Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: Mjxg8yURVfA9BrXk+P7cHCfm63H0FwmNzclyejrfrsM=
Subject key identifier: CF:2E:D5:B4:56:D2:31:53:EF:88:EC:71:9B:5E:2F:2F:D2:73:21:F0
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 0196579475DDEED541B0913CA8D9E20E925D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 0EB3
Signing time: Mon 21 Apr 2025 09:01:09 +0000
Manifest this update: Mon 21 Apr 2025 09:01:09 +0000
Manifest next update: Tue 22 Apr 2025 09:01:09 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: W6PhiCLxTycqYoIVgy7/msyeuqvgeWuwG2WsEmAq6BY=)
2: c9o5omZ6L0iy-4hOihQzK8OPns4.roa (hash: 1kJZAp6d0yNMzeCujPn+gVtlVbLTFpBiKQFw2wsKEIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:75:dd:ee:d5:41:b0:91:3c:a8:d9:e2:0e:92:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Apr 21 09:01:09 2025 GMT
Not After : Apr 22 09:01:09 2025 GMT
Subject: CN=cf2ed5b456d23153ef88ec719b5e2f2fd27321f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:18:a2:69:4e:d4:cb:c1:69:12:11:c5:a7:
da:d7:8d:fe:01:96:e9:e5:4b:d7:da:e6:0b:a0:f6:
4f:ed:84:f5:34:78:20:f3:64:98:51:4d:d1:a9:70:
9c:d7:77:56:3d:7d:c1:20:84:49:24:33:af:fe:54:
81:c1:60:f9:9d:60:71:01:be:ef:8d:45:db:82:74:
21:20:81:06:8d:a3:d4:9d:6b:83:75:1d:82:4d:25:
5e:bf:7e:fa:c9:3b:b6:45:1a:e0:77:f1:2f:67:02:
77:2a:79:7e:32:36:b0:6f:dd:ce:6c:6c:4d:4c:e2:
0a:49:06:40:40:30:51:a6:51:9b:97:dc:90:a2:e5:
69:7d:be:70:67:3f:49:52:3e:59:0d:ea:26:46:c8:
38:c3:7f:b2:c5:a4:03:b5:aa:5d:b3:d6:70:93:7c:
2b:6a:bd:b9:4c:c0:c5:97:b6:c6:a5:dc:2f:e1:e8:
76:d4:2a:61:36:21:4b:70:a0:92:b6:22:b3:38:83:
b6:da:9c:1d:69:05:de:e5:6d:66:a3:31:d9:c1:4e:
61:56:9f:f0:0a:22:a0:94:f0:0b:7c:eb:7c:5f:83:
00:57:33:d9:fc:d7:c1:8c:9a:04:1c:9b:2a:df:76:
19:47:71:5e:a5:0c:15:23:41:36:3d:f1:fc:b4:5d:
4f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2E:D5:B4:56:D2:31:53:EF:88:EC:71:9B:5E:2F:2F:D2:73:21:F0
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f6:b7:11:f0:e5:60:2b:f6:d5:4c:66:61:32:70:51:3e:71:
c2:ed:22:70:bf:82:a7:4d:1f:1b:29:8c:cb:6f:ed:7a:3a:f3:
fa:58:29:36:99:d0:27:7a:84:e6:7d:93:da:39:1b:55:13:21:
e5:e3:bc:b0:2d:f9:fa:93:20:dc:d1:4e:f3:45:e1:9c:bf:05:
04:7b:a6:48:ae:ed:3a:b1:81:fe:89:0c:f6:f4:95:b0:db:03:
de:40:9e:1a:35:ec:6b:6b:12:7e:5d:6d:db:14:c5:e3:df:7e:
b0:5d:cd:c7:ba:df:28:71:8e:1f:26:59:54:10:91:6b:5b:3b:
f8:63:aa:21:de:09:ea:fe:c1:0f:9e:c1:15:37:8f:03:47:29:
ef:ad:6c:0a:4a:37:a7:3f:93:8d:ea:72:1b:72:08:08:ca:8a:
9d:41:73:f4:d5:f5:f1:12:ae:6c:30:5e:be:81:43:fa:21:86:
bd:21:be:c2:18:ed:8b:5d:d2:96:9d:76:ad:16:d1:3f:82:aa:
b3:09:78:37:3c:fe:43:0c:5d:35:0a:be:a8:15:65:1a:b6:7b:
6d:33:f0:bd:cd:5b:83:16:a0:f4:a1:ac:4d:18:a7:1b:ea:33:
16:ae:f5:19:c6:1c:f0:c0:c1:5e:ef:d3:26:82:00:51:24:fe:
fa:7f:30:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:47 2025 by rpki-client