Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
File: x3_gBdfljsAzypq6h-BgYCFTNhc.mft (raw, json)
Hash identifier: DU1zUZNBPoDH6zVXH3/Br1F+4thJTFJwkOWgZpnmhlc=
Subject key identifier: 43:9D:06:E2:D9:47:8D:43:B0:60:2F:EC:16:C0:F6:9E:53:B5:17:FE
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Certificate issuer: /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial: 01964F6C854E97FF39CC174D5158F4DE9453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
Manifest number: 09A1
Signing time: Sat 19 Apr 2025 19:00:34 +0000
Manifest this update: Sat 19 Apr 2025 19:00:34 +0000
Manifest next update: Sun 20 Apr 2025 19:00:34 +0000
Files and hashes: 1: 2HWaYe8To0qjjtVdcy7I7ttFbbg.roa (hash: va5+QSQ1VvFYIrECNgHjVJbI88Ftr5DD+GPYmuN05H8=)
2: 8RHKnf43EnDTyj22kIIfanQSEQc.roa (hash: HbgpO2hUs5v1oFq30hojEK1YQFHOK9Zr5sDwHkBpSCg=)
3: OHUMAhwuz8j9ycFP0uC93_9dMsI.roa (hash: K0wUqFGby+8hOwpjxyeCuygnkldFbJEc1krNUlngfaA=)
4: x3_gBdfljsAzypq6h-BgYCFTNhc.crl (hash: 0NuHTj0ZoJ9Wm1ZyrrJRNIuU1jU+Cc+7TPdgmdHMYxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:85:4e:97:ff:39:cc:17:4d:51:58:f4:de:94:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
Validity
Not Before: Apr 19 19:00:34 2025 GMT
Not After : Apr 20 19:00:34 2025 GMT
Subject: CN=439d06e2d9478d43b0602fec16c0f69e53b517fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:a8:7b:26:44:c3:5f:c4:8b:38:a5:70:5d:
d9:eb:d4:e9:be:b8:55:25:a3:d2:a9:28:ff:df:d0:
c5:f9:60:1a:11:fd:06:49:28:7f:ee:22:3c:f3:1c:
84:02:e5:d9:5e:24:11:43:4b:8e:9d:c3:92:21:f4:
a5:8f:cb:42:30:bf:4f:41:d9:d1:67:66:95:10:15:
9f:31:cb:cb:2e:9e:2f:d6:fd:4e:f0:27:46:bd:69:
39:8b:56:b2:8d:c6:3e:c0:b0:19:c7:be:f5:84:70:
a6:15:23:2f:8e:1d:0b:9e:6f:f5:5b:23:82:58:9f:
57:cd:c1:fd:42:57:62:67:16:96:44:15:15:f9:6c:
ef:75:91:3d:96:e3:4c:ff:b6:fa:04:09:ea:b3:ef:
60:ef:7d:f1:92:47:76:83:cf:85:34:a3:8f:9a:0d:
e4:d8:4f:ac:46:d1:fe:e0:b8:c6:ba:0d:a2:5b:85:
fe:b4:b4:6d:52:ca:0a:9d:3f:9a:06:83:15:24:34:
5c:68:4a:67:be:27:4a:25:7a:73:bf:42:a8:ec:2d:
11:d8:e2:42:75:17:d8:7b:4d:2a:2c:b6:31:13:71:
27:c1:d7:06:55:25:0d:cb:d5:48:fa:f2:5f:08:12:
8a:9f:e3:34:5a:e6:1f:3a:cf:1d:be:fc:f9:03:51:
e6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9D:06:E2:D9:47:8D:43:B0:60:2F:EC:16:C0:F6:9E:53:B5:17:FE
X509v3 Authority Key Identifier:
keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dd:55:d9:cd:9e:70:16:4b:2b:56:7e:70:c3:4a:60:92:5b:
b2:ad:d5:e7:2c:d0:30:3d:0e:66:98:a9:bc:4d:56:51:6f:f6:
9c:63:25:41:00:8a:71:89:a9:ec:fb:26:c5:9f:70:b4:de:e1:
db:40:94:00:3f:1d:ff:46:fc:0e:a7:b4:bb:ab:fa:46:07:5b:
32:56:ba:5e:35:41:17:cb:1b:0e:05:ae:96:02:66:7a:a3:9c:
85:42:e5:88:7c:05:f7:8b:b2:22:72:5b:d7:21:c6:a0:51:60:
4e:9d:9d:f5:a2:30:04:a0:13:8e:3e:fe:a4:06:da:d3:8b:da:
58:cd:fe:4d:ec:8c:ec:20:02:4d:f2:cb:92:d7:32:53:e8:34:
26:ed:82:54:ab:09:10:1a:70:27:68:c2:01:a4:66:c2:e7:7c:
e5:1a:75:4f:3b:2a:6d:f5:64:9d:9f:c5:6f:47:fb:3a:60:8e:
0e:db:9d:c3:ef:e2:7d:63:eb:38:ff:c9:a8:d9:88:17:86:17:
6b:35:b6:1b:18:d7:86:2e:d6:8f:fe:3d:bf:63:1e:a7:1f:89:
2b:41:3e:ff:62:77:61:01:96:a0:d0:55:e2:8f:4c:17:cc:c4:
35:46:99:16:20:db:fc:a0:3b:81:0d:92:fa:91:41:2c:75:3a:
2e:79:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:17:16 2025 by rpki-client