Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
File: 3x4tS9NitiuARQIdw1CxIOVTAmU.mft (raw, json)
Hash identifier: Byu+AGVlvBRBH+Wr+i38gmJau8cSiu9dhLBVJDiSUTc=
Subject key identifier: 86:59:40:E8:86:36:B7:21:9A:91:7C:25:44:1D:17:13:B9:B6:D0:AB
Authority key identifier: DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65
Certificate issuer: /CN=df1e2d4bd362b62b8045021dc350b120e5530265
Certificate serial: 01961169BC51DE6E1BFA32C96622CA599BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
Manifest number: 12BA
Signing time: Mon 07 Apr 2025 18:01:04 +0000
Manifest this update: Mon 07 Apr 2025 18:01:04 +0000
Manifest next update: Tue 08 Apr 2025 18:01:04 +0000
Files and hashes: 1: 3x4tS9NitiuARQIdw1CxIOVTAmU.crl (hash: NipJr6GQO4uRp73l3ODylI87t1A7D8A4FtCAiM2flks=)
2: MYuqoMzDVi1acZcNDb9FA7d3gCM.roa (hash: tUaun7mhti9TK8aJqqe0a+bLVD50ReQW/RjSFMudsMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:69:bc:51:de:6e:1b:fa:32:c9:66:22:ca:59:9b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df1e2d4bd362b62b8045021dc350b120e5530265
Validity
Not Before: Apr 7 18:01:04 2025 GMT
Not After : Apr 8 18:01:04 2025 GMT
Subject: CN=865940e88636b7219a917c25441d1713b9b6d0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:81:da:3e:66:cd:f7:b6:7e:7c:8e:4d:d2:e4:
05:7b:4b:f3:7a:c0:43:cb:a8:8f:a9:0e:9d:06:12:
f1:e4:b3:7e:f3:e7:5f:07:4f:f1:19:e2:ba:65:ee:
d4:53:a7:64:b6:30:13:f5:d5:79:7f:9d:c4:1a:8f:
2e:bc:e0:f3:32:dc:fd:3e:40:4d:11:ea:90:a4:3e:
5b:ff:45:aa:e7:49:32:c2:bd:ea:8d:a4:fd:24:28:
24:85:50:6d:1a:03:0c:63:98:c3:5a:5d:d1:20:3e:
de:ab:08:70:d2:1d:3b:29:bd:b8:55:6f:f1:81:0c:
86:70:f1:f5:7b:85:6d:b6:4f:2a:fd:33:57:cd:8a:
c7:a9:07:df:64:c2:94:9e:8e:c7:fa:68:2b:d6:b8:
5c:7f:8b:94:9a:56:32:bc:ab:ad:f8:c0:c9:3a:c9:
72:ee:05:7e:6c:bb:e4:4e:30:b2:47:ca:48:cc:09:
d9:f7:13:54:42:ea:3a:74:09:d2:29:3c:be:11:04:
4a:f3:d5:d4:fd:55:71:db:2d:8d:77:77:8f:79:66:
0a:95:ea:d1:6c:11:7a:f2:41:a9:af:92:bb:34:0a:
d2:42:90:6c:c3:ad:d5:ba:00:29:af:47:94:64:47:
5d:3f:b0:11:0d:b2:06:13:e3:65:17:57:47:aa:bf:
5e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:59:40:E8:86:36:B7:21:9A:91:7C:25:44:1D:17:13:B9:B6:D0:AB
X509v3 Authority Key Identifier:
keyid:DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3a:55:9a:ba:8c:04:9d:49:0f:52:a5:24:0e:11:57:68:84:
81:9e:fb:c5:29:16:f3:43:ab:d5:b0:e7:8b:41:af:de:4f:a9:
32:7f:f6:d1:5d:3d:35:3a:89:45:60:c5:6c:c4:78:9d:ed:45:
88:93:33:01:8e:14:e7:f2:6c:30:b1:15:37:55:b7:1b:0d:32:
5f:1c:d7:74:b6:bb:6f:ae:3f:55:ac:73:06:8e:50:56:81:f7:
ea:90:4f:5e:5a:96:d1:81:ef:a7:41:94:b6:e1:8a:43:86:8d:
ab:35:ab:10:41:66:8e:e9:99:d0:1a:c6:ce:af:71:8f:c7:48:
f0:dd:7d:3b:86:45:04:a6:29:65:ca:75:37:a6:87:15:4d:5d:
f1:03:9e:c5:d5:70:db:3c:ea:85:32:4e:ed:44:18:ff:88:7c:
fe:31:33:1c:80:1e:dc:bc:b7:2b:bf:a4:52:ee:1d:3d:89:7e:
61:18:8a:ba:97:3f:52:df:c4:6a:24:96:2a:4f:d2:1b:e1:08:
33:21:11:86:f0:1c:1d:e8:7c:24:fb:84:dd:12:8a:4c:67:25:
28:88:51:0b:0d:81:df:9c:79:6e:63:4c:74:36:6d:c8:0c:07:
d5:64:1d:69:cf:04:d2:34:bc:5c:c1:51:22:d4:c3:75:dc:19:
60:23:c7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:33 2025 by rpki-client