Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
File: n3Zvv-bZVxAAITgLsFVeCjum2OM.mft (raw, json)
Hash identifier: qGSnh1aGAZM5xKWk9C5CS1ueY5OGhWghwnVZAm1kOqY=
Subject key identifier: 30:63:92:8A:AC:F8:30:7A:DD:A3:94:1D:CD:CD:E4:73:AD:BF:D6:49
Authority key identifier: 9F:76:6F:BF:E6:D9:57:10:00:21:38:0B:B0:55:5E:0A:3B:A6:D8:E3
Certificate issuer: /CN=9f766fbfe6d957100021380bb0555e0a3ba6d8e3
Certificate serial: 01964F6C9C6D18393BA0299AE500A52F87F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
Manifest number: 0201
Signing time: Sat 19 Apr 2025 19:00:40 +0000
Manifest this update: Sat 19 Apr 2025 19:00:40 +0000
Manifest next update: Sun 20 Apr 2025 19:00:40 +0000
Files and hashes: 1: ONK87mida4LXX87gailCfoI1b8Y.roa (hash: QBCu5PF0VO/SVm73/KPj9NbrgIJuILrNgThOrk+l2bw=)
2: n3Zvv-bZVxAAITgLsFVeCjum2OM.crl (hash: ui+F987Q2NO4bxapdW0pHO1IsUmnsSAz2irofoq+U8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:9c:6d:18:39:3b:a0:29:9a:e5:00:a5:2f:87:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f766fbfe6d957100021380bb0555e0a3ba6d8e3
Validity
Not Before: Apr 19 19:00:40 2025 GMT
Not After : Apr 20 19:00:40 2025 GMT
Subject: CN=3063928aacf8307adda3941dcdcde473adbfd649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2b:7d:24:21:de:c7:ce:ef:76:b9:03:6f:f9:
0c:c1:9b:82:e0:da:7d:53:bd:63:e8:5b:2e:33:43:
32:ef:15:64:8d:d1:53:12:94:5a:82:ce:20:da:a6:
f1:64:ca:b3:c9:c5:18:c7:5c:68:10:4a:ac:11:20:
70:3c:c5:b9:a0:05:71:e8:9e:a7:cc:9e:5c:77:c4:
13:d7:dd:24:21:ed:8a:56:ef:4c:1f:dc:75:53:5b:
10:5c:ca:ae:1d:68:b7:7c:bf:62:b0:f8:95:40:d8:
c8:f3:5b:a6:8a:15:aa:51:1c:f1:92:58:85:fc:37:
14:4b:44:56:fb:b9:7e:5c:09:31:34:27:af:6c:66:
0b:d0:81:0d:76:87:b2:44:8a:4d:84:70:70:20:1a:
50:87:fe:65:ae:9e:d8:7c:12:45:f1:17:cf:ec:6c:
1e:66:12:b9:72:7e:79:c7:e8:3e:5a:1d:6e:d9:9d:
ea:d1:2c:1b:4b:f3:60:73:c3:a1:a9:e2:27:c4:d6:
af:37:e1:0e:e5:e0:a9:88:d6:ac:e4:54:6e:eb:99:
ef:55:7a:17:fd:73:5e:05:39:db:ea:9c:49:8b:5d:
fa:09:b3:c0:b9:33:14:f5:8b:c1:16:ac:05:39:10:
d6:57:4d:01:2c:30:7f:a6:40:8c:23:c4:a0:ab:d8:
fc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:63:92:8A:AC:F8:30:7A:DD:A3:94:1D:CD:CD:E4:73:AD:BF:D6:49
X509v3 Authority Key Identifier:
keyid:9F:76:6F:BF:E6:D9:57:10:00:21:38:0B:B0:55:5E:0A:3B:A6:D8:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:21:c1:8e:f2:5a:4c:8c:6a:4e:5f:97:a2:99:49:0b:57:99:
8b:66:1d:b6:9b:54:97:2f:cf:9b:d1:17:4c:2e:a7:63:fe:b4:
19:c0:af:1a:cb:05:f0:09:fb:8f:01:06:8e:9b:3f:86:ba:86:
f9:18:a0:7a:ea:34:8c:27:10:d1:00:98:03:52:89:8f:e8:1f:
5f:13:ec:7a:31:40:0a:6d:2d:5c:11:b3:1c:7a:cd:d8:35:ff:
1c:65:0c:22:72:cf:85:b8:20:66:be:53:38:05:6a:1f:2c:4e:
d9:88:24:5b:34:42:f1:dd:10:a8:42:30:40:6c:3f:70:39:68:
3a:d0:29:f9:e5:2a:b8:f8:ce:99:2e:75:71:31:46:76:7b:7b:
b9:da:fa:ef:e2:2c:16:29:84:ff:2e:ea:9f:e7:0f:9d:b6:5e:
66:5d:c5:fa:8e:46:ad:a1:a8:44:ad:e3:3e:cb:44:0b:8e:dc:
cf:32:94:b4:16:fc:4b:96:76:2d:1c:34:16:1f:f4:0e:d5:7f:
dc:6f:a0:4e:b1:fa:fb:47:20:8f:d9:c8:23:2a:e9:7b:f1:18:
41:78:f8:d3:81:75:05:fb:a4:07:e7:9f:07:04:5f:78:75:ef:
cb:0e:1e:70:55:24:41:32:59:65:99:b4:db:54:7b:f0:c1:3b:
df:df:aa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:12:39 2025 by rpki-client