:b4:34:9e:d7:0f:d4:
bd:2a:20:34:d3:0b:08:ec:85:3a:6f:5b:be:87:aa:06:1f:50:
3b:6f:ba:55:a1:d9:f1:cb:3b:ec:3b:9b:38:ea:75:8f:02:3a:
01:6b:65:b5:8a:30:78:4a:aa:49:1e:4e:79:49:3f:71:8f:81:
df:14:97:e6:69:81:ec:d3:3f:53:3d:f1:65:a0:ca:52:69:c3:
7b:e8:ad:36:2e:04:e9:f8:1a:b1:27:c8:e3:ad:c5:a1:3d:7b:
46:97:23:eb:e5:45:55:cb:48:4c:ea:e6:a3:e8:b6:30:10:62:
61:b8:43:22:6a:39:81:e6:b8:c9:c9:5e:e4:8c:a8:d2:c0:72:
80:ed:86:64:91:24:cc:5e:4b:73:51:88:3d:d4:1d:5c:31:c9:
9b:5a:15:96:56:d3:64:3a:e8:a2:76:de:d3:79:2f:c8:05:03:
9c:4d:46:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:26:49 2025 by rpki-client