Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: fw8Po0l12GUmAJYQ4nhi+U14tRDbIrYDI1NGYmSIbNs=
Subject key identifier: 36:34:21:25:AC:22:ED:53:23:AB:81:84:FB:26:61:01:21:18:DB:9E
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 01961169AC98245953553F014FEC8D4C3B52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 09E8
Signing time: Mon 07 Apr 2025 18:01:00 +0000
Manifest this update: Mon 07 Apr 2025 18:01:00 +0000
Manifest next update: Tue 08 Apr 2025 18:01:00 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: o9blU0nnXkpDeUxp8Ba2yXIHJ3hU90qiRLHvIp11T5o=)
2: 4NcSUJ4Kg8dewIwP8RGgWPLVsGw.roa (hash: NfguGRutDpTl33g3TT2hnx9Rfi2f9fnIaQJYs24UAYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:69:ac:98:24:59:53:55:3f:01:4f:ec:8d:4c:3b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: Apr 7 18:01:00 2025 GMT
Not After : Apr 8 18:01:00 2025 GMT
Subject: CN=36342125ac22ed5323ab8184fb2661012118db9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:df:95:08:6a:15:fd:b6:72:32:e8:80:7d:
b6:82:42:df:b1:18:87:85:a6:31:a2:ab:33:06:70:
c3:92:1f:44:ae:8d:6b:65:bf:39:25:f1:84:54:ca:
8b:b6:5f:f1:b6:68:e6:db:31:eb:ab:05:29:84:ed:
70:a3:a8:40:43:b8:5d:78:c1:63:3a:b3:b6:b2:d1:
43:64:83:43:1e:2d:09:bd:3a:d2:4e:ad:19:21:99:
24:fc:64:21:42:75:df:13:66:4c:00:5f:81:56:e8:
79:6c:c1:7f:e9:df:10:a6:fe:c4:32:5f:d1:ee:ac:
ab:88:9b:93:76:46:e6:52:5f:f5:0f:15:e4:88:54:
5b:14:08:a6:2f:4e:e3:a1:14:50:20:5b:43:cf:1d:
b4:be:85:6b:92:4b:c4:89:61:48:c8:d7:ba:f8:29:
69:05:54:05:67:8b:3a:f3:aa:6d:2f:d8:3a:3d:47:
52:46:c4:c4:1c:35:80:ac:32:08:95:fa:cc:69:61:
66:9f:83:01:6b:02:3b:a4:b4:af:36:e4:27:1b:74:
bf:23:d7:7b:06:c4:13:c0:8f:e9:1c:3c:f1:3a:39:
28:11:f8:b1:09:ad:be:e8:8f:a4:22:56:40:60:38:
00:bf:2c:4d:0f:1b:73:aa:09:a6:9b:91:65:d2:f3:
74:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:34:21:25:AC:22:ED:53:23:AB:81:84:FB:26:61:01:21:18:DB:9E
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c5:85:b7:7e:87:cb:c1:c7:a8:f2:29:30:1b:31:d6:0b:cc:
87:3f:51:5c:88:a6:8d:11:eb:4d:f0:58:d8:bd:24:8c:b0:e6:
01:a0:94:5a:b9:e9:13:a0:98:e6:bc:50:ad:b1:49:bc:5c:68:
f4:f8:3e:8b:c4:66:2b:5a:74:64:ad:18:89:17:12:79:bf:5d:
aa:50:ae:26:74:92:ca:4c:85:ba:d0:41:2c:66:ff:18:34:10:
61:42:58:61:9c:eb:df:94:b1:f6:2e:07:09:ff:e3:ec:85:8b:
0c:f4:9e:9b:bf:cc:2f:35:09:9f:00:de:2c:4c:7b:ca:2e:56:
9c:73:a9:f6:82:4c:f6:0f:75:a9:32:ff:a7:50:49:b4:f0:c2:
c4:63:2a:d8:0c:d6:cb:0d:f1:30:bc:f2:e5:08:fa:1d:45:1a:
37:93:8b:ce:9d:02:11:89:16:17:f0:72:f6:b8:c5:b8:6e:8d:
16:0f:ec:62:2e:d3:a4:51:51:bf:70:01:60:39:e7:bf:79:37:
f1:46:9d:f4:86:ae:55:df:cc:82:3c:5a:42:27:23:d0:e3:2d:
d7:a9:30:76:e5:c1:88:94:37:f1:42:8d:5a:c1:65:98:2a:8b:
75:b6:1c:4f:65:22:74:3a:16:a9:2e:7b:a8:b3:1b:a7:ea:93:
ce:0f:e9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:22 2025 by rpki-client