Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier: WgbKN/QgOGni7c0G5oQi6ng1Lmg/WR14qD9IHrQSKns=
Subject key identifier: C7:6D:7C:70:A9:35:C5:F4:A4:36:0E:4C:A8:F4:45:E3:C8:2D:34:F5
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 01960F7B5DE7A496686D847A135E99021FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number: 0F8D
Signing time: Mon 07 Apr 2025 09:01:05 +0000
Manifest this update: Mon 07 Apr 2025 09:01:05 +0000
Manifest next update: Tue 08 Apr 2025 09:01:05 +0000
Files and hashes: 1: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: J0Qv4kmtPOF5v+boXOmkM+tZM7o9KC3dQc66eyOEFVU=)
2: 4PgtcW6j7xPoaJPy67vk2tMAXu4.roa (hash: fufIwyPbWqbMyORM68+h1FhSNKXbFzjdgG7WcXkavWU=)
3: cUPSsBWZ4irx4TApxzbroJpf5do.roa (hash: 6GPPFraRfTGyKrm5jIIIVF8Jt+KHlsZR8YFMwLgpuuE=)
4: xqYP462dYCt-0eOV8zXikdtxg14.roa (hash: YzKJbzm4Szaaz/1aNRHY+rmqu5/8YwNywOTzBNgzdeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:7b:5d:e7:a4:96:68:6d:84:7a:13:5e:99:02:1f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Apr 7 09:01:05 2025 GMT
Not After : Apr 8 09:01:05 2025 GMT
Subject: CN=c76d7c70a935c5f4a4360e4ca8f445e3c82d34f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:9f:bf:31:b7:e3:dc:cd:08:80:31:40:18:
97:5b:02:29:19:3d:54:45:4e:87:c6:80:94:7e:4c:
89:19:fd:8d:d7:9d:73:08:d1:ac:91:5b:53:26:a0:
ce:cb:7d:4d:f3:82:99:5f:27:ff:b4:20:27:42:39:
f6:71:be:df:a4:df:46:e3:37:0a:01:50:62:19:d5:
5f:28:a4:e3:12:91:57:10:94:d6:45:d1:b4:2e:92:
c7:a0:47:17:b2:9c:a7:4a:4b:ce:5e:ab:cf:a5:17:
45:c7:03:3b:39:52:38:b2:0a:37:87:24:5e:fa:57:
1f:63:ce:8e:99:67:bd:2f:69:c1:35:7d:44:72:df:
50:01:2c:4e:4f:e6:72:12:59:3f:4b:74:9a:2e:a1:
09:5f:23:2d:65:77:c1:9d:00:23:15:97:e6:a6:ba:
50:8c:34:ac:22:68:e0:c6:50:1f:52:f5:44:0b:8d:
32:f6:c1:63:b8:2e:5e:ee:cb:bc:86:ce:c7:8a:1d:
a6:ff:d5:3d:b9:73:aa:fa:ed:e0:a7:65:c6:71:73:
7a:a5:ff:9b:4f:85:20:43:8b:46:a0:f9:15:b4:22:
93:ef:b9:cc:9b:c5:13:89:be:7c:90:81:28:a4:5d:
a8:6b:6b:ce:96:5f:a3:68:8e:17:e8:14:0b:e8:54:
3b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6D:7C:70:A9:35:C5:F4:A4:36:0E:4C:A8:F4:45:E3:C8:2D:34:F5
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:04:f3:04:31:61:4d:9c:e6:5e:e2:d9:0a:04:c2:67:97:27:
08:9a:bc:10:e2:42:54:4a:ca:27:5a:58:43:86:f7:b8:3a:52:
75:1a:83:d9:1e:98:a8:32:74:6c:48:fc:75:0f:75:b3:18:98:
9c:d7:12:4b:09:b5:d9:a0:15:55:7c:8c:10:af:d0:2d:57:21:
e0:f0:62:33:75:2b:f3:53:30:10:87:9b:b1:89:d7:46:5b:56:
7a:af:80:4f:6d:a0:bc:da:f3:62:20:86:4b:86:9b:1b:16:03:
74:ce:1d:67:73:40:70:5f:26:bf:77:2e:70:ed:3f:5b:25:28:
68:14:7e:41:cc:db:43:8d:04:19:cc:74:33:70:2b:97:55:c9:
2d:e4:e3:93:e8:01:01:e8:9e:44:e6:1b:d2:3b:03:6e:18:cd:
c4:ce:00:19:ae:c2:4e:0d:a3:26:1b:fa:6d:e0:43:09:99:1e:
15:c0:de:89:09:44:07:ae:a7:1f:9c:90:ef:db:22:93:57:cf:
54:08:93:23:74:2c:72:0c:bf:1e:5d:3d:80:23:fa:f9:52:5d:
73:c2:23:40:72:85:27:49:21:b7:c2:10:63:db:ef:6e:e6:6e:
80:13:3f:3c:75:f8:6f:d9:ed:ae:3e:13:85:64:1e:c4:d5:e0:
43:aa:b7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:21 2025 by rpki-client