Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: FG2SDvaP09EUQKLbR8L+gd90QVfyZ/R2Yt3enJhAI2o=
Subject key identifier: 72:6C:A2:F0:C7:DE:FE:4D:B5:32:51:14:B4:35:D9:83:DF:4A:E5:03
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 019645C4F3FDAE3B9AA892753BB0044CBB24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 14F7
Signing time: Thu 17 Apr 2025 22:00:57 +0000
Manifest this update: Thu 17 Apr 2025 22:00:57 +0000
Manifest next update: Fri 18 Apr 2025 22:00:57 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: AbaU1taCp0pUJ9IA2fPLa+0cXeqFxo8+8tlcgznGb3c=)
2: O3I8fzz4GA8viyeptOfjUJ2mnRw.roa (hash: MhSpfjBUjJxXqy4aU0rHbneKVULz0h6JWSZvHTRBN24=)
3: ovS3rx1XoRtGLlvdJ72CyzvNZcw.roa (hash: lov3tLPiy71ecc5+P9JXxH2Fu9PCJbxZNtxQg4EVWM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c4:f3:fd:ae:3b:9a:a8:92:75:3b:b0:04:4c:bb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Apr 17 22:00:57 2025 GMT
Not After : Apr 18 22:00:57 2025 GMT
Subject: CN=726ca2f0c7defe4db5325114b435d983df4ae503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:af:8d:6c:78:9e:d1:85:fb:05:0a:52:56:
33:58:05:3f:42:0b:80:1d:89:ec:ed:01:01:95:0d:
dc:14:44:fb:8b:ee:5e:76:e6:ac:c2:c4:ea:66:0b:
df:5f:d7:ba:69:e1:27:dc:a2:3e:1f:d5:9e:d8:95:
48:f9:39:32:cd:e8:00:9c:40:df:08:5f:b4:c5:ed:
9b:f0:cb:8e:7c:8b:81:84:c2:45:78:4d:8e:e0:a2:
de:4f:83:2c:be:d5:50:57:e8:23:93:2d:bd:ca:e0:
bb:9f:1a:05:f3:e5:dd:77:ed:a7:75:02:d3:54:62:
61:23:d3:a0:d3:be:40:33:45:b6:35:bf:12:8d:b2:
44:64:eb:94:2f:ba:e0:8b:d1:50:8e:89:b1:37:80:
6f:80:af:61:61:92:ac:35:95:47:01:8f:8b:23:40:
f2:9f:84:a4:80:26:ae:c2:5f:f4:54:04:ca:aa:0b:
fd:d5:92:0b:cb:c1:08:24:96:fd:1f:29:14:40:54:
8c:c3:3c:8b:29:b7:74:6f:9f:a3:c5:a3:28:41:51:
02:92:9f:49:2c:fb:bf:50:c7:49:1f:9f:5d:fb:9e:
89:98:6d:14:1d:47:04:f5:36:7d:24:e6:aa:1d:91:
ac:20:a3:a9:93:09:4b:29:7d:f0:20:77:e7:b2:53:
bc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6C:A2:F0:C7:DE:FE:4D:B5:32:51:14:B4:35:D9:83:DF:4A:E5:03
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f3:6b:6f:db:16:23:30:2b:54:f2:d1:3b:84:b9:0a:2b:0d:
70:3c:39:99:11:37:60:83:16:a2:71:48:be:3a:c3:ca:eb:5f:
a1:d8:2c:c1:a2:8c:b2:f8:ce:72:1b:1b:4e:28:ce:06:1c:f8:
1f:97:ff:f0:68:73:9d:55:0d:6b:e6:c9:fa:c5:3e:57:4e:33:
5c:af:5b:97:9b:95:65:d7:00:24:7d:05:09:90:f6:6f:73:d5:
ba:39:f1:9a:21:0b:ae:e1:05:90:02:f5:b8:cc:f9:7d:88:29:
8c:48:75:f8:d9:af:d0:1b:ea:02:a7:e1:a8:63:e4:dc:fc:e1:
5a:2a:c9:63:d6:01:35:c4:fc:d8:c3:d7:b3:9f:25:a0:bf:37:
9d:47:36:55:b3:9b:86:02:36:5f:91:3d:5a:90:7a:3c:b6:78:
8a:a1:6b:42:08:73:bc:60:37:1a:22:52:5a:53:6c:a0:f6:7e:
87:d7:18:1e:8b:38:c0:c4:0b:76:3f:eb:d6:c7:24:10:8b:c6:
e1:54:8e:3d:b9:63:cf:2c:56:1a:cc:34:74:20:d4:e4:5a:a4:
10:f7:d1:54:4e:7b:33:1c:fc:8f:fb:74:f3:0d:64:c2:2d:0d:
75:5b:79:23:d2:9b:9e:5e:76:9f:72:4e:44:06:18:37:f2:65:
b4:35:c9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:45:10 2025 by rpki-client