Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
File: 3y4c6U6IoT84_n-UO3lBa8B6HfA.mft (raw, json)
Hash identifier: eI3Jyty8+BBnefN+ixzP8RlvAzacy4PUG7tcOtry2QY=
Subject key identifier: DF:A8:7C:30:80:1F:71:7D:3B:D4:4D:F2:87:87:D1:8F:59:84:4F:EA
Authority key identifier: DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
Certificate issuer: /CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Certificate serial: 01964BFD64CE4738FC1BEC2A7EEF670357FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 03:00:19 +0000
Manifest this update: Sat 19 Apr 2025 03:00:19 +0000
Manifest next update: Sun 20 Apr 2025 03:00:19 +0000
Files and hashes: 1: 3y4c6U6IoT84_n-UO3lBa8B6HfA.crl (hash: RbPhAK7ScK2ell4F8g0jcY4isArTzZMVhb8if6IVKo4=)
2: cssion0g3PJ3Xd3t2jaSsbUDiLU.roa (hash: n63LUbsK0+15N0vAETIk0kewzsiQZdMNrmzn6fJSfQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:64:ce:47:38:fc:1b:ec:2a:7e:ef:67:03:57:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Validity
Not Before: Apr 19 03:00:19 2025 GMT
Not After : Apr 20 03:00:19 2025 GMT
Subject: CN=dfa87c30801f717d3bd44df28787d18f59844fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9d:05:6c:a4:52:cc:f8:8c:ec:55:fa:e1:68:
78:16:c0:95:bc:ae:98:42:56:37:b4:c8:34:ec:8e:
b7:38:72:b8:67:63:e6:b8:c2:0a:fd:91:42:d9:a9:
0e:91:9d:60:94:08:21:35:da:fd:e5:76:d0:92:15:
ca:44:80:a0:e0:fd:46:bf:66:35:cb:44:2c:f7:06:
82:32:a7:eb:d3:01:06:65:0d:e4:d3:57:c7:ed:24:
88:d3:fc:07:2f:05:cf:f5:7e:da:f1:94:dd:46:3f:
3c:4b:53:39:d2:91:7c:c6:7e:e8:24:76:b4:7c:bd:
8c:e0:13:02:85:09:7e:8c:18:e8:d1:cc:b1:2d:d3:
5d:c7:74:91:32:15:88:5a:e9:b5:ec:f0:6d:fa:dc:
e8:a9:f5:f0:86:63:b3:71:66:b5:95:40:28:d2:ce:
25:f2:a7:79:1c:7b:41:ca:6c:3f:8e:30:a0:e5:6a:
21:14:a1:4e:4b:16:eb:67:6e:18:74:72:ba:66:db:
5c:ad:7e:1e:75:01:14:9c:0e:61:80:e6:f6:18:cd:
63:15:0f:fe:ab:f5:ff:03:ec:ee:a8:a6:85:a6:5d:
0a:9e:da:3e:76:0e:18:09:f5:63:32:70:66:61:6c:
78:dc:d1:62:28:32:7e:87:50:61:f4:9e:9e:39:42:
5e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A8:7C:30:80:1F:71:7D:3B:D4:4D:F2:87:87:D1:8F:59:84:4F:EA
X509v3 Authority Key Identifier:
keyid:DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:27:a1:1a:59:43:7d:62:0e:22:fe:60:65:9b:e1:96:8b:2b:
3d:73:64:c4:d6:0c:85:b9:bf:a8:7b:ed:59:c8:96:e3:f3:93:
83:6a:b4:49:ec:39:06:4a:ba:47:5f:22:d6:17:4d:38:33:e4:
18:1f:48:d4:5e:7e:2d:c1:f5:43:2d:a0:bc:fa:ee:2a:0a:e6:
17:e7:db:20:d7:7b:b6:e4:a7:51:6a:36:a4:10:11:e8:5d:c5:
a7:1f:e7:34:67:35:4c:08:53:ac:ad:34:ce:d8:eb:da:fe:a6:
50:98:17:86:9a:55:f2:27:09:ab:2a:ee:bb:f8:28:2e:80:75:
b6:0d:00:5f:c9:e8:aa:15:53:61:d8:87:41:ab:83:88:4e:e6:
ae:09:a4:bf:73:ee:7d:89:fe:cb:ea:fb:09:ae:75:a5:9b:8a:
de:01:03:57:55:0c:cb:88:6c:cf:2f:b5:62:43:7f:be:f6:dd:
2f:e2:02:4e:a9:b1:a8:a9:cb:af:18:5e:d4:10:ed:8d:ad:68:
d0:07:98:01:29:9b:01:70:89:4c:a4:f6:5a:94:e6:77:99:d3:
ef:5b:30:a6:c0:68:35:95:80:56:d9:08:fd:2d:06:44:09:2d:
d4:0c:41:bd:d2:7d:24:08:ae:53:54:ad:01:d3:97:6d:28:e7:
f6:77:fe:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:36:09 2025 by rpki-client