Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
File: k3hbOp4zxStYueyVo3cj8ACL-UY.mft (raw, json)
Hash identifier: cqBJbUIDqhbNc/VRTWmDtQN8FRTJlNMFkWRgubTrpC4=
Subject key identifier: 27:94:22:55:EA:9F:D6:91:BA:61:7F:CD:5E:8F:12:E6:F6:72:9D:1B
Authority key identifier: 93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
Certificate issuer: /CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Certificate serial: 01965E3AC7B359052716FAB788B169B3B3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
Manifest number: 1503
Signing time: Tue 22 Apr 2025 16:00:32 +0000
Manifest this update: Tue 22 Apr 2025 16:00:32 +0000
Manifest next update: Wed 23 Apr 2025 16:00:32 +0000
Files and hashes: 1: k3hbOp4zxStYueyVo3cj8ACL-UY.crl (hash: I6ZvPzUKluY3fpSbt++9CWCzBG+fW7xEuDFHdrQuEQg=)
2: nuidpU4aDNDfpkpE3RPeG40f1q4.roa (hash: KG4XUtkHgFpia+tczkzg4tQ7m8oF5y68xoUIqm5c/jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:c7:b3:59:05:27:16:fa:b7:88:b1:69:b3:b3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Validity
Not Before: Apr 22 16:00:32 2025 GMT
Not After : Apr 23 16:00:32 2025 GMT
Subject: CN=27942255ea9fd691ba617fcd5e8f12e6f6729d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:72:c7:a7:42:12:89:85:8a:03:9f:a7:a5:
b4:e7:24:a9:cf:d0:ea:4e:96:80:9d:af:1e:86:1e:
f8:af:45:ae:45:56:6d:69:c5:10:0c:ad:55:2b:a6:
c4:35:d2:86:ec:30:c0:64:91:b4:e2:9a:41:60:6e:
2c:50:bc:1e:f2:f2:6e:b0:70:b9:ef:3c:b7:ec:5f:
47:cb:83:d6:82:dc:b4:a6:d3:65:63:02:b8:6a:86:
65:8a:a6:47:6d:2d:c8:77:66:84:92:7b:67:1d:3e:
38:8b:b4:8f:6a:8d:c7:f4:e4:a4:f7:1e:a9:da:52:
a3:8c:b6:1b:60:97:ee:b8:0b:51:7c:cd:0d:ef:e4:
5e:72:2c:2f:93:e1:14:4c:8a:0e:cd:01:35:98:e4:
70:8f:ab:76:63:a5:e5:0a:31:6b:cc:47:23:52:b0:
75:3a:16:5d:57:76:51:92:01:43:60:83:59:3e:77:
7e:c9:86:9a:49:d6:b3:16:24:02:b0:8c:7b:4e:dc:
fe:a3:0a:a9:93:6d:28:9d:8e:52:40:9e:1d:e9:47:
54:15:98:bd:67:65:50:02:b7:ab:07:34:ac:3e:08:
f5:b5:2c:9b:b8:7e:2a:de:01:3c:a8:e6:4c:d6:61:
de:11:aa:fa:29:6e:a4:91:ff:bd:ae:ca:0a:1f:69:
e7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:94:22:55:EA:9F:D6:91:BA:61:7F:CD:5E:8F:12:E6:F6:72:9D:1B
X509v3 Authority Key Identifier:
keyid:93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7e:7c:76:69:2c:ae:02:f4:bf:57:38:3f:4e:e5:8b:4a:de:
10:28:5e:cf:4b:2d:66:74:47:21:6e:e7:cf:70:5a:93:34:8d:
87:b1:72:de:aa:5d:e8:8d:da:45:ae:f3:a8:66:cc:d3:af:49:
78:90:62:24:c7:f5:62:9b:e8:65:75:b1:b9:4c:b1:7c:13:25:
b8:1c:84:9f:6a:d8:c4:b5:db:54:61:fd:4b:87:25:8e:d7:d5:
b3:6b:e9:34:b0:be:b5:d6:ce:7f:10:f2:3a:a1:0f:a2:8d:57:
91:f6:20:77:55:b7:37:37:7c:e0:65:73:1c:41:4f:fe:c7:3e:
87:58:87:35:5d:46:14:1d:b5:31:6c:57:d8:23:85:df:41:f3:
58:b6:df:b0:7a:83:48:5d:e5:7f:d1:ee:46:be:c0:00:0f:21:
b8:bb:21:a8:35:a8:6e:f1:25:bb:30:89:ad:29:fa:2f:d1:fb:
8f:4f:3b:ff:80:f8:35:af:88:85:d3:02:eb:2c:87:55:b4:76:
51:19:00:3c:d5:62:4a:28:da:37:59:99:ab:1c:c8:79:04:23:
ef:b9:e8:e3:63:a7:0e:e7:00:72:59:a7:96:1d:e5:0d:25:ec:
97:90:68:09:a1:3c:cf:29:34:ba:96:a7:20:77:d0:15:f4:6a:
dd:e1:f7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:05:58 2025 by rpki-client