Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: xu5GgYg3kxDGQ5MsvYi9xiAK/0wgAUFefGtF2mTTw2w=
Subject key identifier: 72:4C:0E:BF:E6:C1:EB:C2:4E:53:57:43:90:8F:5D:DB:E0:2A:B3:46
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 0196440CD1BEA858EA30189A467CF44BCC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 14:00:12 +0000
Manifest this update: Thu 17 Apr 2025 14:00:12 +0000
Manifest next update: Fri 18 Apr 2025 14:00:12 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: fC89YIRYDfpY2JOxbw3KTGN3zFiJZSe3lFEUZfIn+y8=)
2: 3o2OhEX8D-C9sW1xo7_jlOmD_j0.roa (hash: k3QEknU5rjZnXpONxqfvLO581xpn3+pyaYB6EDwI7ck=)
3: 7vdY6fKyJL6xOTEWHPQznWg1cuQ.roa (hash: LAvqsJ06fMyPoV983D+eGZunyZuIfO7UCXuYbTjEljc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0c:d1:be:a8:58:ea:30:18:9a:46:7c:f4:4b:cc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Apr 17 14:00:12 2025 GMT
Not After : Apr 18 14:00:12 2025 GMT
Subject: CN=724c0ebfe6c1ebc24e535743908f5ddbe02ab346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:40:f8:d1:5c:02:55:83:37:78:70:b8:69:
1a:69:29:76:35:ac:c9:79:9f:cc:e3:a3:cd:48:86:
be:10:dd:11:cf:5f:ea:55:65:df:dd:a5:fb:67:21:
39:80:89:b9:cd:53:05:ca:c6:0b:46:13:8e:31:1f:
57:74:f3:18:a6:a5:1d:1e:74:d8:a3:17:6d:39:ca:
1c:86:13:f1:d1:f7:e7:17:8f:ce:08:ac:b7:e0:26:
59:91:37:2f:12:4a:da:b3:da:b1:bf:b8:49:76:a6:
5c:31:bd:c2:38:12:ab:8a:c1:99:f9:91:45:2f:03:
98:bf:4c:44:fd:b1:61:2c:9d:82:6f:e6:f2:01:ff:
d9:aa:2d:fb:d7:d3:10:fe:b6:3f:48:dd:7c:bf:1d:
68:3d:28:36:96:b1:82:70:97:f2:bd:ff:51:66:94:
a2:47:db:c1:8d:5e:59:63:3f:41:b8:61:22:b3:56:
e2:a1:7d:93:a9:17:ff:dd:45:01:ed:91:b3:c0:ca:
af:02:a3:ed:9d:42:fb:f9:9c:cc:80:78:9d:c8:6a:
d5:fe:05:05:37:42:b9:3f:a5:5a:da:86:cb:d9:c2:
6b:64:3f:e7:36:76:63:9c:0b:d9:fe:77:0f:19:ba:
d0:42:9e:9d:22:dd:a7:4f:c2:5f:99:a2:11:c1:0a:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4C:0E:BF:E6:C1:EB:C2:4E:53:57:43:90:8F:5D:DB:E0:2A:B3:46
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:78:1f:0f:b7:08:77:b3:f1:6e:b1:29:25:47:30:79:c8:38:
d3:ae:56:4b:7d:6b:ed:97:f2:da:43:c5:36:12:35:72:8e:46:
67:03:57:5c:1d:09:4a:04:52:89:4b:a3:3a:5b:7f:b3:44:1d:
74:02:99:fa:b0:37:01:cf:43:20:1f:0c:32:b1:24:6c:48:41:
e0:e2:fc:a6:27:fa:91:9d:a0:9d:c4:1b:5f:b7:c8:89:9b:33:
5c:11:2d:1d:d2:df:c1:ad:d9:a7:3b:7e:7a:83:28:be:75:7d:
ae:52:f1:92:9e:b4:bf:37:e5:bb:a0:20:ca:37:54:b9:26:3d:
26:a6:0d:2e:95:14:06:e4:1c:2e:21:f7:bc:c5:df:4b:18:a9:
6c:e6:bb:13:ba:b0:1a:a5:9d:0e:ca:fb:d5:a2:2d:f1:ad:db:
97:e5:e5:bf:a6:fa:17:a6:32:38:f5:70:bf:39:28:1b:fc:f3:
bd:c2:39:25:9a:bb:14:99:e3:9b:79:19:15:06:84:09:04:95:
f1:6c:0a:22:5f:73:b4:ff:59:94:6a:f6:c3:37:2f:cf:53:0e:
06:b5:dc:25:3e:eb:3e:af:e3:50:a2:82:9e:6b:1a:c9:75:73:
f5:20:c0:77:8e:10:6d:9d:3c:7e:ca:13:f3:7c:c6:b3:9b:53:
4f:b3:c0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:50:18 2025 by rpki-client