Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: 4mC8aLNChGikhACyHnRLHoF6+GVuKH2GMrqF/2yX0BQ=
Subject key identifier: 93:23:A9:0D:65:B4:FA:53:52:D7:91:2B:7B:E8:2A:4D:68:51:16:6A
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 01961057853FCB603553EF0287439F716B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 146C
Signing time: Mon 07 Apr 2025 13:01:33 +0000
Manifest this update: Mon 07 Apr 2025 13:01:33 +0000
Manifest next update: Tue 08 Apr 2025 13:01:33 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: TvKaQH73gFRKLuVPIkM0zxZBCtg3c9XoJKR4+EKEYSY=)
2: QYQzorGK1cakLmK4R7aZ_z5BtRk.roa (hash: K/JfnEYnWlRvZUne2cydti381OQHnxSabuUVM9ge064=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:57:85:3f:cb:60:35:53:ef:02:87:43:9f:71:6b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Apr 7 13:01:33 2025 GMT
Not After : Apr 8 13:01:33 2025 GMT
Subject: CN=9323a90d65b4fa5352d7912b7be82a4d6851166a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:09:a0:c0:00:2c:18:2d:02:57:ed:24:42:
1c:69:65:a4:5b:56:02:b1:2a:75:b2:be:ce:f4:4e:
f2:46:18:51:37:2c:61:76:45:4a:1f:85:04:7c:c0:
65:c3:83:7e:eb:9b:92:1d:0e:51:d8:27:5f:a0:ec:
e9:32:4f:5d:e8:01:31:af:11:57:00:b4:cc:5c:c2:
b4:ff:65:d4:5b:95:10:40:ec:7a:68:ef:a7:ad:7f:
12:f6:df:4a:d8:44:e0:8f:cc:a5:07:d6:ce:e1:5e:
f1:44:83:08:ad:2b:1f:ce:52:b4:75:49:8e:b9:b7:
f1:03:88:06:47:4c:49:be:d8:1e:00:3e:72:56:ca:
6b:ef:f5:3c:5c:5a:48:53:2d:45:40:d1:42:b7:a7:
d8:d3:71:3d:d4:eb:8c:f9:c1:c0:cf:84:83:83:48:
c6:ed:cd:0f:38:05:83:02:d8:d4:be:be:61:27:6b:
18:38:99:e7:62:92:91:33:fa:17:17:a1:3f:a0:8f:
dd:b2:0e:eb:76:a9:c2:9d:0f:f4:1f:2c:d5:7a:20:
ae:01:80:b4:f3:ed:66:37:09:77:b0:ff:a1:21:23:
3a:67:83:9f:5e:51:2b:aa:49:55:90:0a:2f:4a:0c:
91:d9:a1:4b:7c:40:f2:ec:00:53:61:18:cd:52:a1:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:23:A9:0D:65:B4:FA:53:52:D7:91:2B:7B:E8:2A:4D:68:51:16:6A
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3f:a3:5a:9f:a7:69:33:3c:2f:01:6c:13:20:4b:62:06:b8:
f7:82:57:3f:3b:e1:64:d1:53:14:ec:83:52:9e:1d:55:a5:af:
3f:50:05:1a:73:6d:0f:1d:ad:79:2b:f7:94:4c:b5:31:f7:e5:
0c:9c:ed:0c:84:29:f3:89:af:31:b4:1a:03:d1:b7:1b:e1:b7:
79:64:da:a6:2b:7c:ac:4e:2d:c9:3e:d8:ff:df:b0:ab:37:d1:
65:7d:34:fc:a2:10:7e:86:b2:78:11:76:de:bd:20:35:33:f7:
d1:07:89:9c:13:f1:49:9e:a1:25:ad:c3:44:7a:97:3d:80:77:
ed:ac:b8:8e:54:12:3c:f0:90:6a:c0:e3:12:0d:0e:ad:ac:2c:
1b:fd:d2:9c:1c:48:a1:a7:5a:21:1c:4a:d4:00:d4:38:30:01:
ca:69:5c:07:21:b1:52:83:65:e4:c8:2e:83:0e:ae:13:91:f4:
71:98:c9:c9:1c:c4:0a:11:48:a0:fc:21:ff:b1:93:00:3e:47:
6f:cf:10:35:e4:fa:54:1c:42:94:b3:51:40:ac:95:e1:02:af:
8d:b0:62:e4:c5:b1:68:5a:5b:0f:a0:31:e3:e0:6c:e5:fb:41:
28:ce:e7:69:f0:90:79:b3:b8:fd:75:f2:08:30:3a:b7:80:73:
b3:1e:ff:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:38:56 2025 by rpki-client