Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
File: 3erZGbhaEwUdAgi34o3cyzmLFNY.mft (raw, json)
Hash identifier: xZolERtHAl91XUjX8Px3NlBRoat5t3qYncRvODdRVFM=
Subject key identifier: D4:00:95:C1:D9:B1:89:60:FF:ED:A1:D3:4F:45:AF:BD:CA:9F:71:F9
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial: 0196564A40F9EF9EC8CE2A11AE38442925DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
Manifest number: 1503
Signing time: Mon 21 Apr 2025 03:00:28 +0000
Manifest this update: Mon 21 Apr 2025 03:00:28 +0000
Manifest next update: Tue 22 Apr 2025 03:00:28 +0000
Files and hashes: 1: 3erZGbhaEwUdAgi34o3cyzmLFNY.crl (hash: FlQgc3/QJvQAuwzx4pgSkl3PXAv3Y6Hp74fzHSV2ZNM=)
2: gyBGqWNKS8K0vTNBAA3GKNL77Vo.roa (hash: BXXbMCiaPDwWpKluJbMJNiQFpxOCWm/ZXx0AVN6V8Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:40:f9:ef:9e:c8:ce:2a:11:ae:38:44:29:25:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Validity
Not Before: Apr 21 03:00:28 2025 GMT
Not After : Apr 22 03:00:28 2025 GMT
Subject: CN=d40095c1d9b18960ffeda1d34f45afbdca9f71f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:bd:48:2a:a7:fe:cd:95:6e:8d:0f:fc:a5:
75:03:46:ea:17:85:40:56:f9:4f:d1:8d:3a:b4:25:
87:07:b7:b8:53:8f:37:1c:f8:58:ad:e2:11:58:86:
47:d1:ee:04:4f:23:58:1e:da:3f:4f:d5:53:e9:1d:
b2:87:e6:29:30:35:34:18:ac:35:24:59:2e:ec:cd:
1d:32:3d:b3:a1:03:6e:1d:e8:53:e5:2e:4e:0a:98:
bb:d3:c0:2b:88:92:f2:80:b6:61:dc:de:25:ed:92:
53:a4:5f:30:78:5b:00:cd:f1:d1:92:d6:68:06:2d:
aa:33:9f:f4:60:04:75:d7:da:ee:f4:49:6b:81:6d:
69:8e:08:7b:3a:3e:ad:33:62:9d:ff:65:d9:6a:85:
c8:92:2b:c9:15:e6:a4:c5:da:01:5e:22:80:68:c2:
f6:82:64:d5:67:68:52:05:b8:29:a6:6e:2a:20:6d:
78:9f:36:d1:e5:85:c4:d4:16:ae:21:51:de:b1:28:
3c:02:96:e3:3d:05:c3:00:1e:0c:72:e6:04:28:45:
34:34:f1:2b:f1:fb:8c:a3:36:ba:d9:2b:c1:34:df:
2c:d4:dc:1c:af:b7:13:fa:ae:17:c2:43:7b:3a:5a:
f6:89:e4:06:46:ed:6b:01:14:63:4d:35:d5:81:0c:
18:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:00:95:C1:D9:B1:89:60:FF:ED:A1:D3:4F:45:AF:BD:CA:9F:71:F9
X509v3 Authority Key Identifier:
keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5e:85:1c:eb:91:39:53:6b:71:0b:78:f7:0e:fd:9e:a6:d3:
95:06:45:72:30:81:8e:cc:75:f7:af:f2:b5:7a:35:80:64:9a:
63:9a:fb:da:fa:7b:12:e6:df:ee:af:87:c8:b8:0f:58:ac:89:
24:2f:3f:57:e6:d0:69:66:0e:59:b3:b4:a6:ad:27:23:23:fa:
db:b4:b1:15:71:4c:c8:8c:b5:49:67:8e:33:de:f5:f1:cb:94:
f6:bd:24:67:72:c6:68:de:d2:c1:87:97:b7:9d:5d:01:b6:8d:
88:19:d8:60:90:b5:0c:d4:d2:16:dd:20:d4:b8:a3:56:6f:0b:
a9:61:55:9f:3a:7b:59:c3:63:0b:ef:ed:c9:63:20:01:fc:4b:
8d:82:8e:25:f3:8d:20:12:32:3b:3d:6c:cb:bd:43:82:35:5f:
5a:73:b8:95:32:f9:81:f2:54:14:e0:da:fc:db:97:14:84:1a:
07:ac:b7:37:ce:2e:7a:04:d6:d0:c0:b9:24:84:a6:a0:06:ad:
30:85:72:2e:c6:10:4f:d3:25:34:e0:9c:14:06:7f:8d:d3:0e:
88:f5:fe:e9:d2:5b:c0:a3:97:08:99:84:09:db:c4:b3:7b:47:
a4:cb:a8:c7:ac:84:9e:36:d8:59:2d:ee:08:6d:17:1f:ae:3d:
85:ad:3f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:33:40 2025 by rpki-client