Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
File: rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json)
Hash identifier: Iowmd6BwZG9rOoF8Uw9iZAyzmBrciasR4jB4QgJs3/Y=
Subject key identifier: 4A:EC:FE:52:84:C4:A6:CE:61:70:9B:AB:B2:E6:C9:97:48:79:BF:2E
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial: 01964F6D4AF7AC11559CC35B796E08869730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
Manifest number: 0BE2
Signing time: Sat 19 Apr 2025 19:01:24 +0000
Manifest this update: Sat 19 Apr 2025 19:01:24 +0000
Manifest next update: Sun 20 Apr 2025 19:01:24 +0000
Files and hashes: 1: QrB38IR31JfmSrfp5ttgTReGTWo.roa (hash: tObzEsfYNmXi9X+/o+rGLlyYSek2LoSQ9N7PVMYEfqA=)
2: n3iPjhImnBjarzP2Rj2tOx0dNiE.roa (hash: lUEC9I8tI5NUjUJh9guJCH2H+g0KkZWinekNZT2+2Io=)
3: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: 9aWe4IpxGffG9kAHvUA87PhaBfMN/iCwhAPSSRaSEcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:4a:f7:ac:11:55:9c:c3:5b:79:6e:08:86:97:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Validity
Not Before: Apr 19 19:01:24 2025 GMT
Not After : Apr 20 19:01:24 2025 GMT
Subject: CN=4aecfe5284c4a6ce61709babb2e6c9974879bf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:03:b3:0a:3a:cd:b6:bd:f7:e0:4d:73:78:
82:03:0a:00:1f:61:04:7c:b3:97:72:ca:7b:34:1d:
dc:79:4a:34:1b:5a:34:bf:f6:81:f4:8f:7a:ce:01:
2d:fa:23:b8:1a:19:b1:ab:e2:ff:d3:b9:ba:8a:3b:
99:0d:a3:67:06:a1:07:e2:4d:01:40:b4:e3:a5:b6:
f7:24:a7:93:5c:bb:a5:9f:0a:7b:5a:b5:fa:18:5e:
dc:91:81:0b:f7:1e:45:8d:f2:6b:40:1e:ef:88:4e:
70:fb:01:d6:2c:9d:3e:2b:aa:0b:51:25:60:21:47:
94:56:ac:40:e3:8b:5f:14:c7:79:8a:08:66:ef:11:
fb:d8:be:1c:2c:8b:ed:04:2a:09:60:98:74:6c:c3:
30:42:a9:ec:23:d6:20:7b:5e:6b:3c:b4:9e:fd:df:
91:cd:8d:04:51:d1:56:a7:3e:c9:95:16:b9:5a:55:
7b:71:b6:70:c4:8a:e6:bc:8f:fb:19:73:83:4f:07:
65:2a:7a:22:b2:74:4b:89:ed:ad:e6:db:50:0b:d6:
12:1f:e3:15:99:e1:28:93:b9:0f:98:ac:16:61:b4:
76:cf:2e:82:f5:89:6c:e6:96:06:ff:25:e2:42:f6:
6b:33:30:2c:c0:0a:4a:e6:44:3a:9a:b5:71:2e:9f:
60:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EC:FE:52:84:C4:A6:CE:61:70:9B:AB:B2:E6:C9:97:48:79:BF:2E
X509v3 Authority Key Identifier:
keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:15:36:f8:cc:f0:06:c4:93:df:01:09:6c:90:b2:28:a8:67:
23:b3:63:07:4c:e1:be:d4:4b:83:5d:a5:74:f2:3e:14:ec:2f:
7e:5a:b1:bd:77:c8:e0:03:12:3a:64:aa:da:ec:1c:86:ce:8f:
db:89:4e:56:ff:13:ad:61:fb:7a:19:9b:86:0c:62:72:f9:4d:
a8:aa:28:72:9a:8e:2e:47:ae:f9:b7:3b:b5:9f:84:5d:12:0e:
5a:99:10:10:d9:f3:d2:ee:bc:a1:bc:f5:d0:95:bf:21:fe:1d:
cf:4e:3e:6f:52:9f:8d:3a:58:13:5f:c1:23:e1:7b:59:a8:2f:
8c:6b:8a:7a:53:14:a4:c8:90:be:a4:e0:c4:a5:ee:f9:3e:ed:
ab:ad:ce:f6:2d:d0:93:a8:71:13:3a:88:56:d1:fd:f4:4b:63:
2d:b3:da:0e:b7:61:3e:c4:86:50:32:1c:11:06:56:77:65:32:
d5:b6:76:0c:90:84:1a:4a:0f:d9:f5:d1:ef:b4:44:69:09:ba:
78:ae:55:34:92:8c:25:2f:92:b0:5b:f6:10:fb:09:0d:15:ac:
d5:62:27:1b:03:c0:c1:d6:01:e4:66:f8:90:33:eb:fe:96:34:
1c:f8:34:4a:b1:e4:b6:56:ab:df:07:9d:4a:4d:f1:39:60:7b:
7d:7a:07:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:45 2025 by rpki-client