Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: wiudwGTZtgeAFqmI9fXUF8d8NoILbZRF/a+1ieYt0Ns=
Subject key identifier: B0:1D:D6:3F:6E:68:1A:A0:73:0B:54:CA:4F:5E:C1:C4:73:2A:72:F3
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 01963D665C9A9A929DA20B7600E7A98ACA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 0484
Signing time: Wed 16 Apr 2025 07:00:40 +0000
Manifest this update: Wed 16 Apr 2025 07:00:40 +0000
Manifest next update: Thu 17 Apr 2025 07:00:40 +0000
Files and hashes: 1: 1eJwg5skWWcGDXFLNTcOwNfaXOs.roa (hash: 7FGDI31rrxDDlErzYzWSkDOB2c3i2HKAdvNrAxAMr8I=)
2: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: Lr06sc9TMHbP2S6zqmNcNUm0XQvQXYNg2qUXzqWEBME=)
3: Pu9BTwuj73Y1OYZEEjY0ZHH4Hw0.roa (hash: wFwRyxZLAd3FNxCgO3OSOt8i3+YrAeILPNwkW0awCVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:66:5c:9a:9a:92:9d:a2:0b:76:00:e7:a9:8a:ca:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Apr 16 07:00:40 2025 GMT
Not After : Apr 17 07:00:40 2025 GMT
Subject: CN=b01dd63f6e681aa0730b54ca4f5ec1c4732a72f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:42:d8:7b:c9:44:a9:fb:0c:4d:03:c1:34:56:
85:8d:b3:2f:4f:79:46:64:f8:21:d2:1f:51:00:7b:
2d:6f:0d:35:bd:6e:bd:6c:61:20:9a:6d:dc:68:6c:
8f:f5:e8:00:6f:d3:d2:c8:de:8e:04:0e:05:2c:b8:
48:bd:1f:7a:e8:cc:ca:d5:ea:05:ac:c2:d9:c5:6b:
df:94:c1:03:c0:a5:0a:77:f8:16:13:eb:c9:47:d9:
26:8b:2c:b4:65:9e:d3:05:2e:94:26:45:34:7e:b9:
cf:66:b7:8b:0c:a3:61:19:a3:7a:8d:a5:b2:4b:dc:
95:51:9c:18:ec:ae:cf:d1:5f:07:7b:11:b9:b8:b7:
73:b1:14:d7:b5:21:18:91:80:dd:b7:a7:f2:db:7d:
50:de:5a:53:65:d1:5a:7a:57:4d:d1:7d:15:53:c6:
bf:5a:58:b7:be:fd:ed:f7:73:e5:ca:e5:c4:e8:33:
b2:76:28:86:56:b8:79:78:19:99:ed:2d:fa:83:ef:
8e:36:53:ae:7f:68:ab:6d:c3:2d:80:e9:36:ad:a8:
fe:3e:79:63:11:1d:b2:40:ff:8c:3d:40:5e:df:36:
06:0d:cc:5a:ba:9b:47:aa:ac:8f:2c:a1:e1:9b:2f:
b0:a0:9a:c6:c9:99:a4:c4:11:58:1e:82:f1:6c:f2:
3f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1D:D6:3F:6E:68:1A:A0:73:0B:54:CA:4F:5E:C1:C4:73:2A:72:F3
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:66:3d:4b:80:0a:81:77:71:cf:ba:92:79:45:ec:6b:69:a8:
fa:f1:15:f0:ec:44:11:d3:27:96:11:77:a8:b7:ce:4b:51:6e:
34:a4:9c:76:d2:bf:44:b5:11:6e:9e:9f:d1:a7:1e:8b:33:b5:
ef:19:a3:81:07:27:41:20:d2:18:25:46:1c:60:ad:0a:11:33:
a9:5a:f4:51:f9:f9:9e:c1:f5:02:36:1f:bb:d2:0c:19:cc:52:
14:44:74:60:a1:2f:db:8f:a1:3e:1e:f4:db:1a:e9:01:48:3f:
9c:d5:4d:6d:2b:b7:2a:f6:e3:e3:4c:27:0e:6f:bf:be:0e:32:
81:14:c8:22:10:ba:7f:b2:4c:c3:39:94:3f:e8:72:55:7c:70:
6b:21:60:c0:d2:4f:6b:c7:d2:2b:00:ed:85:d1:6e:a0:97:3d:
b2:4c:c9:cc:a8:31:f4:88:f5:2a:d0:04:aa:4b:21:b2:d7:52:
44:48:da:46:fb:e1:72:33:b8:dc:25:a0:cd:a9:d8:b4:f3:8f:
59:6a:a9:85:d4:c7:07:da:24:7a:95:c0:d8:77:54:42:40:9d:
85:40:74:e3:5d:09:8f:89:01:94:da:8e:66:02:46:a6:14:4e:
cd:c4:91:d8:5c:95:bb:fb:e8:e0:6e:19:e5:fd:69:b1:02:c9:
bc:d1:31:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:21:26 2025 by rpki-client