Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json)
Hash identifier: LQN+Ne/RgunZqkcgMg6XWQmTHdcQEji5Tv4dra9wzJw=
Subject key identifier: 78:18:FF:47:36:B4:D9:99:D9:9C:78:12:4A:61:C7:8F:BE:C3:15:45
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial: 01965A951DF3A972C6B0C7496E5F2867E567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 23:00:43 +0000
Manifest this update: Mon 21 Apr 2025 23:00:43 +0000
Manifest next update: Tue 22 Apr 2025 23:00:43 +0000
Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: 3erdW7McFsZ68MUoSVNiKQxlUyFFXEacq0xttAmuUKo=)
2: urKpUlRihT17e4-sYhWpyMcE8Ac.roa (hash: OKr8BwUnDAnQRh/fja/ALDyKIeKec2Yi0x2apcZhAec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:95:1d:f3:a9:72:c6:b0:c7:49:6e:5f:28:67:e5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Validity
Not Before: Apr 21 23:00:43 2025 GMT
Not After : Apr 22 23:00:43 2025 GMT
Subject: CN=7818ff4736b4d999d99c78124a61c78fbec31545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:8a:c6:26:26:e9:f5:20:69:94:aa:91:d3:
f9:a2:0c:f1:55:3c:df:36:27:d2:d0:53:dc:90:d6:
b4:c6:39:42:f4:14:99:c9:df:8f:e6:ca:52:3c:13:
d7:64:2c:26:92:d4:f0:2e:10:3a:4a:df:c9:4f:9f:
20:7c:0e:b8:18:6c:6b:dd:5f:04:b4:f0:9c:ff:ef:
42:f6:bb:f3:5b:1d:fd:c4:f0:0e:65:10:9b:dc:b6:
e0:a1:83:dc:23:af:8b:af:10:c6:38:f7:e6:0d:22:
d8:72:03:22:ad:1d:c3:39:b2:4d:c1:ed:a7:e1:52:
00:55:94:18:58:bf:f1:c8:70:ab:0e:3b:86:cc:db:
5e:ce:e5:d1:dc:10:b8:eb:96:36:06:cd:6e:23:32:
5c:04:d4:63:1e:d4:1f:7c:47:99:ed:7c:5c:e4:08:
bd:df:50:4a:02:c4:fd:46:06:30:48:b8:91:33:d3:
28:82:5d:02:dc:b9:64:14:0a:c5:5b:a8:52:52:7a:
df:37:85:f9:16:27:0f:18:ee:72:89:de:a5:82:1c:
9c:ef:73:bd:b0:15:6f:22:51:18:ba:b5:ed:9a:33:
c7:6e:58:50:6b:8e:b4:62:0d:5b:a4:cf:3f:87:34:
b3:15:19:7a:94:8a:5f:4a:c5:a5:1f:f0:02:b2:5d:
fa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:18:FF:47:36:B4:D9:99:D9:9C:78:12:4A:61:C7:8F:BE:C3:15:45
X509v3 Authority Key Identifier:
keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:36:38:7c:e9:98:83:18:59:99:77:60:a6:c9:cd:7f:bf:b7:
d3:89:32:0a:71:6d:d0:35:6a:55:d1:8a:a2:78:1b:8c:b8:28:
53:c3:ff:e9:3b:7c:5f:03:94:03:40:a8:b1:0b:6e:53:5b:8c:
4f:5c:2d:e9:9c:46:10:4e:89:35:7b:04:78:75:12:4b:2d:fd:
31:be:6b:1b:02:5f:22:a3:f1:62:ff:95:5f:49:9d:c5:45:71:
bf:b0:df:90:ac:21:32:0d:08:f3:ce:4a:e8:6d:f6:03:9f:2d:
e8:14:bb:d4:87:d2:80:42:11:60:32:07:1c:30:b2:d3:00:f7:
4e:34:b1:4d:d2:0b:89:58:ff:df:0d:d5:14:b9:93:6b:0d:03:
9a:37:3f:6f:09:10:86:90:39:db:ca:4b:22:1f:5e:5b:74:49:
7a:02:1c:f2:93:73:72:d8:70:69:06:b4:e4:09:4f:dc:2d:a6:
12:49:8a:62:8a:eb:80:2d:77:b5:07:79:f8:4b:af:b7:92:8d:
9d:6f:d8:c5:65:4d:dd:05:99:09:7a:42:d7:05:45:ed:f8:d4:
42:a1:a8:c3:05:3c:03:4b:40:0b:fb:bd:9b:73:d5:ad:f2:b2:
e7:64:e2:33:7c:02:59:f5:76:a0:bb:24:47:6a:a2:91:2a:ba:
d4:fe:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:09:47 2025 by rpki-client