Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File: 3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier: mIu8IMzUuGPIFEDtsnLLJblpAtLnsEBm2fS/8nyQN5E=
Subject key identifier: 11:0C:ED:CD:87:7C:C4:B7:33:77:25:EF:8F:A7:87:8F:0C:4F:A7:14
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial: 019510C6C52C6CB5B68DF963A6707686534D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number: 04CE
Signing time: Sun 16 Feb 2025 22:00:16 +0000
Manifest this update: Sun 16 Feb 2025 22:00:16 +0000
Manifest next update: Mon 17 Feb 2025 22:00:16 +0000
Files and hashes: 1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: eNboz6aOd0twc0/qZ0wSOhVH1eEiUWh3GGrRMjXIch4=)
2: HrIwTwMD6cd99R3d7bEiTOryXZg.roa (hash: 1wrHqn0lkUk+GnZl+JBgqFqtnLiVA3gNpwduqpO2T9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:c5:2c:6c:b5:b6:8d:f9:63:a6:70:76:86:53:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
Validity
Not Before: Feb 16 22:00:16 2025 GMT
Not After : Feb 17 22:00:16 2025 GMT
Subject: CN=110cedcd877cc4b7337725ef8fa7878f0c4fa714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:88:a0:22:9b:7b:67:78:53:d5:ba:0c:f8:4c:
d1:40:a3:b9:12:51:56:3f:ae:c4:7c:77:b3:8d:5a:
fc:cd:8b:1f:b6:e2:1e:92:6b:66:ae:0b:dc:c8:54:
f0:71:68:16:9d:e4:9d:e2:20:ac:5a:2a:04:83:5c:
f4:10:52:f6:09:fb:cf:1c:b7:46:8d:a4:ea:f8:7b:
79:84:95:10:de:65:86:05:5c:c8:6d:12:9b:d1:b9:
96:9f:dc:84:6d:1a:b2:84:b0:0b:ae:e9:5e:ff:5b:
ec:f2:1e:c5:c7:c6:40:0c:01:db:0c:e1:08:7a:08:
7b:2e:b8:83:68:d5:dd:27:e1:aa:1b:c6:e3:06:46:
dd:17:f6:ad:04:b1:90:66:51:3e:00:b8:bc:56:66:
b2:28:12:eb:05:ae:91:8d:da:53:d5:a9:50:c6:f2:
f0:ee:e6:01:ed:34:24:5c:8e:f2:93:d8:9d:ca:0c:
b0:c2:fb:00:7b:e7:02:fe:d1:66:2b:fe:1b:23:d2:
4e:23:b7:10:6f:57:1c:eb:41:6f:0c:58:97:b0:7f:
fb:2d:bd:1a:9a:e1:1c:e5:0c:09:f2:f0:b7:a3:29:
6d:75:e0:bb:6a:5d:44:16:b4:5a:7c:e8:d6:e9:4e:
a0:83:c6:37:00:13:ec:68:0c:37:eb:e5:a5:71:74:
14:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0C:ED:CD:87:7C:C4:B7:33:77:25:EF:8F:A7:87:8F:0C:4F:A7:14
X509v3 Authority Key Identifier:
keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ba:38:14:0a:77:14:3e:66:c7:e7:f2:5c:5a:17:ff:67:e5:
b4:bb:b5:82:d9:aa:3c:72:05:9f:69:8d:20:80:6d:e5:13:91:
23:ed:b6:14:fa:4b:ec:ea:d7:4c:b0:55:dc:dd:11:f2:9a:b3:
34:f1:b0:06:6d:1d:91:d2:f7:03:61:89:07:23:17:4f:1c:a4:
b1:c2:26:d4:4d:7e:bc:86:4e:f1:05:3f:dc:0e:5f:2c:e9:38:
db:50:51:89:6e:cb:9c:c8:95:db:11:d1:04:51:e7:df:ff:5b:
38:07:bc:5b:55:bf:12:5f:00:55:4a:9e:ea:97:8f:fa:28:c7:
a1:bc:2d:3e:72:b7:53:ec:35:dc:84:ea:78:ef:9d:df:3d:a3:
0e:46:94:20:91:13:e2:45:ec:d8:2f:65:50:52:5f:a1:c3:a5:
7d:93:06:f6:46:d8:29:08:48:dc:2d:76:dc:19:cc:5d:5f:59:
0e:9c:25:78:24:2e:d4:01:b6:09:d7:23:8a:7d:03:57:4e:a1:
60:9e:75:79:cf:d3:8e:8e:07:e1:ae:f4:8a:1d:31:cf:f7:ec:
70:60:a5:a7:e8:90:e0:1a:d4:13:d8:76:a7:98:5b:85:d2:83:
4f:29:9a:3d:ee:88:72:61:e1:ad:60:19:ab:36:ed:a3:1b:a9:
99:73:fe:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:23 2025 by rpki-client