Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
File: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft (raw, json)
Hash identifier: YNP9jalmAKYfw41mtdeea+bqsNhvB/ObeT2NCPWBt+s=
Subject key identifier: F4:4C:C9:10:87:2A:81:54:78:55:70:79:04:78:83:33:E3:AF:BD:57
Authority key identifier: DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
Certificate issuer: /CN=dd189621d2fa872166e6a05ee47a7d756243e919
Certificate serial: 01965537FF1D37EC1D876F8C7C2C3904D1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 22:00:54 +0000
Manifest this update: Sun 20 Apr 2025 22:00:54 +0000
Manifest next update: Mon 21 Apr 2025 22:00:54 +0000
Files and hashes: 1: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl (hash: YT/3f4JSS7gdAdjTSQA7heiyjgyga8kOsB3q3JY2ysw=)
2: QrmnbjgSygFDWHsO09VpW_iZC0c.roa (hash: VHw1+Cgx8Es+YaWERxb3+M1gB2Ndwqk8aRAjsalZIcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:ff:1d:37:ec:1d:87:6f:8c:7c:2c:39:04:d1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd189621d2fa872166e6a05ee47a7d756243e919
Validity
Not Before: Apr 20 22:00:54 2025 GMT
Not After : Apr 21 22:00:54 2025 GMT
Subject: CN=f44cc910872a81547855707904788333e3afbd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:b2:80:b3:37:5d:ae:50:e4:40:a9:4b:02:
ba:b5:5f:36:8b:3b:20:cf:3d:f7:e3:5f:e3:fb:a0:
44:7e:0f:a4:b2:64:fe:11:c3:4a:48:90:a8:1a:d3:
15:6f:f5:ce:1d:24:5c:ce:f8:d8:a2:bc:d2:8e:9b:
7d:ac:50:41:58:49:89:75:73:92:bc:a7:bf:57:a4:
3a:20:db:4f:ff:09:dc:31:a2:26:28:e5:97:2f:87:
ae:94:7e:48:3f:10:aa:8d:21:c8:66:3b:ab:a9:1a:
74:48:1d:68:44:27:8f:8e:79:7b:2a:21:c6:21:ad:
e6:37:42:4c:e9:32:44:1f:cb:08:43:e3:2a:e2:f3:
bd:c4:87:02:86:58:32:2a:a1:2c:d9:f3:78:c4:97:
f1:ca:66:ef:aa:01:6d:d0:92:80:4d:c6:08:d3:d3:
0d:75:dc:24:69:85:2d:64:41:28:3e:50:95:5b:37:
19:e0:24:da:dd:d8:6c:34:73:15:d5:77:4b:2e:72:
2e:a0:01:9c:df:0b:6b:cd:f7:75:08:04:2e:0a:e0:
d4:bf:96:19:da:b7:bf:ed:3c:46:a6:16:7a:3d:df:
a1:8e:b4:6a:72:5f:eb:1d:47:47:70:27:9e:8a:12:
b3:56:9e:6c:72:7e:10:0b:59:01:5e:69:ee:9b:1b:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4C:C9:10:87:2A:81:54:78:55:70:79:04:78:83:33:E3:AF:BD:57
X509v3 Authority Key Identifier:
keyid:DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:10:19:72:e5:87:5e:34:05:6e:59:08:93:f0:3f:10:a2:cb:
b6:82:14:4f:29:b5:2b:23:a5:ee:48:d0:4f:1e:da:fe:dc:8a:
8c:90:3c:b9:69:25:95:75:ff:6f:6f:00:bf:83:cd:1e:52:5f:
e6:24:17:7b:16:b3:37:5e:65:78:14:ed:f3:30:5c:fb:5c:82:
66:18:a6:9b:38:fa:ef:7f:1c:08:96:5d:b1:9d:54:03:c3:76:
74:fa:12:78:b8:8b:40:3e:09:0c:af:2b:ff:4d:50:a6:f5:bd:
e0:89:62:d3:30:1f:39:be:b9:9a:d1:38:13:7e:16:07:15:7c:
62:c4:92:7f:82:71:16:d8:db:25:2a:7f:6d:8f:00:b2:74:59:
8a:42:b8:00:15:87:63:f5:b1:2e:be:25:97:ca:a1:b9:09:3c:
d8:13:23:87:ec:79:5e:91:54:2d:ea:12:46:fc:4f:91:e1:e4:
d8:74:b7:84:4c:f3:5a:41:21:09:26:84:64:f8:41:d3:f0:99:
88:b5:34:d8:a2:77:3f:e0:45:07:64:1b:7f:fb:33:bd:33:1b:
0f:1f:39:16:98:40:6c:1d:d1:cf:30:ea:56:af:25:cb:f4:93:
75:21:ff:70:10:9c:47:93:88:11:c2:76:e5:1e:0f:a0:8e:97:
56:72:28:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:13 2025 by rpki-client