Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
File: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft (raw, json)
Hash identifier: cganzQoULCHALrjH9Jmy5MjJNd2JMB7aJeguuyBxQ3U=
Subject key identifier: 03:49:4F:65:07:07:2F:FE:A5:70:AF:10:9D:C0:08:A2:4F:AC:7C:06
Authority key identifier: DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
Certificate issuer: /CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Certificate serial: 0196157E09ECB2404217C1D7538777B3233F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
Manifest number: 08E2
Signing time: Tue 08 Apr 2025 13:01:43 +0000
Manifest this update: Tue 08 Apr 2025 13:01:43 +0000
Manifest next update: Wed 09 Apr 2025 13:01:43 +0000
Files and hashes: 1: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl (hash: rvIhPqLR/Jtm4mQGPbOL0B5SyqNTiJqh+vuSWjWInqQ=)
2: EiOjn6Cn36HWuMJFodH0EVbfYdc.roa (hash: prKCNtfilLl42pcGEF7Kjg7za6QhPHVZeIUhroTyVuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:7e:09:ec:b2:40:42:17:c1:d7:53:87:77:b3:23:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Validity
Not Before: Apr 8 13:01:43 2025 GMT
Not After : Apr 9 13:01:43 2025 GMT
Subject: CN=03494f6507072ffea570af109dc008a24fac7c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:56:fa:a2:54:ed:25:b1:0c:7d:e9:25:c8:
3f:b8:8b:7c:c6:c1:dd:da:10:1f:b6:98:ad:78:13:
cb:26:9a:aa:fe:1d:44:37:f1:1e:72:05:1a:ff:ed:
87:9b:e9:de:64:c2:e3:c9:ba:83:6f:ef:f0:cd:82:
c7:c9:9b:f8:4a:2c:41:e3:e1:9b:40:d2:39:f3:e9:
89:ed:ac:f3:1b:3d:5d:96:eb:ad:1d:62:e2:63:cc:
a8:2a:27:50:bd:aa:42:77:fb:f3:b0:0b:98:0a:40:
dc:ba:23:57:cb:27:84:f8:83:9f:3f:4b:23:c1:95:
07:e4:4a:b3:ff:63:e8:cd:58:75:dc:1b:dc:d9:f8:
51:95:61:4c:1b:97:90:ca:48:c9:0e:31:a2:5e:e6:
91:1e:5b:9a:66:fd:a7:e1:79:b2:80:af:7d:28:cb:
a4:ca:e1:f0:29:d3:27:ab:e3:3c:1d:03:38:8b:6c:
49:a0:39:7b:de:51:65:35:09:b2:8d:48:20:27:f6:
94:d4:fe:9c:b0:50:a7:91:cb:3a:6b:88:de:6f:c8:
fc:bd:64:d1:3b:47:ba:03:cf:5b:5d:ae:8a:1d:05:
08:dc:4a:df:85:24:04:46:4e:82:ac:27:5c:00:0a:
dc:1b:ff:c9:77:9f:4b:78:8c:5f:17:2b:6b:30:b9:
96:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:49:4F:65:07:07:2F:FE:A5:70:AF:10:9D:C0:08:A2:4F:AC:7C:06
X509v3 Authority Key Identifier:
keyid:DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:49:8a:44:bd:50:68:bc:51:63:4e:de:02:70:81:bb:fa:0e:
05:f2:ab:76:31:ab:1c:86:a6:d5:e4:e0:27:6a:d1:4b:71:67:
57:a8:26:96:18:b2:4a:5d:7a:0f:09:7e:e8:5e:c7:75:9e:8e:
32:8a:63:67:04:39:0a:1c:2e:f4:86:3c:9f:11:15:7a:79:84:
f9:43:0e:20:7c:e2:21:33:9f:4f:f6:ec:85:82:eb:63:bd:ab:
f6:77:7c:46:98:8f:a5:10:11:2d:8d:b0:13:c3:3b:48:f1:39:
eb:6f:7a:2c:9c:13:c1:29:31:35:55:8b:05:98:9a:07:07:a6:
83:09:16:05:20:4c:c5:d3:da:ef:8c:b9:e6:86:65:b5:67:9c:
06:79:7c:d3:0d:72:88:aa:ab:a1:48:ad:3f:de:6a:61:66:ea:
3e:a9:9b:ec:e1:ea:23:30:b2:65:1c:fd:73:e9:ca:a1:c3:d4:
73:ff:d0:2e:84:a4:35:10:a7:6f:5c:94:d6:63:d0:13:47:07:
5e:75:64:09:49:ba:c9:3b:41:43:80:d4:c4:14:4e:f1:23:c7:
e2:8c:96:02:78:23:6e:ec:b2:d7:65:85:d0:29:0f:2b:53:2a:
61:a0:c6:ad:5b:be:44:be:f1:f9:84:d4:f3:f5:20:1c:fc:dc:
5b:10:b2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:18:21 2025 by rpki-client