Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: sSAMGN6xZ36sPBNVJfD66F5W3AYJmAYlEwUfxD9Yuck=
Subject key identifier: 6D:74:63:FE:8E:20:55:6E:2D:2F:68:93:53:0F:00:E5:FB:2D:E1:32
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 0196176CC5AF6F8B30018137CC43B00823DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 14DF
Signing time: Tue 08 Apr 2025 22:02:06 +0000
Manifest this update: Tue 08 Apr 2025 22:02:06 +0000
Manifest next update: Wed 09 Apr 2025 22:02:06 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: GXWOpI+HV/I3qwYu9P9kIGx1A3w8juDu09R/La7q0/M=)
2: VU0FkvZgVaRI8EGkm-qXkP1h2_c.roa (hash: FXgImtBv7FeA5blXsKdg5pD7MuiscFVJi0Lfx25h6e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:17:6c:c5:af:6f:8b:30:01:81:37:cc:43:b0:08:23:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: Apr 8 22:02:06 2025 GMT
Not After : Apr 9 22:02:06 2025 GMT
Subject: CN=6d7463fe8e20556e2d2f6893530f00e5fb2de132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b1:61:fd:1a:eb:12:9f:2b:46:38:61:e6:f2:
1a:86:6e:8a:84:6d:b6:cd:6a:9c:0d:73:cd:c1:f1:
1a:51:4b:df:1b:65:8d:6a:18:39:21:04:05:c3:79:
07:74:59:d3:0b:36:1b:74:1a:6e:a5:06:42:be:6f:
2b:29:5d:60:1e:a5:b2:c7:bf:10:1e:b7:16:9b:51:
d3:70:01:25:4a:ce:d7:37:9f:1b:99:a8:5c:ad:90:
49:69:cb:f6:06:8f:a7:5f:f4:b5:e8:06:4f:99:f0:
e0:15:17:39:d6:ab:f0:67:50:4a:19:e3:a1:ba:cf:
3c:88:72:97:19:3d:c6:83:02:5c:80:54:f6:75:53:
11:e9:7c:26:38:d7:b7:c8:8a:81:fa:b4:db:ee:6c:
d4:8c:69:68:9a:d1:46:16:17:05:a5:71:0b:a1:52:
a8:30:32:a1:4b:a1:99:38:27:6a:59:fd:6b:1b:2d:
c1:3a:24:fc:1f:58:d7:4d:62:25:30:0f:90:d0:f8:
f8:36:b3:56:f7:d1:d3:24:e2:98:88:e9:fd:5a:00:
0d:95:d5:4e:d1:d8:d9:27:34:2e:f5:90:5c:ba:99:
55:f6:21:1f:ab:9b:ce:2c:3f:a9:7b:21:d0:67:4a:
fc:e8:b7:38:bb:d4:f2:08:32:a1:1e:cb:47:4d:d3:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:74:63:FE:8E:20:55:6E:2D:2F:68:93:53:0F:00:E5:FB:2D:E1:32
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:44:9a:89:18:3b:a6:bd:96:d6:18:7e:57:50:ed:9c:fa:89:
c5:27:96:e9:66:e3:e0:bf:10:a8:e4:26:21:ce:3d:c6:cf:21:
1e:eb:09:b6:8b:cf:11:c5:e8:c4:95:f9:a2:b1:70:52:63:5f:
01:0c:63:fd:7f:7e:f1:d1:91:94:67:25:d9:e5:ae:ba:08:45:
59:f1:72:07:9e:d2:bf:4c:3a:e5:10:ad:d2:f7:d9:1b:74:5e:
34:a4:2e:19:38:4d:d9:d1:7a:dd:13:bc:f9:63:69:7d:55:cf:
1c:f0:e0:b8:34:49:7e:4b:e0:1b:0b:45:4c:02:83:59:e6:43:
7f:6a:19:2f:38:f6:30:8f:4e:78:29:29:39:ba:27:57:c9:df:
f7:86:49:a6:0a:3d:99:59:bb:a3:e9:11:b2:8a:00:8e:ed:cb:
b3:e0:71:56:ec:50:34:0d:72:59:af:7b:65:21:9d:5a:7e:73:
ca:46:72:18:5a:e6:1d:59:38:63:eb:1a:7f:d0:66:4b:36:34:
0d:54:16:07:ca:77:d5:d4:43:95:48:b8:2c:e9:ca:58:75:d3:
b9:de:92:bd:e9:1a:f5:4a:94:99:ba:e6:23:89:2d:ab:e6:fa:
42:b5:04:c7:1a:ba:33:b2:f2:bf:66:61:ab:2b:0b:e1:49:79:
a6:d2:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:39:28 2025 by rpki-client