Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
File: 3NJG4YMFZ6sRUjHbd18oedma8KA.mft (raw, json)
Hash identifier: HzFJ1Mv3EPFDoigliPM9RP6+ZXHZwo9V0j/tOxX9O6s=
Subject key identifier: 76:9C:F4:CE:19:88:70:74:18:B7:2D:BB:E4:4B:6C:AE:AB:DA:3B:FF
Authority key identifier: DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
Certificate issuer: /CN=dcd246e1830567ab115231db775f2879d99af0a0
Certificate serial: 0196488ECCC3BBFC18BD257E47AC0FF93871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
Manifest number: 0390
Signing time: Fri 18 Apr 2025 11:00:40 +0000
Manifest this update: Fri 18 Apr 2025 11:00:40 +0000
Manifest next update: Sat 19 Apr 2025 11:00:40 +0000
Files and hashes: 1: 3NJG4YMFZ6sRUjHbd18oedma8KA.crl (hash: VsyUCRKXxAwa6ea9tki/P+3OH+cqiQkQRbKH/5QgTRY=)
2: pMwZ_dWs8ojtwFFRIemRw2PGl-4.roa (hash: N5kw38iMWCD98CNIZvqnGspiT0ia5Z9rWUHOZazCoDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:8e:cc:c3:bb:fc:18:bd:25:7e:47:ac:0f:f9:38:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcd246e1830567ab115231db775f2879d99af0a0
Validity
Not Before: Apr 18 11:00:40 2025 GMT
Not After : Apr 19 11:00:40 2025 GMT
Subject: CN=769cf4ce1988707418b72dbbe44b6caeabda3bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a5:c1:80:6b:42:bc:21:21:a0:4b:40:d4:ec:
fe:cf:37:0c:97:a2:24:20:e5:9f:35:5c:fb:12:f8:
f1:f1:7e:0f:b8:5b:e0:c9:63:5a:87:32:a5:a6:e5:
9d:3f:d6:7e:bd:82:62:c3:c7:f4:3a:19:1e:75:71:
fb:5d:2e:14:bc:f5:4d:9e:1e:2d:40:f0:64:d5:fa:
81:1b:dc:b9:4b:f2:82:8f:e9:70:fc:c0:9b:08:1c:
6b:a4:35:db:1d:31:3e:62:91:82:56:6c:74:8b:21:
07:fa:dc:bf:40:e2:7b:94:1f:de:91:03:1f:2f:8b:
e8:6c:e6:16:85:0d:5b:76:c4:85:f8:bc:fb:08:97:
11:11:9a:08:78:2f:1f:76:ed:f2:35:62:0f:d4:62:
6f:66:d0:b7:64:bf:de:a7:09:23:35:9a:f9:58:72:
5f:18:0e:1e:31:d5:ea:3e:b0:3a:ce:b0:07:d5:d7:
1f:e2:4c:48:c6:b7:4e:7f:d4:f2:bf:a1:df:9e:0f:
58:cc:76:de:65:54:11:c3:d2:d8:72:b0:ed:33:22:
f0:1b:b2:13:75:71:62:2f:3f:d8:04:cf:4c:57:ac:
b6:eb:2e:1e:95:7c:f6:dc:be:7e:c9:e3:ee:7f:89:
30:7c:ac:bc:96:d7:5f:7c:00:a9:b3:f0:57:c0:01:
9a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9C:F4:CE:19:88:70:74:18:B7:2D:BB:E4:4B:6C:AE:AB:DA:3B:FF
X509v3 Authority Key Identifier:
keyid:DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:97:27:7b:70:64:b0:b8:e1:00:9d:51:a3:5a:02:12:a0:7d:
69:d3:aa:31:39:ba:0d:48:24:3b:c0:77:d4:1c:ce:af:1d:9f:
4a:46:b5:a3:3f:f7:d7:1d:c8:35:fa:ab:d7:9e:a0:0e:e5:93:
a1:54:01:91:01:4e:e9:65:4f:56:61:09:b6:0d:25:2d:e0:8b:
3c:88:ea:12:f2:b8:dc:6b:06:87:39:7b:66:90:2f:f2:9c:c9:
9f:0c:cb:a6:aa:51:49:94:38:9a:1d:5a:5a:ed:e5:7f:84:1b:
b7:80:1e:dd:6a:d8:2c:12:7d:83:22:2a:10:a9:1b:f7:5d:1b:
fb:97:6b:59:48:72:fc:92:4a:d4:f6:da:0a:ed:48:26:de:3d:
bd:3e:db:d6:55:19:06:7e:11:ef:2e:9a:96:15:d7:3f:30:27:
ec:2f:98:e3:70:cf:1c:b8:9f:65:26:0d:ab:26:b9:52:37:d2:
00:bd:5d:69:ed:1b:af:f2:1f:13:6e:54:1e:df:70:a1:08:51:
6d:bc:c0:65:fa:79:c4:ab:16:a1:20:59:55:a9:9b:3e:89:80:
46:a1:02:c3:8d:81:83:73:35:88:49:f6:8f:17:c0:d1:69:84:
12:a8:76:34:1f:3e:7b:8f:ea:95:65:0d:ef:52:78:11:cd:3b:
94:fa:1d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:58:19 2025 by rpki-client