Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
File: 3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json)
Hash identifier: NJSEvI30l7YwIA4TyVWVU8Y7gVxHPBhF31VtzkGUU/w=
Subject key identifier: D5:21:1B:C8:77:03:D7:B6:21:72:21:79:C7:41:2C:CE:10:75:FB:75
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 019611D7DA814AF87F3C7A0B0139195A4B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
Manifest number: 14B7
Signing time: Mon 07 Apr 2025 20:01:20 +0000
Manifest this update: Mon 07 Apr 2025 20:01:20 +0000
Manifest next update: Tue 08 Apr 2025 20:01:20 +0000
Files and hashes: 1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: 1e26gbffrNtb4qqTi1tupiqHXMDJTvR1bHA1w2JHvcI=)
2: EsL5vRvD6Hsz2Ac1BO5dG0iZtiE.roa (hash: 6YJicTgp9qVMpWAlIAbPHHma7brtZhgeBhN6tMg/gfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:d7:da:81:4a:f8:7f:3c:7a:0b:01:39:19:5a:4b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Apr 7 20:01:20 2025 GMT
Not After : Apr 8 20:01:20 2025 GMT
Subject: CN=d5211bc87703d7b621722179c7412cce1075fb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:65:3a:26:27:21:2d:58:49:92:56:21:fe:
69:48:aa:b1:89:f3:2c:03:5d:96:33:c8:46:34:eb:
24:49:1b:ef:82:4b:34:ac:d2:66:16:ed:05:d7:ad:
00:30:77:8e:5f:7a:75:83:cb:bf:58:56:f7:96:04:
9f:23:d0:a7:f7:da:6f:c1:7a:a0:31:08:b8:88:23:
a3:ea:3a:a0:ba:f1:30:e9:65:52:c8:57:00:5c:fe:
2a:d7:38:29:63:f1:25:85:55:bd:a9:82:93:e9:ec:
b3:8f:3c:a2:a3:f2:df:71:03:58:4a:5d:63:3f:d3:
22:24:43:17:34:ce:fc:62:a2:14:a0:00:25:dc:9c:
5c:f6:d7:28:a2:e2:0c:ef:80:84:d3:f7:28:3b:dc:
00:63:92:92:d5:dd:90:a4:b6:0f:f0:b5:d5:a7:dd:
0d:84:62:10:0e:6d:ba:a3:58:fc:14:11:f6:0c:d7:
04:be:67:51:e9:83:fc:9c:a0:62:08:ff:c3:2a:5c:
2a:eb:47:7f:4d:1c:61:ac:54:d1:df:da:22:39:5a:
56:3d:2e:6f:bc:fc:01:c5:2e:46:02:ed:1f:89:f1:
3e:ca:5d:24:db:79:cd:e4:29:55:e4:a5:67:7c:ed:
40:ec:1c:02:21:82:aa:77:c3:da:39:07:71:fe:c2:
18:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:21:1B:C8:77:03:D7:B6:21:72:21:79:C7:41:2C:CE:10:75:FB:75
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7a:b7:b7:f3:f6:b9:4b:26:92:94:71:f6:cf:63:d4:96:73:
68:7a:41:03:ce:94:b4:a9:36:dc:fd:5d:a7:6d:61:6c:c1:7c:
1d:40:35:4e:61:9a:9d:d3:56:6c:2d:f1:48:a1:dd:9c:7c:cd:
44:71:b0:2e:8b:de:d8:bc:d8:1c:d3:3f:15:2d:8b:9e:c8:2d:
9d:18:7b:b6:44:d8:04:ed:ee:c5:b7:4f:29:92:b2:9b:f3:a5:
4b:1f:b5:de:70:18:1b:5f:0c:85:31:f6:ba:45:74:fe:5a:6f:
62:9b:df:97:7f:00:c8:f5:89:3d:87:7e:ec:e5:ce:ae:71:3d:
92:69:92:42:80:48:30:7a:c2:75:ad:df:40:8f:d4:d6:e7:a7:
a0:16:33:cb:fb:bd:3a:a0:8e:7e:de:80:da:48:a7:1d:12:22:
cd:3e:2b:c6:8d:e1:d2:b0:86:1b:a6:c0:fa:1b:e2:34:4a:9e:
fd:49:da:09:37:71:9c:26:f1:b7:1a:93:c3:da:4a:e2:65:2d:
ef:64:32:dc:c3:da:52:b4:31:1e:30:39:1d:a6:a1:7e:23:a6:
e4:92:7c:cd:35:46:cd:7d:2d:35:13:66:f4:4d:32:df:bf:17:
46:91:85:5e:d1:67:7b:ed:ff:1c:02:1f:48:16:4c:16:d6:2b:
74:a6:ba:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:52 2025 by rpki-client