Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
File: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft (raw, json)
Hash identifier: 6nBUkl8ywV2e6Oz0hpu2wKFuDAekTgCUTXpyyQJ03io=
Subject key identifier: 1E:8B:98:FF:90:4C:47:52:9A:C3:A2:34:BC:85:E3:10:E7:D8:19:86
Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8
Certificate serial: 01965793919EF26E149DBC9FF5E92DAD9ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
Manifest number: 0AFF
Signing time: Mon 21 Apr 2025 09:00:10 +0000
Manifest this update: Mon 21 Apr 2025 09:00:10 +0000
Manifest next update: Tue 22 Apr 2025 09:00:10 +0000
Files and hashes: 1: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl (hash: 7+1I232uz7ycESc3Fy+wL13UjnRd7aWQk+iVp9q94Wc=)
2: hfSj4Acr0ZdBdVZF-bmfhSWxDR0.roa (hash: qMvzKdtsac1CrAS5/GB10mnE0HZEb+d2b/OglfbpJc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:91:9e:f2:6e:14:9d:bc:9f:f5:e9:2d:ad:9e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8
Validity
Not Before: Apr 21 09:00:10 2025 GMT
Not After : Apr 22 09:00:10 2025 GMT
Subject: CN=1e8b98ff904c47529ac3a234bc85e310e7d81986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7a:8b:f5:d0:0f:1a:62:d3:d8:07:40:c4:66:
15:75:4d:a1:14:a9:ba:2b:06:f6:f3:f9:03:60:a4:
6d:d9:87:56:ee:73:b1:cf:69:39:bb:8f:f8:37:a6:
11:19:a1:6d:1f:90:17:38:c0:fb:c6:81:93:1a:23:
f3:c3:21:63:17:5b:21:9b:8e:90:89:f5:4d:28:cb:
7a:d7:d8:dd:af:e4:93:00:44:48:de:42:b3:12:50:
69:1b:dd:d1:ca:0e:d9:32:45:99:b6:b6:e2:14:cd:
49:e2:8e:e4:27:e2:19:9a:81:d9:27:de:43:19:3b:
90:e1:83:e4:a3:44:6f:56:dc:bc:42:95:96:4f:a9:
6b:2c:ca:a5:48:45:68:ac:f5:7d:17:2b:34:d4:fc:
74:43:41:a9:1c:3f:d2:f4:ab:0a:97:d6:ae:b8:af:
81:72:48:1e:b4:cb:af:f0:12:ec:db:f9:07:cf:89:
42:be:db:89:69:a0:69:ce:88:66:4f:f8:17:0f:ce:
51:18:f9:95:86:7e:fa:3e:66:43:40:6e:2f:67:93:
5a:35:5d:81:47:28:26:2e:a9:0f:42:93:e5:3d:8c:
0e:e7:09:8b:df:17:6a:b4:dd:5a:4c:c6:95:c8:cd:
85:0e:0a:1e:ce:a7:d4:78:ba:bc:35:03:4d:2e:e9:
a4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8B:98:FF:90:4C:47:52:9A:C3:A2:34:BC:85:E3:10:E7:D8:19:86
X509v3 Authority Key Identifier:
keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f5:49:b8:d5:77:f7:2e:17:d5:6c:58:f1:5a:c1:21:e1:59:
5d:0d:8e:d2:3c:53:68:98:6c:5e:5a:49:ba:43:1e:0d:2b:d5:
2b:7c:c1:4f:ff:48:0d:e1:67:69:20:ae:c1:d4:f7:66:12:dd:
ff:e0:de:28:44:45:50:f3:67:62:d1:f7:ef:84:2b:0d:3b:9e:
ba:de:08:80:0e:ac:27:20:4f:da:1b:a6:0b:33:7b:e0:0c:09:
b7:c5:42:99:ce:a5:93:17:81:3f:fd:27:dc:05:99:1c:fe:d3:
71:73:ca:92:db:c8:68:30:70:75:99:2a:43:e1:bb:ff:6b:6a:
86:55:1c:59:ad:eb:a6:de:77:05:1f:33:c0:dc:33:64:b0:fe:
78:a4:9f:15:16:08:12:84:a4:5c:5e:3c:f2:cd:48:11:6f:d0:
07:9e:d4:a2:eb:3e:a2:48:bc:91:27:b7:91:f8:90:b1:1b:b4:
46:61:7e:39:bb:d8:67:2c:20:d4:50:99:74:18:5d:c9:1a:db:
6a:d3:1b:9c:3f:88:16:f8:fd:5f:10:e5:53:82:52:16:b4:14:
b0:69:3e:61:82:15:d7:33:e7:05:6d:45:e0:58:2c:f9:b0:72:
14:bc:31:6b:4b:14:0e:2b:a3:99:af:f6:8f:b6:e5:4f:c5:40:
e5:cc:e7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:02:16 2025 by rpki-client