Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier: M/cnEH98lU7QmPTfi+uhCZbK6+lysNzmRKfZB7+XoPc=
Subject key identifier: A8:AA:55:B5:6C:59:25:5B:74:98:C6:E3:BD:65:DF:F4:3B:90:6E:27
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 019613C64626FECA5A07DC22533E6AA2F359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number: 141D
Signing time: Tue 08 Apr 2025 05:01:23 +0000
Manifest this update: Tue 08 Apr 2025 05:01:23 +0000
Manifest next update: Wed 09 Apr 2025 05:01:23 +0000
Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: FwnPhSiTZ3RPF0IdYIq6zBJN9Y2sjXqSMXQjvun40KQ=)
2: i93FbkwGzwrRV5pk719Azh7mnco.roa (hash: FbLtCYorp5+hnW87pG1j3ZHIdaixJG9L/nchejMVUes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:c6:46:26:fe:ca:5a:07:dc:22:53:3e:6a:a2:f3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Apr 8 05:01:23 2025 GMT
Not After : Apr 9 05:01:23 2025 GMT
Subject: CN=a8aa55b56c59255b7498c6e3bd65dff43b906e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e6:98:80:4a:e2:ea:15:b4:30:b9:7c:c2:f2:
7d:54:d0:1d:11:d3:56:51:99:50:72:f8:40:bf:aa:
f8:ae:82:b7:4b:84:86:64:a4:61:84:da:29:9a:de:
1e:1d:00:e7:30:62:e9:e1:e8:a8:12:c5:2d:85:03:
77:19:93:70:3a:dd:0b:4c:53:18:1a:75:93:e7:de:
16:4d:d5:33:68:ba:cd:25:c6:7f:99:7f:01:20:c1:
85:0e:21:ce:fc:42:0d:64:0f:ef:9b:8e:0a:f4:ea:
32:d6:81:e2:62:46:56:20:0f:20:94:24:49:e3:f8:
ab:6a:0b:e8:45:d3:e1:2b:7b:40:00:4d:17:92:3f:
f1:d2:fb:96:2c:c0:93:69:90:74:72:17:b1:48:43:
29:f1:f6:5a:aa:01:8d:a2:85:01:1b:ab:e0:09:65:
10:f3:99:bb:d5:60:b7:91:a5:8a:f1:3e:3e:f2:58:
f6:29:04:10:79:b6:69:b3:ee:0f:ee:fe:86:28:37:
4e:bc:5d:74:96:c4:a6:ca:4d:3f:fe:a6:51:8b:d1:
75:e1:ba:f7:66:7e:a5:6d:07:8c:c1:37:9c:10:3f:
93:35:eb:ca:b9:31:65:ce:c6:69:f3:0f:62:d8:0f:
61:d0:b8:a0:62:f0:1a:7f:d5:61:b8:f0:f4:05:8d:
1a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AA:55:B5:6C:59:25:5B:74:98:C6:E3:BD:65:DF:F4:3B:90:6E:27
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f8:83:aa:70:2a:23:39:59:9e:23:96:b3:24:2f:b1:dc:35:
3c:cc:a9:94:eb:56:f9:2a:d5:ef:39:9e:df:fb:1d:34:4d:c3:
8f:c8:52:84:43:95:5d:f0:96:1b:cc:db:45:8f:dd:78:95:82:
8c:5d:ff:6e:03:cc:81:79:e6:7a:48:ea:90:9e:1c:ec:15:6b:
2a:be:26:74:db:2e:7b:0a:bc:6a:b4:27:fb:fd:7c:8c:fc:66:
70:25:b3:9e:8e:7a:60:e5:da:81:be:38:5a:76:8b:34:d4:d3:
db:61:82:5e:73:b5:21:a9:75:ef:93:6a:a5:94:78:b2:a7:17:
75:29:b7:3a:5b:d4:33:e9:68:84:aa:54:30:69:b2:98:d2:b0:
b1:66:1b:ae:40:72:6b:4d:a3:c7:f1:8e:bc:1c:81:dc:62:61:
c3:c5:73:4b:30:24:a2:1a:2e:b3:13:a7:f9:e5:05:0f:8d:8e:
86:38:e2:6b:fe:d4:7b:ae:0a:41:4e:de:a2:e7:43:34:bc:5b:
3b:f4:58:cd:20:e5:e7:ab:63:82:51:ec:7e:80:9d:5f:a2:78:
10:e8:f9:67:80:62:b0:24:ea:95:cb:fb:2e:30:97:62:28:0c:
79:ec:ff:84:26:9b:47:ab:10:24:27:49:c2:53:2e:60:ab:fd:
53:3c:8c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:29:11 2025 by rpki-client