Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
File: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft (raw, json)
Hash identifier: YzzNWYd9O6aKjpE9J7u6+1xdBuElBnhm2/KE085AEHY=
Subject key identifier: CC:04:71:CA:5F:A8:7E:3E:97:26:5F:13:ED:3F:EC:D5:AF:B4:C6:F4
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial: 01965A26C7AFAE0B546FE8C3D30B2E3460F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
Manifest number: 10E3
Signing time: Mon 21 Apr 2025 21:00:12 +0000
Manifest this update: Mon 21 Apr 2025 21:00:12 +0000
Manifest next update: Tue 22 Apr 2025 21:00:12 +0000
Files and hashes: 1: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl (hash: oO5JCiq3ibTqi0GEhUOyaorOL4fNGVVH6BtNi5liUQ0=)
2: AUThtEaMt8aPJTPbVgcuq62kxQA.roa (hash: czDZteG7pPqWWcX7VvpRLnTlFJ8uAjHDP8qBW/wgGIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:26:c7:af:ae:0b:54:6f:e8:c3:d3:0b:2e:34:60:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Validity
Not Before: Apr 21 21:00:12 2025 GMT
Not After : Apr 22 21:00:12 2025 GMT
Subject: CN=cc0471ca5fa87e3e97265f13ed3fecd5afb4c6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:e0:68:6b:1f:a9:02:69:32:37:74:58:e9:
9c:11:2b:6a:0c:ba:b7:e0:0d:73:9b:93:f9:7c:ea:
93:e7:13:eb:3f:00:60:38:25:c3:b8:96:37:34:87:
27:b1:0c:f9:58:b1:56:75:29:5f:92:91:08:e3:ab:
50:76:27:0b:7a:eb:1e:bd:ef:39:83:22:06:d8:e6:
8b:78:9a:56:78:3b:76:82:46:59:53:b9:56:f5:37:
a3:9d:3b:db:cb:0f:99:08:8a:fb:35:7a:fd:f9:02:
df:39:db:09:c0:cd:13:d0:d8:cf:2e:89:36:15:c7:
be:27:e3:e6:17:89:94:40:ca:88:25:d6:3b:53:f1:
b3:40:c6:b8:d3:a5:82:3c:3f:20:4f:0f:4b:e4:4b:
fd:0f:cb:95:87:8f:8f:10:5c:0d:af:a8:35:cc:0b:
52:fb:78:b1:33:03:9e:b4:94:52:cc:c0:02:28:db:
36:85:32:90:2a:89:66:e6:99:89:ce:0c:f5:1a:55:
56:2a:25:3a:cc:3b:34:85:56:7f:d1:28:19:54:ff:
59:e1:13:81:bb:5b:b9:d2:c2:45:69:0c:06:ca:21:
3f:fe:ff:fe:2e:39:75:10:57:03:93:12:c5:f3:99:
f2:81:81:37:a3:f0:c1:36:51:3e:6d:10:bc:a2:80:
5a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:04:71:CA:5F:A8:7E:3E:97:26:5F:13:ED:3F:EC:D5:AF:B4:C6:F4
X509v3 Authority Key Identifier:
keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7a:32:e1:e6:0a:13:23:c3:21:27:62:2c:ce:98:35:09:c9:
c8:e7:51:fb:d4:f1:52:8c:25:c8:fe:76:d0:50:2d:a0:21:e9:
e6:91:e6:df:be:2a:66:1d:8f:51:82:f5:19:4a:d6:86:e9:b0:
48:37:cc:e7:d8:2c:e0:25:aa:19:2f:3f:83:4f:79:9d:ff:65:
3f:63:cd:d0:96:7b:11:21:2e:38:7c:a4:c9:50:f6:7e:c9:95:
73:b3:4d:22:49:5a:e2:fe:01:d9:21:0c:cb:f7:d6:0f:d6:40:
56:53:1d:92:d3:df:fb:1b:51:5c:57:bd:e3:24:92:1d:12:8a:
1a:fc:7f:5a:be:10:a2:18:68:42:59:67:56:c2:45:f9:88:87:
a7:39:01:2c:12:1a:cf:fe:a3:d6:db:fd:f3:18:dd:83:a0:50:
33:15:bd:ca:bf:2a:c1:2b:c3:2e:a7:42:27:c4:04:4d:c2:4b:
3e:88:78:c4:8a:e5:96:c0:ac:fb:1e:bb:d4:10:df:22:df:53:
fe:13:ca:3e:f8:92:eb:63:d6:4d:6c:6c:1e:68:e2:e3:b9:b7:
a0:d4:e7:85:bf:7b:79:a2:35:0d:75:5b:2d:38:62:c4:f1:99:
6a:a8:5c:a4:a8:19:a0:68:4b:97:55:ac:0b:11:7c:c0:76:84:
95:7c:e9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:19:33 2025 by rpki-client