Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File: 3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier: o35rkUp9ZZkSCB1oIuvH8stTHedFR4totCzvKsbi0BM=
Subject key identifier: 18:7B:72:1C:59:37:34:9F:CD:E6:2E:86:A8:E5:DC:5A:AB:F2:BE:00
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial: 019654C9DCD077D1543A5C37BA8E9B40BE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number: 130B
Signing time: Sun 20 Apr 2025 20:00:37 +0000
Manifest this update: Sun 20 Apr 2025 20:00:37 +0000
Manifest next update: Mon 21 Apr 2025 20:00:37 +0000
Files and hashes: 1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: 9wtr6QfJofbVUJUMnR4xVTJzH+DgLkfpszbSq1FphuU=)
2: UXWSLhVlTXSrRh4vQjiJGZfTc28.roa (hash: GwWbj030dqXFgPoZUUmrOygMcwYdz6TWzzcKF95NLWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:dc:d0:77:d1:54:3a:5c:37:ba:8e:9b:40:be:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Validity
Not Before: Apr 20 20:00:37 2025 GMT
Not After : Apr 21 20:00:37 2025 GMT
Subject: CN=187b721c5937349fcde62e86a8e5dc5aabf2be00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:08:2f:0d:2f:27:8b:90:ee:fc:40:8b:05:24:
4c:0a:60:39:51:75:37:df:0b:5c:c0:03:c4:16:dc:
5e:44:26:96:6b:77:f8:3c:c5:f0:1f:54:d7:92:b5:
37:89:dd:ba:48:e6:88:e3:e8:e7:7a:1f:cc:49:4c:
a7:4f:a4:32:c0:f9:d1:89:4b:39:ab:11:e2:33:0d:
d9:7b:3c:b0:4f:92:dc:56:99:45:8d:98:74:a6:20:
65:be:68:37:aa:f5:e8:60:00:51:5e:3b:0f:11:3d:
bd:9b:8f:66:2f:ae:52:fa:2c:ce:6d:d0:2f:0b:a5:
a1:2b:71:b0:4c:b4:b8:3c:06:47:7c:ec:b0:1b:aa:
0c:6a:8b:e7:79:55:75:2c:ad:4d:02:94:28:ef:27:
b1:14:8d:9b:8b:50:de:3b:7a:08:1e:86:5d:f6:b0:
b9:9c:6d:f7:5e:e2:d6:43:69:45:26:84:1e:be:38:
5f:de:20:5d:f9:fc:94:e6:29:bb:92:8c:2b:6f:e2:
83:fb:21:03:76:26:f4:8b:a9:7d:bc:15:b4:14:ad:
be:5f:e6:74:31:10:37:83:62:d1:e9:c7:ac:33:1b:
c7:5e:de:83:b1:6c:34:6c:80:cb:41:f7:c6:fb:c1:
02:11:ff:58:e7:a7:63:7b:91:e4:0a:35:d3:30:90:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7B:72:1C:59:37:34:9F:CD:E6:2E:86:A8:E5:DC:5A:AB:F2:BE:00
X509v3 Authority Key Identifier:
keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ae:fa:18:28:87:ec:7f:52:51:27:3d:ac:0d:45:25:ba:cd:
63:ca:6c:5a:71:28:51:bb:fa:7e:6d:8c:65:4a:07:9c:6b:03:
5c:f5:20:5d:ad:a8:64:f4:74:3b:74:c5:ae:c3:44:0c:21:24:
57:bf:66:81:7c:e2:2b:8b:f6:1e:4e:3e:92:8e:fc:0f:04:55:
e5:db:a1:78:19:60:29:e0:4d:61:92:9d:c5:a5:79:35:a8:83:
3c:39:42:10:34:f8:f8:b2:fd:b0:44:07:17:e7:0e:20:f2:a7:
6d:f0:90:4e:f8:92:9d:7b:b3:d8:a3:95:b2:39:52:11:a4:86:
ac:3e:d0:8a:6d:07:9e:1f:d5:b9:06:0f:d6:f6:25:41:4e:96:
17:ba:5b:90:5f:e9:fc:b1:01:ec:1a:53:c6:df:ff:87:9c:4f:
7e:75:4b:b7:28:a4:77:84:20:f4:a2:72:ec:ed:4a:9a:56:29:
30:bf:f5:47:0e:11:cf:52:40:9e:24:ac:fa:f4:a1:44:50:63:
8e:0c:3e:a3:ca:9d:18:0d:ec:e7:1f:f6:af:64:a1:49:20:a5:
da:73:6e:d6:f4:88:26:53:ff:7e:fb:a9:de:9b:ed:ce:a4:87:
f0:6f:32:a1:3c:3e:3a:81:58:4b:ab:b7:dd:09:54:b7:f3:d8:
11:71:4c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:17 2025 by rpki-client