Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
File: Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft (raw, json)
Hash identifier: eBMvkfqCXanWhB6F34OVRDuqnh9c1qI/4YnQ90/6pY8=
Subject key identifier: C3:3B:15:FD:FE:82:51:C0:C5:5F:E0:9F:41:D6:24:48:BF:B2:5D:0D
Authority key identifier: 32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
Certificate issuer: /CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Certificate serial: 01964E237A9D6ACA3656D7D432E171E2F367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
Manifest number: 0D14
Signing time: Sat 19 Apr 2025 13:01:09 +0000
Manifest this update: Sat 19 Apr 2025 13:01:09 +0000
Manifest next update: Sun 20 Apr 2025 13:01:09 +0000
Files and hashes: 1: D1ApEIwb1kjfyIq9DKRzPBBfvvY.roa (hash: xg03oxBmRY8/OHWbSAoqzOUqsR3adUdWhS3XjYzzmwE=)
2: Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl (hash: 7I1p1N8Eht1IGTnovz3pUPDE6yRE3lk8VGL1jkdBLvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:7a:9d:6a:ca:36:56:d7:d4:32:e1:71:e2:f3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Validity
Not Before: Apr 19 13:01:09 2025 GMT
Not After : Apr 20 13:01:09 2025 GMT
Subject: CN=c33b15fdfe8251c0c55fe09f41d62448bfb25d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ff:ce:fd:dc:39:aa:db:48:11:f1:ef:85:ee:
0f:92:b6:68:8a:00:a3:e8:d3:32:63:8e:2f:2e:d8:
bf:d4:6a:c7:32:17:6a:22:6c:2e:c4:c0:42:a7:23:
66:90:10:31:30:99:de:93:5a:fd:0a:af:4a:92:41:
5d:74:72:2f:21:7b:96:de:77:e9:64:5d:0c:03:da:
48:2e:6e:4b:eb:8c:e4:5b:1d:00:1b:df:fa:17:f1:
d1:b9:0c:6d:d1:8c:d3:5f:68:e8:2c:a0:c5:68:d3:
b0:3a:98:fb:47:79:d3:34:89:4d:37:b1:cd:93:ab:
84:0f:15:57:c4:fd:4b:ff:9e:b9:8e:a5:9b:23:ad:
1f:14:bd:9c:fd:e5:eb:aa:ef:bb:cd:92:55:89:20:
20:87:32:65:fc:75:68:55:04:6c:98:86:e3:5e:e6:
e8:c1:72:8f:27:de:4b:de:6e:e6:11:2d:2f:6e:00:
64:2f:bd:20:90:aa:d5:69:83:dd:b2:ba:e8:f1:2e:
40:05:cb:b9:5e:0f:23:48:62:09:da:22:31:ef:99:
d4:ff:b4:70:7a:e6:28:b6:0d:b8:d0:8e:03:5b:b8:
60:b9:3e:e2:28:92:28:02:d9:3a:6d:df:7b:1d:a4:
8d:ea:55:58:ab:59:a5:26:09:86:05:a5:f7:30:1e:
ba:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3B:15:FD:FE:82:51:C0:C5:5F:E0:9F:41:D6:24:48:BF:B2:5D:0D
X509v3 Authority Key Identifier:
keyid:32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:07:15:90:1b:93:74:ae:73:69:c4:b7:5f:8d:38:a9:7e:41:
bb:b9:08:b3:e9:29:5f:7b:e3:6b:88:63:55:d4:0d:75:43:03:
1b:d6:aa:99:9b:e8:68:64:76:41:71:ca:f2:44:73:c8:02:5d:
55:dd:90:2b:09:59:0d:18:4e:4b:17:e2:cb:e7:12:e6:f0:db:
54:c6:a6:bd:7e:33:87:39:2d:a1:fc:ca:b0:8f:e2:35:81:37:
8c:b3:dc:45:bc:6f:c8:18:4c:1a:0d:54:09:de:d8:1a:6f:79:
bd:3d:50:09:3f:30:11:d9:10:26:3b:30:70:5c:0c:1c:fe:30:
6c:f0:da:49:5f:bb:18:f8:5f:e0:91:84:a0:83:eb:bd:50:23:
5a:bc:3b:7c:31:98:69:e4:92:fd:2b:c7:ef:66:20:f5:1a:51:
aa:d6:1f:ce:ca:c1:67:80:c9:c0:97:c5:23:ec:80:a9:75:b4:
a6:27:ef:bc:0f:31:56:e2:e4:fd:e1:a0:7e:84:10:b1:f0:cd:
bc:69:65:20:08:dd:52:86:3c:6e:d5:27:b7:66:78:b4:8f:5d:
93:2d:b8:56:7b:6b:99:bc:db:6c:77:1d:4b:23:9a:0e:ca:30:
e8:c8:c6:cf:81:06:a0:91:01:0f:e0:4f:74:9f:78:5e:fe:5f:
26:27:8e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:24:33 2025 by rpki-client