Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
File: 3o44GHrnDLx77WlXWfDgMpn7swI.mft (raw, json)
Hash identifier: 7dAPKe6v9XAWG/6wdQkUlZbTh7xsV/SD/OOhBrp1HZc=
Subject key identifier: EB:07:94:55:45:EC:94:BE:1A:D2:F6:C7:74:0A:79:25:DA:AD:88:46
Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
Certificate issuer: /CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Certificate serial: 01963C53F077B28C779CFD926C656EB1763C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
Manifest number: 0179
Signing time: Wed 16 Apr 2025 02:00:56 +0000
Manifest this update: Wed 16 Apr 2025 02:00:56 +0000
Manifest next update: Thu 17 Apr 2025 02:00:56 +0000
Files and hashes: 1: 3o44GHrnDLx77WlXWfDgMpn7swI.crl (hash: vLUWWawVxdCr5OeklRq89+oaPdMD7ngYodhTpEu7ddQ=)
2: wSO8Qf5_v1p-oNDifbsTI9tUaPY.roa (hash: t8VFb4R1YuauyoB16s9G5smfDaNXuP879i5idHgDRZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:53:f0:77:b2:8c:77:9c:fd:92:6c:65:6e:b1:76:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Validity
Not Before: Apr 16 02:00:56 2025 GMT
Not After : Apr 17 02:00:56 2025 GMT
Subject: CN=eb07945545ec94be1ad2f6c7740a7925daad8846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fd:93:54:0f:76:d3:b7:0a:92:d6:1a:eb:a3:
3e:bb:f8:34:18:49:ec:bf:a2:0a:12:41:e0:69:d0:
20:ab:cc:5c:5d:a8:f3:fd:03:d7:da:14:37:4b:b4:
dd:56:0b:41:63:02:91:09:d3:9d:cb:70:2c:60:cf:
86:9d:3d:e0:73:03:88:58:53:db:4a:f3:5e:e0:b1:
48:2e:5b:03:1c:e0:7f:ca:25:18:de:5d:04:48:40:
f2:f1:5e:c3:9d:20:e2:ef:68:20:1a:13:a2:11:87:
48:3b:bf:b3:2d:59:ad:62:00:e0:5e:6a:79:d6:96:
c0:7e:46:bf:01:38:c9:17:98:4a:9b:be:e4:7b:b3:
7b:41:74:e8:5c:d3:dd:63:0e:94:bb:fa:1f:3e:23:
1b:79:ea:e0:77:df:5f:cc:fb:b1:1b:b9:c4:26:29:
a9:ca:86:78:2c:d0:b2:8c:c4:06:d3:66:31:dc:cf:
59:2d:57:f9:f9:cb:9b:ea:39:b6:9e:5e:42:46:26:
a2:88:f6:49:7a:fb:4a:d3:55:be:63:ec:f6:0c:b6:
9c:a1:24:67:9b:4b:10:f8:5d:65:92:c1:a8:24:e9:
23:4c:96:36:0a:52:bd:1c:77:5a:39:e3:4c:5d:64:
f8:24:44:bc:ba:04:e5:9a:b5:33:a0:47:1e:1a:ea:
72:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:07:94:55:45:EC:94:BE:1A:D2:F6:C7:74:0A:79:25:DA:AD:88:46
X509v3 Authority Key Identifier:
keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ea:3c:1b:ba:68:62:8d:3b:67:a0:eb:14:ea:8e:8e:2a:33:
6a:6f:57:f4:e5:0d:7e:5a:81:3f:bb:c8:6f:53:08:3b:21:01:
cf:52:23:54:4d:b7:9f:07:41:f5:04:c4:d7:cd:bb:69:b8:b0:
51:a9:67:3e:ec:48:e0:2d:52:a6:37:bc:e8:59:9e:9c:f3:52:
8e:46:ac:fe:51:47:6a:32:35:82:6d:9f:e4:f7:f1:64:28:bc:
d2:36:63:6b:c9:2e:d2:ca:94:64:a8:b9:04:60:fa:d4:ee:1b:
35:a2:9d:0c:d1:cb:73:6a:d5:1f:cb:62:f0:53:b7:8c:f3:b6:
f0:a8:38:27:15:50:78:58:f6:0f:70:98:47:f5:bc:2c:15:09:
32:9e:c8:69:b5:92:f9:63:0a:9e:30:ee:f7:f0:de:ea:cc:2a:
77:8b:65:b6:5c:18:ea:ca:65:ff:e2:a6:e4:04:9d:f6:fa:97:
1e:37:32:43:a7:5e:3f:9f:6e:fe:20:b1:aa:e2:e6:9a:46:1b:
26:f5:32:51:02:8b:fd:29:74:0d:6c:eb:2a:2a:f6:b6:c0:53:
7d:28:cd:c6:4d:78:bd:56:eb:20:25:61:b8:1f:34:2f:95:2b:
42:3a:05:37:29:26:67:32:a9:86:9e:66:9b:d1:0c:78:2c:6a:
4b:71:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:24:51 2025 by rpki-client