Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json)
Hash identifier: Ki6Z9OKChDEDFhgpvnJT1wlPS+a+2xe8rL58w+oH010=
Subject key identifier: 8C:23:BF:CD:78:9D:5D:DA:6F:01:A8:4B:BD:7B:25:CF:99:D1:52:50
Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Certificate serial: 01964BFDB0CBE29D44F55C0839202431E37C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 03:00:38 +0000
Manifest this update: Sat 19 Apr 2025 03:00:38 +0000
Manifest next update: Sun 20 Apr 2025 03:00:38 +0000
Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: RsmuYrZQIxsx54pShdQ9afsGLjp+0zp7Vg5EeUVdOoM=)
2: 6GNxdzK9UE9bHySiQzQ4c2EkGfY.roa (hash: xWTUJszNKd3dbNHz1f2JomMkK2hd4V6IPZrJaK6VjKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:b0:cb:e2:9d:44:f5:5c:08:39:20:24:31:e3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Validity
Not Before: Apr 19 03:00:38 2025 GMT
Not After : Apr 20 03:00:38 2025 GMT
Subject: CN=8c23bfcd789d5dda6f01a84bbd7b25cf99d15250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:3f:64:22:a8:79:66:45:7b:14:f1:14:96:
78:2d:31:93:40:30:a5:92:65:8f:05:af:f1:3c:40:
4e:ab:d8:22:67:84:1f:60:97:77:ac:34:23:34:e2:
c2:6e:aa:dc:8c:ff:03:51:49:60:83:0b:ea:8a:c5:
66:d0:76:3d:bf:8b:71:42:ae:28:a4:5f:34:6d:f3:
0b:a1:d5:ba:a8:5e:7a:f7:af:c7:b2:47:8a:d6:04:
79:1d:c9:fb:91:a8:9b:a5:e1:be:da:c7:52:98:40:
a0:66:ea:49:12:3f:ff:3e:1a:e3:7a:06:f4:64:af:
67:d5:83:34:d7:1d:b9:02:aa:0d:67:2d:fc:74:7a:
8c:34:6f:be:17:2d:96:56:35:4b:4d:05:67:87:14:
29:3d:ee:dc:35:3d:41:78:00:66:49:75:8c:8e:73:
41:7c:0d:10:f1:a3:d1:ed:76:a9:12:2a:57:15:bd:
98:6d:6d:20:49:dc:26:2c:62:3c:53:48:41:6a:8f:
1d:57:52:5e:5d:0f:e5:dd:7b:fa:da:27:fd:60:3b:
83:9e:ac:a5:40:bf:f2:db:85:72:ba:9b:3c:10:ab:
f6:80:f6:58:a7:18:cf:7d:1d:a2:c9:cf:3c:9f:05:
93:45:4c:98:62:52:40:59:d4:fd:b9:c2:77:15:48:
60:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:23:BF:CD:78:9D:5D:DA:6F:01:A8:4B:BD:7B:25:CF:99:D1:52:50
X509v3 Authority Key Identifier:
keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:74:ac:42:e6:f5:b6:fa:22:c1:49:b8:94:e0:4e:66:68:2d:
9f:b7:d0:79:99:52:1e:4d:08:06:30:a1:7a:04:d8:f0:71:9f:
46:2b:c3:23:10:7e:87:c1:cb:37:b8:71:66:3d:23:91:b9:74:
6a:7d:84:6e:82:aa:f1:0d:47:ba:9b:18:ba:72:50:d8:b6:1e:
63:89:8d:38:34:14:72:d1:50:fb:47:51:62:b4:54:ff:7a:ae:
7d:f1:ce:8c:7c:dc:33:f0:46:e0:04:3c:ff:86:6b:88:2d:cb:
b6:ef:eb:6f:10:08:f1:38:d2:4e:ad:24:88:ab:22:2e:73:a9:
32:e9:39:fb:3c:af:45:62:4f:6c:af:21:48:1e:b6:4b:91:fa:
db:a2:2a:72:96:03:56:a7:ae:95:aa:75:21:9b:11:21:f9:bd:
00:b9:89:60:27:16:77:88:bb:2d:0c:22:4b:9f:5b:52:1f:98:
79:26:d6:96:cd:36:52:b5:b9:cb:9c:a1:7d:33:14:c5:32:01:
34:b5:7c:39:49:26:e4:fe:8b:b9:72:2e:6d:67:ff:0d:d7:df:
b2:54:21:77:36:d8:a7:d9:7f:0b:56:be:f5:d0:c1:fb:8a:17:
6a:75:0a:8e:1b:ce:79:3e:1f:6e:2d:0d:28:fa:64:a4:68:a2:
b5:fb:e7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:45:50 2025 by rpki-client