Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
File: 3A4l4XpRaWkjpcApZnh0CarJqjY.mft (raw, json)
Hash identifier: pSPRstWezLoWp43BvDp991xyYhKdNX2yr785g95Obms=
Subject key identifier: 45:25:05:FA:4A:DB:9E:3C:D0:4C:90:29:53:9E:80:88:49:1D:49:18
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial: 01964F6D867E25EBB6CBF9DCDE874C29B718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
Manifest number: 087F
Signing time: Sat 19 Apr 2025 19:01:39 +0000
Manifest this update: Sat 19 Apr 2025 19:01:39 +0000
Manifest next update: Sun 20 Apr 2025 19:01:39 +0000
Files and hashes: 1: 3A4l4XpRaWkjpcApZnh0CarJqjY.crl (hash: APoI4gr80aYA/r9HPQ7pohdnpFRQ2NDWD7KsDkPoP3g=)
2: WGy1cA3da99W4WDLy3MY4ZyczoU.roa (hash: SJ9b+hH7b3cVwCr6CT26WQO6ifaQhtn6CrsiD/nybF0=)
3: jkdGIndQz1w9lSn5gC2Ktns7PmQ.roa (hash: VwGNfeMCv18NN23Twwp0pPWxKthypMsuMJxPjN6yLC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:86:7e:25:eb:b6:cb:f9:dc:de:87:4c:29:b7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
Validity
Not Before: Apr 19 19:01:39 2025 GMT
Not After : Apr 20 19:01:39 2025 GMT
Subject: CN=452505fa4adb9e3cd04c9029539e8088491d4918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:3a:86:39:17:ca:23:3a:ed:9f:e6:5b:42:
0c:9d:a0:d5:60:c0:88:c1:aa:9c:ed:3c:65:1e:8e:
c1:18:21:12:00:32:16:38:d0:46:22:e3:b5:57:d1:
61:74:d3:97:ab:06:0f:be:2a:d9:47:cb:ca:2a:6c:
dc:de:41:d9:dd:80:5d:69:d8:67:59:78:d4:a2:ac:
a3:96:a2:66:1e:31:2b:d7:39:0d:98:ba:61:d9:7b:
87:44:74:4b:e7:45:50:64:f2:5f:af:f4:ba:bc:a8:
5a:03:80:1a:72:c4:36:3a:31:17:b5:6b:7c:c2:45:
78:9a:8c:65:66:d3:76:8a:a6:95:03:a0:62:b4:e6:
85:10:27:9f:cd:5e:90:46:94:77:19:4c:1e:da:3b:
7f:33:b1:a4:68:40:5b:eb:06:e8:8c:ff:f6:0a:21:
db:27:13:e5:3b:97:8f:07:6a:23:51:4a:ff:0f:e2:
7c:64:be:12:45:02:ed:fa:e2:33:0b:27:52:39:f2:
0b:37:00:63:46:1b:16:62:3d:aa:5b:1c:84:25:9c:
9b:a7:c2:3d:53:1f:a5:ba:3b:b6:50:14:36:33:60:
0a:fa:6b:d3:4b:48:97:cd:13:65:ed:31:85:81:a6:
e8:b6:c3:0d:e2:d8:ac:4a:d9:4d:a9:9b:ba:24:79:
f6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:25:05:FA:4A:DB:9E:3C:D0:4C:90:29:53:9E:80:88:49:1D:49:18
X509v3 Authority Key Identifier:
keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a7:6f:6e:e9:8a:30:62:7c:ab:fd:ad:1d:40:7f:cb:57:66:
9b:51:35:ec:a6:88:c5:59:6c:a9:14:e7:f0:94:a3:4d:86:19:
da:81:e0:9a:9c:d8:b3:4b:f7:32:f6:91:5e:7b:86:69:db:b0:
9e:c8:42:45:ef:21:99:4f:87:c7:24:69:38:ca:18:db:13:fa:
02:e0:88:4a:dd:c2:c7:27:8f:62:59:6b:7c:8c:a1:bc:71:1b:
d4:c9:e8:07:4d:76:67:aa:93:57:53:b8:f9:34:06:e8:1b:bd:
55:4c:45:13:34:56:da:73:65:66:bb:cc:d9:f0:0a:93:27:6e:
cc:fa:b5:86:13:c7:e7:ca:01:19:1f:92:9c:6b:a8:52:c6:3d:
32:55:65:94:66:3a:ce:a1:68:e3:67:80:c4:41:8d:6a:b4:54:
5f:ab:87:ad:77:99:8d:39:ec:e6:26:77:c6:90:bf:d4:d1:d2:
27:76:49:09:ab:ee:cf:a1:eb:19:27:37:37:3c:b6:c3:3e:13:
d7:48:ae:d8:e6:bb:db:9d:f8:98:21:d4:1f:d0:ff:5c:b7:23:
56:79:33:8b:9e:11:21:af:9b:41:82:be:1c:68:46:c1:25:8f:
b3:ea:82:e9:be:af:1e:05:dd:bf:d7:5b:2f:6c:b9:a8:33:0e:
2a:8c:17:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:50:22 2025 by rpki-client