Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier: m5vul6QyucPNqapyBPntaZ3RiPQosMkMGC+6a0/JmUM=
Subject key identifier: 2E:FA:77:AA:BE:EB:E0:3B:F4:27:E2:53:80:8C:45:CD:FE:12:FB:21
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial: 01963C8AF1C35F8B33BBD29201692B0C2AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number: 05EA
Signing time: Wed 16 Apr 2025 03:01:00 +0000
Manifest this update: Wed 16 Apr 2025 03:01:00 +0000
Manifest next update: Thu 17 Apr 2025 03:01:00 +0000
Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: 4pIjUEONvbml1Lb+WHo0qqBF0p3piRpBZ+9EHCGtfEc=)
2: xR2Kuj_X5JRY3WX_WqgPgukk9Lw.roa (hash: wP9kQODXoT56dWOB0bEFnWVWD/Y0ndzO5Fzna/QZSuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:8a:f1:c3:5f:8b:33:bb:d2:92:01:69:2b:0c:2a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Validity
Not Before: Apr 16 03:01:00 2025 GMT
Not After : Apr 17 03:01:00 2025 GMT
Subject: CN=2efa77aabeebe03bf427e253808c45cdfe12fb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:25:c3:a1:53:6e:ac:e3:cf:b4:7a:65:0e:
8c:a0:a8:24:0d:7c:04:bd:01:72:6f:2c:63:89:37:
50:9b:bf:29:bb:8a:d7:5d:fb:73:5c:3d:f4:a1:ea:
6b:09:b8:1a:57:43:1b:f2:a0:94:1f:45:f9:92:ed:
84:70:8d:9b:fd:75:0f:b5:33:e1:00:eb:f0:8b:cd:
21:e5:85:2a:32:72:f2:aa:09:c4:ed:ce:4d:41:4a:
d8:93:58:e5:62:99:bf:10:e7:c9:9b:a9:2e:33:26:
89:7b:4e:95:a3:30:25:b1:da:28:f2:e1:e0:4d:56:
b7:02:b7:27:12:da:62:45:68:9e:a5:7e:f3:10:54:
a9:e8:b2:0f:ff:46:94:09:2d:69:de:18:84:24:1b:
6c:b3:37:70:42:0e:f9:81:40:7f:03:ed:dd:2d:20:
1b:ee:6b:ad:6f:07:b8:2b:fa:06:5c:d4:d4:70:23:
ec:e2:a4:2d:52:71:c1:14:5d:df:55:ab:d3:f9:8f:
71:3a:c4:03:30:d6:95:cf:68:76:2b:cb:ad:72:69:
e5:c6:c7:69:8c:55:7c:56:cf:ef:6c:a5:99:30:42:
04:02:97:8a:e0:de:83:0a:1a:03:f8:d7:93:32:3e:
c4:66:b1:a7:e6:96:0e:97:b9:6d:8e:ec:58:84:73:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FA:77:AA:BE:EB:E0:3B:F4:27:E2:53:80:8C:45:CD:FE:12:FB:21
X509v3 Authority Key Identifier:
keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:cc:7e:9b:6e:8c:dc:09:8b:bb:a0:2a:04:46:83:cf:c3:9d:
24:9a:7a:ee:96:b0:ac:1d:a1:09:74:82:41:c2:1f:bb:62:25:
f0:40:e4:44:2f:30:fd:d0:8c:8f:89:85:26:82:06:ad:3a:e7:
a4:08:90:84:28:f9:a8:a4:78:f3:da:4b:ae:44:d7:12:d5:c2:
73:39:99:cf:f2:a4:87:e2:56:52:4e:96:c8:82:bc:70:b3:b6:
19:be:f6:25:98:f6:f7:58:46:45:29:de:91:bc:8a:79:0f:87:
3d:b1:e2:e2:a6:4c:c3:63:83:06:ef:61:d0:f2:5d:43:1c:a8:
d6:b2:64:a5:9e:3e:35:22:16:7a:c8:a1:0d:43:05:b2:60:99:
51:08:f7:d8:7c:55:ae:d3:d5:5f:07:f6:b5:da:f0:cc:9a:5c:
8d:7d:a5:8a:65:f4:44:a3:05:4d:19:c2:77:01:e5:84:fc:e2:
c4:33:29:a1:c4:b0:2f:da:76:8b:be:04:88:b8:b6:b1:34:0e:
db:90:16:90:3b:19:62:af:56:87:ed:30:67:53:35:fd:ca:3b:
f1:e4:2d:ce:83:af:fb:6f:76:f0:e1:74:82:94:38:41:68:57:
0e:62:49:71:61:dd:4e:7e:b9:b0:94:54:e5:7c:e0:97:b0:90:
23:c5:16:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:43:50 2025 by rpki-client