Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
File: 3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft (raw, json)
Hash identifier: FY6hXNOMg6AekJNlsgQtgd/pMgceweE51dAbydix05Q=
Subject key identifier: FD:98:8F:86:8C:9D:D9:C3:58:56:C3:2F:D7:D0:73:87:87:E6:F3:66
Authority key identifier: DE:46:82:E6:B2:86:60:BD:88:A9:B4:D2:8C:B1:D7:5E:F7:CC:6D:7F
Certificate issuer: /CN=de4682e6b28660bd88a9b4d28cb1d75ef7cc6d7f
Certificate serial: 01963BE5AC2B84EC74117C6DA0FBE2FA9F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
Manifest number: 0EAB
Signing time: Wed 16 Apr 2025 00:00:29 +0000
Manifest this update: Wed 16 Apr 2025 00:00:29 +0000
Manifest next update: Thu 17 Apr 2025 00:00:29 +0000
Files and hashes: 1: 3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl (hash: cRameBxvg0HHZLgnH12+qkgd6mVVO5u52660P4vYJIM=)
2: j2BsJZHL3LgBeU5YdWYJa32hdy4.roa (hash: d+oREESRuLvMYhUCDv9aLTd0uG0phphp5vORkyTT7cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:e5:ac:2b:84:ec:74:11:7c:6d:a0:fb:e2:fa:9f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4682e6b28660bd88a9b4d28cb1d75ef7cc6d7f
Validity
Not Before: Apr 16 00:00:29 2025 GMT
Not After : Apr 17 00:00:29 2025 GMT
Subject: CN=fd988f868c9dd9c35856c32fd7d0738787e6f366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6a:6b:f3:ef:b8:22:68:dc:2f:8a:20:1f:05:
ee:15:f9:cc:5c:e9:d7:3d:9e:9c:75:5b:52:21:b3:
11:41:e3:3a:db:21:2b:72:68:86:ca:95:26:fe:01:
5b:48:51:c3:7d:f7:c5:a4:3b:fa:be:67:e0:4e:89:
65:ef:ce:ae:f2:bd:7f:fd:ac:5f:07:2f:06:2b:1d:
c6:dd:4b:ab:9b:20:f8:2b:da:2a:8c:3b:01:47:26:
40:fa:95:97:5a:7e:37:dc:ba:8b:37:0a:34:bf:45:
9a:55:e4:7f:ba:78:ae:08:07:c4:1b:56:28:b8:0e:
ea:5b:63:a8:74:04:6f:6f:bc:64:7a:99:1a:98:0b:
e4:26:fd:eb:3e:fe:d9:da:47:0c:2f:22:fa:26:89:
5a:8d:0e:74:2d:99:75:d1:51:f8:58:3c:a8:44:5b:
91:2e:b9:78:3b:53:0d:64:09:29:0e:68:40:18:d3:
79:eb:47:d4:9f:c7:71:09:5d:c8:2f:bf:cf:97:fe:
87:49:55:36:71:cb:ce:9b:e6:ad:96:9e:2a:bb:ca:
23:cc:bb:9e:87:4a:89:6c:ea:3c:d0:78:33:42:0f:
d9:e4:41:e8:a6:ff:58:85:6a:f2:dc:e3:ea:5d:b1:
83:e1:f4:5a:55:04:67:40:69:cd:ae:9c:b6:04:9d:
e6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:98:8F:86:8C:9D:D9:C3:58:56:C3:2F:D7:D0:73:87:87:E6:F3:66
X509v3 Authority Key Identifier:
keyid:DE:46:82:E6:B2:86:60:BD:88:A9:B4:D2:8C:B1:D7:5E:F7:CC:6D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:66:9a:6d:86:65:e6:ba:25:eb:85:f1:2e:a4:8a:98:f1:4a:
51:0d:37:25:0c:a5:e6:9b:b3:a2:58:ac:09:ca:d5:e3:67:8a:
bf:f1:de:f9:bb:19:af:82:54:91:bb:3a:93:39:40:30:21:48:
fb:02:1c:2e:05:88:83:bc:c8:b1:89:35:35:10:f4:83:43:42:
01:5c:f4:c9:3c:b5:69:01:6d:d4:aa:56:3f:11:f5:46:a9:f9:
d5:a0:77:64:fe:d7:f7:43:c4:7e:9c:2a:fe:45:63:2b:5f:d6:
87:48:fa:12:53:5e:30:8a:9d:6b:ec:53:85:c8:6d:a1:38:99:
df:36:a2:d1:25:05:4b:ca:c3:7a:75:2d:30:69:4b:91:7a:b5:
9d:24:d9:8c:d6:ba:4b:f2:b6:61:1f:50:0e:f0:cf:78:65:e6:
92:1b:ca:0d:e9:4b:d5:fc:de:5f:5a:ae:16:3c:69:39:d2:52:
74:ca:46:7e:a3:19:36:43:5a:4a:51:e9:e0:11:95:f1:0e:e9:
50:eb:61:39:a8:ca:fb:a7:62:ed:17:b8:75:1f:69:39:de:e3:
ba:09:d4:a1:3b:69:9d:cb:8c:c0:01:54:35:b7:8a:04:57:f7:
02:ed:41:d2:09:98:86:57:0c:61:7b:03:40:7c:de:cb:1c:ff:
0a:ed:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:42:14 2025 by rpki-client