Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier: Rc7jLu4EGN0Xvy/JaTH2EVy57blTGMUQA085ESHDGqk=
Subject key identifier: 39:AD:D2:BD:02:F5:39:6F:6A:EA:AE:E6:3A:F6:ED:85:89:EA:C1:11
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial: 01964AB3F3F6F56767EB8595047D85246630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number: 0962
Signing time: Fri 18 Apr 2025 21:00:29 +0000
Manifest this update: Fri 18 Apr 2025 21:00:29 +0000
Manifest next update: Sat 19 Apr 2025 21:00:29 +0000
Files and hashes: 1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: G9LqxFnHtiUJelUx9Lm8+A2jFcJedMgqTCk5ENtIdS4=)
2: dKbYijsCo6cz-c8VDyBQbX6KvIQ.roa (hash: s+UDqFCEg39f4gk9fs9ZUXaGmiKaVpMOQ/J8CYcOuY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b3:f3:f6:f5:67:67:eb:85:95:04:7d:85:24:66:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Validity
Not Before: Apr 18 21:00:29 2025 GMT
Not After : Apr 19 21:00:29 2025 GMT
Subject: CN=39add2bd02f5396f6aeaaee63af6ed8589eac111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ed:36:1c:8b:88:15:2a:c5:2a:02:7a:3a:da:
ad:35:69:e2:01:c5:9a:40:3d:7e:b9:0a:11:c3:82:
98:c1:3d:56:d2:33:12:a3:ad:9f:16:aa:78:da:5b:
7d:21:96:df:0c:8b:71:92:a3:1f:0b:8b:e6:10:13:
c5:41:c1:5e:14:16:99:32:d5:99:53:3f:34:0c:fb:
43:11:0a:9a:94:bd:10:31:55:60:f8:df:22:89:ca:
cc:e0:7b:cb:bf:c6:d3:52:e2:62:2b:bc:92:14:44:
db:78:72:11:6f:b7:43:57:0c:60:45:7a:99:40:e1:
de:2e:24:d0:5e:d8:ec:af:a7:ea:fe:d6:40:68:c5:
55:7e:72:b2:8e:e5:ed:76:83:8f:fc:41:12:d1:7f:
54:b2:b1:75:7e:6a:21:94:d0:1c:d4:29:00:47:c9:
68:75:f3:22:78:29:28:dc:9a:e0:d6:2c:bf:c0:b7:
ef:b5:4d:47:17:f8:b3:57:01:b8:73:2e:2d:d7:fa:
7a:1b:34:14:50:e6:14:9b:eb:05:2d:1d:3b:31:13:
cd:1c:e8:14:22:43:86:91:5d:3a:e5:98:f8:11:22:
de:cf:e7:cf:cd:a2:3e:50:50:1e:e8:2c:11:4b:4f:
2d:5b:fc:cc:53:e5:2f:91:4f:b0:c8:94:35:18:96:
7b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AD:D2:BD:02:F5:39:6F:6A:EA:AE:E6:3A:F6:ED:85:89:EA:C1:11
X509v3 Authority Key Identifier:
keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:06:b8:46:b0:58:a7:08:4b:43:ba:d5:82:85:09:28:88:e8:
a1:ed:2d:a3:24:11:ed:5a:6a:18:e3:75:0d:f9:52:22:67:71:
9e:be:ca:3d:e6:a6:2a:77:9e:80:94:11:b2:61:cb:99:8e:50:
a5:b0:2d:c6:d4:96:7e:e8:ec:90:3f:8d:09:54:82:5c:f8:e2:
e5:ac:40:f1:e3:72:e0:90:54:ab:93:16:ea:92:67:6d:3b:ad:
2c:8c:e3:89:a2:5b:85:87:f8:da:e8:dd:d5:ca:28:36:83:b9:
e2:6e:d9:9d:8b:1a:4e:8f:a3:d4:22:fe:1e:23:2b:37:bf:5e:
68:f9:f9:ad:24:ff:43:e8:8b:22:fe:f5:84:e6:85:9e:16:54:
b6:7d:53:cd:24:b0:a1:cb:8a:db:0d:3d:a3:b0:74:4f:0c:88:
27:e2:14:76:f0:90:98:de:42:fd:74:52:a8:92:2b:b0:92:30:
f5:db:0a:5f:56:5d:e1:8c:32:0b:95:60:99:a6:cd:1f:e2:bb:
ef:8e:7b:a4:e7:e9:d5:2c:c1:d5:ff:9f:f0:7f:b9:c9:6c:30:
08:28:ec:7d:45:f9:cb:f2:e8:ff:d3:e9:47:a0:40:ba:8e:15:
0b:81:42:e5:76:61:4e:5d:14:35:58:2d:c4:ae:b5:56:84:c5:
8a:da:6b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:49:59 2025 by rpki-client