Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier: 4XctZ6noYAC0KtvtvU4Yh7vemOOSdT/B8zlE50uU308=
Subject key identifier: 92:9E:76:7C:E3:8A:8C:91:B0:26:CE:68:7B:8B:6E:0C:AE:AD:36:64
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 0196138F4B2E51C0935CC31550D3C492C23D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number: 0F7A
Signing time: Tue 08 Apr 2025 04:01:19 +0000
Manifest this update: Tue 08 Apr 2025 04:01:19 +0000
Manifest next update: Wed 09 Apr 2025 04:01:19 +0000
Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: f2bRw0QjLG1xV3tDGeI9qPsfL4Reud8if2uZ/ZQ6Vns=)
2: FmBFQOhNzhtYDdGU28d2mOWYxkg.roa (hash: AVAVJ+z2q5E9uU0vpHh6beNWBbBTBuDWNk3vwtJ8KHM=)
3: a8dfbuD_49og8AJXwHhNJcwaxsI.roa (hash: W1ipPbq868Ly393rgOf3eds1bM0F3aTAdVR1mM1YvM4=)
4: afkHGgkpnYuChER0buPhVqx5kXI.roa (hash: Tx1z4EJ2mEaA6VjS7e2DEwi0lCy0cpAZk+6Uv+5pnbw=)
5: mYlPJBjSVo-nMdiARP-4qGUEks0.roa (hash: jq8esI3cAJrQeZlA/zKhC8wm74GcNEo/R1+l+csXuU4=)
6: n11ZJorlH1hZHcOrMkN5woOVejs.roa (hash: qO1znHdZkcnjjGqE4Hx9Dgh/NFBxbtAoTeajvo0zDfk=)
7: rhaUzcqQYW4tC3EdQCdaNLWOPbA.roa (hash: PvCUNKVTR3gGQiqq6yWqtNwJ314FXo4VLynnYKTFbJo=)
8: uEehilTaJNTK6wTZHHdxxqFauYo.roa (hash: tRIraXpN8mX3nJ3uL7fIgHQ/edV3rhiXldnw6ddpk0I=)
9: x6Fr-1VeTypvMg38CuYZL6Aoelo.roa (hash: ajAlNUJcOgM2msZH/aiPOA3cqagu5/2Oq4Xgzqwcm3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:8f:4b:2e:51:c0:93:5c:c3:15:50:d3:c4:92:c2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Apr 8 04:01:19 2025 GMT
Not After : Apr 9 04:01:19 2025 GMT
Subject: CN=929e767ce38a8c91b026ce687b8b6e0caead3664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:ac:8e:d5:a9:35:e9:e7:e1:f7:fc:88:82:
bd:62:00:74:73:24:b2:62:1b:84:f1:53:b1:34:f5:
e8:43:c0:07:4d:c3:52:38:37:d9:76:fc:9e:69:6b:
57:66:aa:e1:ce:78:b2:47:d2:9b:31:96:32:e4:7b:
f3:01:38:72:f6:c9:db:07:62:55:87:ee:de:3d:fb:
51:18:08:93:22:38:85:76:61:c3:30:f0:dd:24:b4:
3c:0c:81:01:a3:c1:1e:9f:dc:fe:05:57:e9:d3:89:
0c:12:6a:81:86:90:d6:fd:f7:83:a7:ca:66:d5:8e:
47:cd:17:e5:e6:ad:05:d8:0b:6f:da:dd:79:2e:95:
47:ee:b0:82:5f:52:aa:7b:d4:7d:ea:19:b1:20:f7:
30:d9:1c:78:4f:65:d1:81:17:a3:62:24:84:19:92:
9c:4d:c5:14:32:3a:2e:df:e8:bc:6b:ae:57:70:0e:
a0:13:18:84:48:ef:69:5c:d3:5d:05:0f:0d:f7:28:
e0:60:cd:03:1d:1c:fd:4b:d8:06:2b:c6:79:4f:32:
dd:12:a4:97:e0:d9:17:00:14:ae:d7:8b:e0:18:d1:
56:32:d5:8f:69:f3:17:85:4f:0a:62:e3:90:1d:27:
2e:3c:cf:0d:62:a9:35:bf:ae:59:03:65:75:9c:4d:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9E:76:7C:E3:8A:8C:91:B0:26:CE:68:7B:8B:6E:0C:AE:AD:36:64
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:39:b4:20:21:fe:17:c3:b3:41:37:1d:e0:60:54:8b:ba:b0:
1d:74:a3:be:99:19:0b:69:f5:81:6f:11:5b:03:fb:e6:c9:7c:
cf:ed:dc:eb:d1:31:d2:ac:11:7e:13:86:92:9f:3d:f7:4d:c9:
7b:98:22:da:0a:0a:ef:26:36:f5:bf:1e:d9:70:dc:a9:ff:f5:
0c:0c:ac:c5:12:d9:ea:4a:cf:56:e1:2b:d9:e8:51:71:75:4c:
5f:5e:c7:47:0b:1f:af:6d:5f:ab:22:e6:d8:bf:61:79:9d:e8:
90:d3:5b:a0:e7:80:0b:4f:81:11:13:ee:7f:f0:13:9e:74:d2:
47:84:4d:0b:4c:fe:c1:97:f5:e1:45:03:eb:bc:18:d1:36:0e:
dc:6d:97:a0:b5:41:a1:c3:81:2d:72:58:cc:1b:b7:6f:1c:0c:
8c:2b:ee:12:c9:0c:9f:53:64:39:39:0d:6b:af:40:6d:68:30:
88:cb:ee:62:92:0b:a2:3d:a2:d7:43:fb:4f:f5:49:0d:28:f4:
21:bd:96:ac:cf:ea:d0:8a:75:21:43:5c:9b:c9:d3:78:d1:3b:
71:22:8f:02:78:a8:86:a4:4f:3c:c7:5f:22:57:22:c4:40:59:
98:f8:46:23:81:1d:6a:72:9e:95:f6:76:8a:69:9f:36:32:16:
2a:70:76:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:35:20 2025 by rpki-client