Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier: lyfovzB7B5JUAMhgmiwMKMAnq66MJCKI/M3evBy2kyY=
Subject key identifier: D2:B0:9E:13:B9:4B:61:3F:2C:C1:28:E1:3E:89:B1:8E:12:53:7E:05
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 01962B60F3DE3F1F308D375FB0596072981F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number: 0B11
Signing time: Sat 12 Apr 2025 19:01:36 +0000
Manifest this update: Sat 12 Apr 2025 19:01:36 +0000
Manifest next update: Sun 13 Apr 2025 19:01:36 +0000
Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: f+R0TzUqzT8zDMTFhwL9iKP56a2uBQiRYGm1BCx6pCk=)
2: Iq-f1EnfL9Yhl-QlX-qFh7tpN7I.roa (hash: WJuJSZpxmjSdIh4Z1HVT6GKRflZm//sdti8VMNi88hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:60:f3:de:3f:1f:30:8d:37:5f:b0:59:60:72:98:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Apr 12 19:01:36 2025 GMT
Not After : Apr 13 19:01:36 2025 GMT
Subject: CN=d2b09e13b94b613f2cc128e13e89b18e12537e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:cc:ca:45:4d:0b:c2:70:8b:f9:36:fa:fd:
32:85:7d:e1:cc:08:e4:0d:fb:37:f4:5e:14:06:77:
6e:05:9c:a8:97:f2:e9:70:1d:f5:ee:80:9c:28:33:
76:c6:b2:af:01:18:90:6b:e6:3a:ba:5c:de:96:de:
c9:b1:60:17:27:2f:71:c1:b2:5d:ab:0f:3e:f3:f7:
64:ce:4e:c7:32:1d:ee:a3:bd:b6:48:a6:37:13:ec:
84:92:5f:67:59:0d:10:9d:d4:c1:56:2e:f1:3d:1b:
21:9a:2a:22:c6:f0:4f:96:71:4c:01:76:c8:17:d3:
41:b1:e2:28:c5:6c:3d:a6:26:84:95:24:05:de:c2:
51:b5:9e:ba:14:33:5a:f6:38:e7:c4:a5:d3:fb:8f:
20:b1:a7:62:ad:39:2d:c9:49:0d:8c:09:19:d2:c7:
be:f5:7d:a6:07:1b:d3:28:35:8c:f8:26:bb:d3:6f:
f8:ea:a9:90:52:a5:f8:5d:e2:72:e5:8c:3d:7b:6f:
73:36:77:04:9f:ba:cb:95:39:5d:85:2d:9d:95:89:
4f:5d:66:ac:ea:81:47:f5:eb:1b:d1:51:48:28:f7:
89:85:0d:f2:b1:1b:66:45:ed:43:1d:dd:b1:ce:73:
14:25:18:b1:03:5b:2a:61:06:05:e8:42:cc:9b:5e:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B0:9E:13:B9:4B:61:3F:2C:C1:28:E1:3E:89:B1:8E:12:53:7E:05
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:21:55:28:f7:9e:8e:66:ae:6e:71:db:4e:f4:f3:79:dc:f6:
8b:5d:2d:70:69:de:6a:3d:50:68:16:30:33:43:63:b8:a1:2b:
95:31:0e:d9:85:3c:c4:ae:f9:0d:5a:44:a7:23:75:61:dc:dd:
62:5c:c7:30:b3:e4:9b:c6:9d:94:58:ba:d8:54:99:ff:42:d2:
f1:a0:63:0f:2a:1c:f0:a9:f7:ee:9f:56:49:f5:ff:05:de:29:
e4:2f:ae:5c:4b:3f:29:76:b5:ea:b4:4d:2c:bf:eb:84:a2:6b:
25:47:87:7f:5a:db:44:f7:8d:88:d7:89:27:da:d0:71:8e:20:
ca:80:30:bc:79:ba:96:b6:fa:f2:d1:03:f0:8c:fd:72:58:e2:
68:63:77:b6:34:21:8a:4f:7a:cb:cf:df:99:c8:c8:ed:8d:97:
13:43:75:40:55:5b:c0:58:1e:e0:40:8f:11:17:7a:06:39:08:
4d:41:73:a8:c1:15:76:01:b3:99:17:45:b4:cd:5c:81:d4:39:
4d:0e:02:d0:65:62:16:cd:49:b0:8d:64:34:72:5a:8e:52:aa:
22:5d:12:f6:3c:63:d9:ef:cf:b2:28:d4:33:a8:22:41:fd:49:
f7:ff:8d:a2:b4:90:42:46:9a:49:69:f7:da:9f:2f:49:43:fc:
7a:fb:bf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:17:02 2025 by rpki-client