Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: sxGvN5JtyTWu/tWo6jour/1MZ15a1zCuon7qsqJa1Fw=
Subject key identifier: 07:CB:B6:90:57:0A:9B:44:5A:84:4B:D7:2C:6A:37:57:05:F2:4D:D7
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 019510FDB0F926D1BFB32DCDF30F7C110A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 23:00:16 +0000
Manifest this update: Sun 16 Feb 2025 23:00:16 +0000
Manifest next update: Mon 17 Feb 2025 23:00:16 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: pt+7X+FYuT0vLuunxEqdX+iYdgni9LU+SdhvaH9wA7U=)
2: 3o2OhEX8D-C9sW1xo7_jlOmD_j0.roa (hash: k3QEknU5rjZnXpONxqfvLO581xpn3+pyaYB6EDwI7ck=)
3: 7vdY6fKyJL6xOTEWHPQznWg1cuQ.roa (hash: LAvqsJ06fMyPoV983D+eGZunyZuIfO7UCXuYbTjEljc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:b0:f9:26:d1:bf:b3:2d:cd:f3:0f:7c:11:0a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Feb 16 23:00:16 2025 GMT
Not After : Feb 17 23:00:16 2025 GMT
Subject: CN=07cbb690570a9b445a844bd72c6a375705f24dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:00:dc:20:79:be:41:c4:37:fa:77:e3:da:
1d:fa:d3:20:61:cd:61:2b:c3:88:a8:5c:79:7a:f0:
2a:25:f0:7a:97:39:03:23:99:e5:3e:93:8a:f9:56:
24:62:b8:a6:5e:c7:75:40:89:32:8c:d5:f2:5b:ce:
00:29:35:c9:5d:45:4c:d2:2d:6e:64:e3:a1:13:45:
d3:cc:51:83:4a:50:78:99:27:9a:2f:01:87:ea:76:
08:75:de:67:1a:67:96:23:9e:66:26:93:23:f8:ef:
9c:86:61:ee:83:5b:3d:3c:7c:ff:3b:9a:87:5d:b4:
6f:0c:b7:2a:8c:7a:e3:73:17:9a:05:8d:c1:fa:38:
73:b7:bb:7a:60:d6:16:10:37:3d:08:c9:ac:e8:d4:
75:16:f7:36:12:5f:48:1e:a1:3d:f7:de:1c:8c:f4:
58:44:ef:d3:07:53:49:fe:4a:97:8a:d6:13:ab:53:
ef:b3:24:6d:4f:22:72:21:43:e3:19:78:8c:fe:8c:
ad:b0:81:11:e0:ed:46:10:8f:07:ba:18:ae:66:1a:
a5:44:0c:10:8e:df:2d:c3:15:0e:e4:f8:4e:55:5c:
5e:4d:52:2e:a6:c5:1f:33:1d:33:73:e7:42:c1:16:
31:07:93:9e:73:0b:de:b8:76:0b:69:c6:8d:58:67:
f2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CB:B6:90:57:0A:9B:44:5A:84:4B:D7:2C:6A:37:57:05:F2:4D:D7
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:78:1f:c0:95:d6:3a:f7:15:65:f0:8d:9b:d4:54:f6:f8:4d:
2a:1a:e4:a9:45:30:c3:f8:c6:37:c2:19:e2:01:3b:39:b3:23:
5d:db:07:c2:81:c9:a0:fe:c0:52:f7:49:ea:33:6f:37:a2:f9:
82:d4:bd:14:95:0f:9f:f7:30:6e:77:19:a4:90:1a:77:a6:92:
55:bd:f6:62:90:86:de:5b:c7:0f:e4:d0:a5:0a:82:c4:4c:a0:
75:b6:a5:56:04:7d:8a:8d:e9:79:8c:f5:00:55:3e:c6:8b:12:
38:79:c0:04:2f:26:50:80:8b:85:81:2f:3b:0c:f2:ed:ac:55:
5c:f7:9e:0c:93:61:20:2e:e0:f7:46:fc:cb:b9:ed:04:88:9c:
cc:fd:80:17:2a:83:35:6b:ea:e2:76:b0:29:43:62:11:0a:fd:
d4:ac:9d:e1:8e:a7:1f:7f:d4:e8:27:d7:9e:3e:ad:17:b5:4f:
cd:d0:33:30:c0:a0:48:fa:15:35:12:90:21:d9:2e:b4:53:2a:
34:2d:ef:61:fd:50:fc:bd:b9:4f:29:d9:9b:03:93:f5:a5:42:
00:eb:7b:ba:84:16:f6:c5:ab:55:7b:28:cb:db:dc:b8:8d:9e:
9d:5b:6c:3d:49:62:b8:68:b0:8e:06:b3:e7:05:e3:bd:ff:5a:
1a:3a:ce:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:50 2025 by rpki-client