Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
File: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft (raw, json)
Hash identifier: RYR98Rt778b78AHOXS9fdmPmGN6a42Qd1mOQ22gSUe4=
Subject key identifier: 94:EF:23:C3:70:1E:C5:E2:BD:80:22:D4:7E:63:F0:A0:03:28:84:2A
Authority key identifier: DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
Certificate issuer: /CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Certificate serial: 0196520043623BBBAA94D69536245C753DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
Manifest number: 1506
Signing time: Sun 20 Apr 2025 07:01:11 +0000
Manifest this update: Sun 20 Apr 2025 07:01:11 +0000
Manifest next update: Mon 21 Apr 2025 07:01:11 +0000
Files and hashes: 1: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl (hash: IROtPsfGd2aCUY8om9ES7CMPcSGbOrojCrCQO0iSfkg=)
2: X_yuCbgOElk7t0Nndlrc9uLk_XU.roa (hash: zPioyhAie2r6Wx7GGJYyupW2bQRy/+no7AIsLRygNz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:00:43:62:3b:bb:aa:94:d6:95:36:24:5c:75:3d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Validity
Not Before: Apr 20 07:01:11 2025 GMT
Not After : Apr 21 07:01:11 2025 GMT
Subject: CN=94ef23c3701ec5e2bd8022d47e63f0a00328842a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:21:1a:f6:9c:77:5d:95:19:1f:1b:b2:29:
cd:8b:35:0b:2b:f8:5c:c1:30:db:fe:54:c7:27:4b:
20:dc:5d:f3:4b:db:9f:c7:d5:22:05:9f:86:b5:b8:
aa:7f:33:b5:66:88:dc:2f:97:dc:2d:cb:56:d7:68:
99:d3:a4:6d:23:26:dc:0a:9f:8f:fb:60:8d:aa:99:
b4:95:1d:82:0d:9d:e8:76:6b:aa:6f:1d:0e:9c:7e:
87:58:9b:92:c1:98:d4:3a:00:b5:27:2c:19:a9:5a:
6f:24:e6:de:39:d2:22:3c:c8:96:18:12:4f:88:66:
27:83:72:23:5b:89:07:e4:65:a1:a8:b5:e3:a1:6d:
3d:a0:8f:58:bb:ac:d8:8c:15:ab:cd:99:91:a7:dd:
92:5b:12:94:8e:35:45:5e:71:77:f3:69:ff:46:97:
bb:56:32:d9:c5:fe:33:a4:fd:96:c4:65:c0:1a:57:
60:98:3c:8f:4e:8f:a0:21:a5:56:17:1a:43:ed:43:
13:fc:30:fc:5b:4f:90:4f:41:97:b4:ce:7b:a2:a9:
db:4f:d4:a0:0a:76:40:8d:cb:24:af:b5:d1:bd:c2:
be:a6:40:26:bc:9b:3c:44:5f:5b:df:39:ee:c4:bb:
25:cd:5a:18:8b:bc:c2:d6:50:61:4f:8c:00:a3:89:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EF:23:C3:70:1E:C5:E2:BD:80:22:D4:7E:63:F0:A0:03:28:84:2A
X509v3 Authority Key Identifier:
keyid:DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:da:d4:6c:8f:4a:fb:47:60:08:40:bf:ac:43:72:c2:92:e9:
1d:65:96:f9:29:5b:a9:db:85:41:05:32:d7:c9:b6:b2:a6:6f:
a7:50:5d:33:c1:cb:cd:39:11:5d:62:d2:dd:d0:d2:98:e1:ac:
82:ae:9b:ff:4b:c3:ab:b1:1c:cc:a8:43:7f:92:b7:b2:a8:a9:
8b:c5:58:2d:af:c0:2f:66:42:8c:6b:c5:e7:81:e4:49:81:5a:
db:46:90:8b:f6:5c:9f:97:23:26:5d:af:70:f3:7c:ec:85:59:
34:ef:eb:e1:f8:3a:4a:2d:e3:79:33:45:56:35:71:0d:90:4d:
70:f6:58:7f:68:06:81:b0:e1:6f:9e:d1:0c:42:90:74:12:d0:
9d:3a:d6:b1:f4:d2:5b:1e:c9:0c:3a:12:f5:dd:31:e1:15:61:
40:96:ef:0e:e6:5c:85:c6:cc:8e:30:18:45:cd:2e:6d:1b:9a:
d2:2c:6e:bd:df:e2:39:a2:7f:ab:41:f9:d1:7e:73:61:5e:97:
6c:b5:bc:a6:75:1a:91:b3:fd:43:94:d7:f9:19:da:f0:f8:2f:
b2:d8:12:86:6b:de:63:06:ee:ec:6e:f8:b3:31:32:5e:89:f7:
f4:ff:5c:7d:ba:ed:c3:66:63:43:96:80:a0:7e:eb:7b:94:15:
d7:2c:61:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:04 2025 by rpki-client