Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
File: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft (raw, json)
Hash identifier: jr0KpokpUwpRKV0F4cF2OdyvDFs64vXWoJCUezX0wJU=
Subject key identifier: E0:C6:51:74:C4:24:EC:AD:66:15:86:DE:6D:71:71:DE:2E:2C:6D:0B
Authority key identifier: DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
Certificate issuer: /CN=dc327af32a98492757b200ea040db24ec3136592
Certificate serial: 019602646B3D7768490E48D3EC89B874A22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
Manifest number: 02AF
Signing time: Fri 04 Apr 2025 20:00:57 +0000
Manifest this update: Fri 04 Apr 2025 20:00:57 +0000
Manifest next update: Sat 05 Apr 2025 20:00:57 +0000
Files and hashes: 1: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl (hash: uJXtMPq/HGnO0CsDpIUpyMV23vrptDKcSouTxk6YLns=)
2: 8W-Z7iZTKA-3rkNjiAd5VURXMsw.roa (hash: 2BY/rA9giuFltjXSROUw0wjIihHos+N8ZqL5OdXbUVw=)
3: SiGDnp8oSt95ArckPVGAAWtJUNs.roa (hash: j9ZTEJfSb12eUtJGUY9GVfUETUmyTkhHBnRZ+wXplM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:02:64:6b:3d:77:68:49:0e:48:d3:ec:89:b8:74:a2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc327af32a98492757b200ea040db24ec3136592
Validity
Not Before: Apr 4 20:00:57 2025 GMT
Not After : Apr 5 20:00:57 2025 GMT
Subject: CN=e0c65174c424ecad661586de6d7171de2e2c6d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:28:d0:f2:46:c0:60:06:11:e0:1d:ca:33:1e:
09:90:cb:08:89:19:48:36:d7:82:95:34:94:f8:94:
de:92:0b:d2:cf:bd:01:ce:35:79:4b:a4:8b:6f:b0:
4c:e1:37:76:22:61:31:c4:16:6b:d8:31:fc:eb:71:
03:1b:76:1f:a3:18:98:78:6a:4c:ab:09:d6:bc:25:
aa:82:30:02:76:01:98:1b:a4:b5:f0:ff:a1:25:05:
c3:2a:32:c0:e9:c2:de:85:67:27:24:fc:1d:4a:b4:
df:8f:44:fd:b8:a9:e7:f7:c7:bf:cd:f0:28:8f:2e:
2f:2b:49:a7:9e:33:65:b7:97:13:2a:a2:5e:2e:97:
18:66:6e:86:35:20:84:ab:3c:16:53:06:c1:dd:3c:
25:88:ed:9e:ff:70:f0:90:c6:27:98:f8:a6:36:c9:
d4:5c:c8:05:df:c3:11:66:fe:8c:e3:e8:a8:3a:2b:
20:a1:42:74:a9:f3:79:bd:19:48:12:72:4e:57:b8:
b6:6c:43:c4:d5:32:07:c2:19:54:10:a4:4b:bb:0e:
50:7e:8c:e3:f7:93:f6:24:9d:4d:23:15:f1:80:c7:
30:4c:ac:a8:31:61:0c:3c:bf:dc:65:0d:4f:ed:5e:
ca:65:9b:ba:ef:bf:62:62:64:08:83:02:cb:61:39:
20:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C6:51:74:C4:24:EC:AD:66:15:86:DE:6D:71:71:DE:2E:2C:6D:0B
X509v3 Authority Key Identifier:
keyid:DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:80:0c:90:b8:72:62:42:16:4a:37:61:8c:1e:5d:79:72:59:
c4:d2:01:57:1b:16:42:10:dc:fd:04:91:28:3e:73:ac:08:a7:
c5:ab:d3:65:8c:bf:c5:75:0a:99:f4:8c:a7:b7:e5:5f:2a:3d:
fb:e6:9d:14:39:ee:06:fb:76:e8:a7:d3:37:ea:a7:69:3c:6a:
8b:80:0d:1e:4d:b1:50:2d:55:02:0e:e5:63:9d:d1:d8:1c:cc:
24:8b:7c:59:c6:ad:30:6f:ac:54:69:a0:a2:aa:1b:13:9a:2d:
f7:51:71:83:bb:32:b0:df:c9:c7:f3:fc:eb:55:f8:7b:62:09:
83:a2:82:de:bf:bb:c0:7c:2f:7d:eb:33:3c:59:1d:1f:ad:36:
67:9a:b9:8d:96:ea:6b:52:17:84:e5:74:3b:c7:b7:4a:e5:5e:
03:33:50:9b:00:a8:48:0f:8b:22:01:3c:cf:b0:aa:54:7e:a9:
95:42:71:b1:16:14:57:84:23:23:dc:4d:7a:1c:c5:ea:cd:47:
42:c0:cb:f1:3e:1e:c9:8c:38:b6:b3:57:34:c2:8a:30:37:1e:
3c:2e:bb:65:12:a0:24:35:37:3e:d0:1b:48:86:32:1e:93:1d:
c1:88:4f:42:d0:6b:74:b2:93:68:ea:f6:71:99:a9:41:c1:90:
20:be:e7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:58:14 2025 by rpki-client