Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
File: 3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json)
Hash identifier: HTRhnoR4+ke7oDKl76MlhErH+iu096pr9KKhv7BT130=
Subject key identifier: 53:2D:9E:C4:14:E5:20:43:4B:19:CC:04:BE:99:55:E9:7A:69:FD:20
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial: 01960AC2D5C447C7E04409A7921378069185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
Manifest number: 044C
Signing time: Sun 06 Apr 2025 11:01:02 +0000
Manifest this update: Sun 06 Apr 2025 11:01:02 +0000
Manifest next update: Mon 07 Apr 2025 11:01:02 +0000
Files and hashes: 1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: yPmfMNe8SoUnTXr1iBkxW09ntd1i7h0/vsL9NI+6BTc=)
2: A_DdgpizT--rlZ-ab-YZdIwkNLE.roa (hash: hfZgPH/DllsEyaUJjbheadfPG1jNf80tTNcLY41EaYQ=)
3: J29KR6WIqb2jKkibcGzZyVD-APE.roa (hash: cX4I13kG6IWcU4y27MvdylWTn5/srzMdc6rdtCLCSL4=)
4: RVm4PleqV8m6zGkcPiKBRGWO1cI.roa (hash: 3p0hXdk+JmHhQEiq1MExor2f3lGKmZyobEJTxOu9buE=)
5: eHnC0ZqJNqxv3y7mak9QRJMJw-o.roa (hash: +LqAwsdmA3jPuO+2IgsX5kZHBO+HuvNtjbjVsU8ziig=)
6: f25v4uVZY4JbTyMqNXKXGA35WKk.roa (hash: Cmqw5364kiAvR31aujca3rQebhgV1WXm34C80bI/lTU=)
7: xJ0_FRg6EplS-mzoDbYvP1y_mUw.roa (hash: 7evtOJQCPXqekbIigyPzPGbzquzgJixLY3c438GOL/g=)
8: zTq6cqLbZBiRPZ7jFpyiF-kS2nU.roa (hash: 58LUL/KkVIlVDMCj1/N1vyBYpPzDWYfUKAfSIQ9KHh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:c2:d5:c4:47:c7:e0:44:09:a7:92:13:78:06:91:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Validity
Not Before: Apr 6 11:01:02 2025 GMT
Not After : Apr 7 11:01:02 2025 GMT
Subject: CN=532d9ec414e520434b19cc04be9955e97a69fd20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:2b:c1:d9:28:ab:f2:8a:5c:84:72:4d:f7:
a9:8c:52:fc:8d:bd:2f:38:5c:55:6c:30:ae:ea:3f:
3d:4f:ff:5a:cb:de:7e:b8:de:48:48:19:4d:f6:7c:
52:48:80:28:12:de:c8:46:fc:ee:86:aa:94:63:bd:
04:f8:ac:7f:de:13:ae:a0:be:e1:a6:ba:52:62:6b:
a4:53:e4:9c:f9:48:93:8a:36:7a:b2:68:cd:ca:23:
af:53:d1:2e:61:50:01:a9:1b:b3:86:f7:aa:20:27:
01:45:4e:1b:ac:c8:52:02:94:19:1f:94:07:8a:7b:
03:35:3c:58:d6:73:2e:99:ae:27:e7:be:1f:07:3b:
0c:6e:d3:74:bc:48:37:e6:0d:b0:99:9e:e0:a5:5f:
e5:0f:43:6a:e6:73:6d:90:94:f3:65:30:de:e2:88:
a5:dc:cb:5e:52:16:ea:19:8b:ec:ff:f2:89:69:01:
77:5f:d0:ab:37:45:16:d2:34:cc:f1:d7:35:dd:7e:
39:3a:e7:1f:b5:f0:d5:55:e9:6b:77:3f:bf:24:de:
d4:bf:03:29:69:0b:a7:60:1a:11:f6:3d:c5:21:a3:
d9:ee:d4:e4:e9:85:e8:71:52:e9:c0:fc:6f:d4:00:
34:e0:90:78:53:7c:fb:1b:2c:aa:c2:58:8d:f8:5c:
a6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2D:9E:C4:14:E5:20:43:4B:19:CC:04:BE:99:55:E9:7A:69:FD:20
X509v3 Authority Key Identifier:
keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:34:13:da:ba:77:99:b0:a5:28:3d:be:bc:e2:8c:46:6d:05:
ef:7a:19:99:fd:ea:16:56:20:86:fe:62:a0:b1:af:19:45:75:
d0:8a:2b:59:05:e6:ca:1b:ec:21:67:e6:a1:4a:d5:35:37:0b:
ed:75:bf:54:36:2f:1f:33:99:2b:6e:c2:42:ca:d2:04:ed:10:
16:e4:ab:64:d5:a1:63:df:b0:b3:ba:44:a9:a2:29:81:60:bc:
d5:92:65:8b:1f:2a:a6:5d:d6:8d:d0:ec:8a:cc:3f:77:31:c5:
57:22:b4:8b:82:ee:47:35:74:62:0d:05:e6:bb:ba:61:1a:4c:
92:9a:8a:a0:8f:a9:a2:32:2a:b8:dc:60:51:6a:3f:89:cb:28:
49:6e:38:c5:2e:7e:20:97:31:88:63:33:bf:26:1e:76:62:13:
40:9d:44:7f:88:ee:c9:f1:0d:08:59:92:bb:49:0a:c9:2e:d1:
b3:7e:b7:aa:91:1b:c9:70:5e:57:37:d8:9c:30:7c:f3:d9:99:
da:45:84:14:49:d7:67:ba:b3:4b:f0:dc:65:b4:8b:00:52:91:
70:fa:a9:2f:30:0b:0c:17:7d:67:9e:8f:25:f5:f0:8b:1c:06:
41:56:cd:b0:e5:c5:ae:3e:08:4d:88:0e:b1:3a:6e:fa:9f:f1:
6a:f9:9d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:46 2025 by rpki-client