Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: 2U78Q0GksbZcN48F9eH+4QqleG7L3xBDlfD84lgmS5I=
Subject key identifier: A8:B2:45:F9:B5:83:70:63:8E:27:67:BE:3B:C3:09:CA:C3:D6:A3:01
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 0196591535E5E3F5D0ED8A5789E71D7A42A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 0E71
Signing time: Mon 21 Apr 2025 16:01:24 +0000
Manifest this update: Mon 21 Apr 2025 16:01:24 +0000
Manifest next update: Tue 22 Apr 2025 16:01:24 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: PUBWLbTcrR18MYMBIQD7OXtTjaICxG23YtPu5EWP3iw=)
2: i8FpzgugtZcFKDdMebgRZ16RoIg.roa (hash: Z0Wnkrs5xvwFBERJB5wvtxVMhqH4ul49O/mmtU48/Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:35:e5:e3:f5:d0:ed:8a:57:89:e7:1d:7a:42:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Apr 21 16:01:24 2025 GMT
Not After : Apr 22 16:01:24 2025 GMT
Subject: CN=a8b245f9b58370638e2767be3bc309cac3d6a301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:5b:58:f2:ef:b7:7b:e0:a4:31:cb:b7:f8:
3d:c1:4c:96:a0:78:73:3a:bf:f9:f4:66:42:ad:39:
ce:8d:ff:db:3d:8e:eb:6d:aa:77:72:c4:25:8b:12:
07:8e:08:43:b9:9a:83:4c:89:e3:84:56:fc:3b:d3:
72:91:b6:3a:d3:c3:05:1e:4c:dc:cc:89:fa:76:31:
6c:92:9b:93:6c:22:78:a8:a0:67:56:10:fb:43:67:
12:8e:89:e0:04:e4:2d:34:1c:a2:e3:90:59:d8:ae:
9a:53:0a:81:b7:39:d0:06:45:b8:9c:e8:22:2f:69:
eb:9b:ec:4e:45:ec:60:19:08:5b:de:0c:a6:5f:bd:
fe:3f:ed:b6:63:ba:bd:c0:bb:ea:31:a8:eb:8a:38:
5c:85:5c:2e:b0:a6:cf:f3:7e:e7:24:0a:34:94:86:
12:52:e0:6f:15:bf:73:40:68:4f:d3:94:94:b9:d3:
33:f0:a9:51:fe:80:35:57:bf:f7:a1:36:b4:39:2b:
3e:bb:b0:f5:ed:cf:db:3a:63:f1:69:5e:a7:d0:10:
9e:41:db:38:6f:b7:6e:49:93:b1:ae:47:71:ca:7a:
c2:9c:36:ef:a7:0d:cd:cc:b4:48:bd:15:d5:a1:c6:
ec:b9:56:37:d7:cc:1f:45:06:a9:a4:05:85:f4:cd:
c8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B2:45:F9:B5:83:70:63:8E:27:67:BE:3B:C3:09:CA:C3:D6:A3:01
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:31:35:26:4e:d8:35:a3:81:b4:e3:1e:d2:2b:e3:ce:54:1a:
0e:a9:c2:35:f0:d2:fd:e9:67:3e:a9:f5:38:7f:82:db:ad:69:
1e:59:cf:84:2a:e4:f6:7b:9f:c9:2d:cb:34:52:c9:00:b0:d5:
8a:26:70:96:f6:75:01:ea:44:87:51:57:a2:42:ed:08:f9:9e:
4f:a6:b8:8d:93:09:dd:de:c0:d8:0b:e5:78:cb:49:8e:bb:1a:
d7:00:d2:2c:bd:e9:95:8d:86:c9:c8:56:95:6a:95:d2:99:8c:
52:48:a5:7e:8c:45:96:9c:07:73:dc:ca:d9:0e:14:ad:14:13:
1d:a6:7a:3f:61:1e:7a:f8:0b:23:83:16:ae:39:00:ae:f2:21:
82:8e:77:3a:60:26:45:df:e8:7a:21:18:35:c4:3b:7d:58:2a:
90:38:3b:86:e9:ea:12:e9:67:a1:86:62:85:ab:1f:70:0e:5e:
31:13:60:97:43:13:4f:2a:7f:f2:03:3b:fb:03:cf:40:6d:0b:
bc:79:27:5d:56:0e:95:12:31:2c:5e:da:77:66:de:bf:32:1f:
bb:68:87:70:db:f6:4e:02:98:7b:23:3e:7b:d2:e1:4c:42:9d:
7d:4d:7d:aa:c8:bb:d8:43:af:93:29:13:8c:9a:0f:cd:b5:55:
77:11:46:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:22:11 2025 by rpki-client