Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: Dj1ux25phbOnUiCu8/Qd7hT52Ue7eLSb86qVWjDZkJ4=
Subject key identifier: 62:78:8B:21:CF:CC:F2:6B:30:ED:59:09:B3:8D:70:9B:4E:82:72:7E
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 01963A658EE2C14B9EBA8C82ECAE3A221ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 13D1
Signing time: Tue 15 Apr 2025 17:00:56 +0000
Manifest this update: Tue 15 Apr 2025 17:00:56 +0000
Manifest next update: Wed 16 Apr 2025 17:00:56 +0000
Files and hashes: 1: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: gucyTWLFWpEDg7mVzP3ObYAlMMI5kG1fibW/9CawvXw=)
2: EoONLCC0uBU4UnkK6hGEDKnLwOs.roa (hash: BvTXgf3VZmemwuiX/6PvTlFRYmGF/FW7bb7KGQyaCiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:65:8e:e2:c1:4b:9e:ba:8c:82:ec:ae:3a:22:1e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Apr 15 17:00:56 2025 GMT
Not After : Apr 16 17:00:56 2025 GMT
Subject: CN=62788b21cfccf26b30ed5909b38d709b4e82727e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:b6:bb:04:db:94:2b:fe:ff:f2:78:3c:2f:
8a:57:59:85:96:bc:6f:4d:b4:a6:f4:bb:4d:29:83:
6c:b7:a7:20:92:34:63:96:00:2d:bf:5e:46:57:40:
fc:00:8b:65:c9:e0:24:49:31:c9:9d:9c:fe:39:6b:
c4:5f:31:27:2f:b1:27:b1:0f:db:6e:1c:41:9b:75:
30:30:ab:1e:74:80:b7:72:f9:1f:32:93:98:c1:a6:
e6:cc:0f:59:ad:be:c1:64:7e:5c:5f:e1:e3:a1:54:
dc:8e:43:fe:76:9d:f9:52:3d:ca:16:85:c1:10:bd:
ba:9e:e4:9a:0d:2c:1a:e9:42:97:e7:44:a9:01:18:
60:c1:4c:df:61:22:b7:fe:8b:66:f3:2d:43:8f:09:
26:fe:9c:6e:fb:28:6f:fc:79:4d:aa:8f:46:b7:28:
9c:2e:78:43:fe:22:77:8e:94:7f:2b:5f:93:65:f2:
fc:77:49:66:d4:75:54:a5:05:ce:87:39:b6:b4:4a:
c5:00:0d:87:f5:7c:3c:23:b5:c4:93:ae:2d:32:a9:
4c:49:b5:f5:90:e0:11:a8:0a:bb:bf:24:99:52:1a:
a6:92:2b:db:82:1f:d2:a6:38:34:e4:19:1a:5b:b6:
da:82:be:07:d4:f7:8f:7a:75:8a:62:2c:40:81:4c:
dc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:78:8B:21:CF:CC:F2:6B:30:ED:59:09:B3:8D:70:9B:4E:82:72:7E
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e3:51:70:fe:d2:ec:38:f3:02:60:b0:95:fe:6b:bb:f7:56:
ba:67:8a:3a:4f:05:a6:62:bf:de:2f:25:ed:59:9a:1a:d4:62:
06:bf:c4:c7:02:df:11:d5:86:bf:e4:11:51:cd:f3:b5:92:2e:
89:ce:0e:84:34:be:a1:33:13:31:f6:a7:05:23:1e:aa:d7:9f:
ab:d3:34:a5:75:da:77:f9:7f:a7:f2:43:e7:93:57:55:c8:13:
e1:50:b2:e0:a8:38:8b:9a:5b:19:41:66:3f:91:fa:ba:a8:dc:
4a:94:b1:d0:35:d0:7e:3d:78:d3:c8:f5:e7:54:05:c8:7f:0b:
b9:c7:74:49:76:73:44:71:81:e0:10:5f:f0:5f:f8:fc:19:37:
b0:f0:67:aa:ab:32:e8:e1:a9:10:eb:82:c5:a0:7c:ee:91:27:
84:92:e5:25:81:ca:44:14:76:54:6d:e3:9e:16:bb:4c:f4:44:
c4:07:9f:22:ab:5b:b7:03:65:ea:a8:25:f4:7a:46:b7:8e:82:
ee:58:c8:ef:bf:6a:f9:ab:74:e5:29:7f:e3:af:56:08:a6:09:
4a:e0:a3:26:6e:66:03:7e:6a:db:57:15:be:16:57:c1:51:5e:
4a:28:74:00:23:77:02:46:87:b5:9d:28:77:c3:8b:3b:18:5d:
f7:99:b9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:31:50 2025 by rpki-client