Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
File: edQ3WEq9tIITYw3KpfAMnSw8wXk.mft (raw, json)
Hash identifier: yp/nWaR5K6By35Grp2tlZS+3d/Zub8IFuF1F93Heq5I=
Subject key identifier: 3C:B9:DF:6C:DE:D3:26:DB:26:BC:C7:B9:9E:F3:99:37:13:94:0D:2B
Authority key identifier: 79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
Certificate issuer: /CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Certificate serial: 01964FDA4B702C0966DD2631365BA9085502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
Manifest number: 0FAA
Signing time: Sat 19 Apr 2025 21:00:28 +0000
Manifest this update: Sat 19 Apr 2025 21:00:28 +0000
Manifest next update: Sun 20 Apr 2025 21:00:28 +0000
Files and hashes: 1: _6bJkuzxLJMC8zZKQrB-nCnecco.roa (hash: GqXUAXRZkYfH9YlSLUwHS7QBNR7+ywl2PUwYOYs72Io=)
2: edQ3WEq9tIITYw3KpfAMnSw8wXk.crl (hash: UYwpXGm+CwYYGkOPHwJRLSES9+HwKtoyPm/BOQ7LaNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:4b:70:2c:09:66:dd:26:31:36:5b:a9:08:55:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Validity
Not Before: Apr 19 21:00:28 2025 GMT
Not After : Apr 20 21:00:28 2025 GMT
Subject: CN=3cb9df6cded326db26bcc7b99ef3993713940d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:e2:45:60:69:ff:b1:9f:77:e9:34:19:ef:
e4:d4:68:ea:73:34:cd:5b:c3:a0:f8:ac:63:29:a7:
76:49:94:75:b4:89:d4:ac:c7:9c:ad:c6:4c:af:d9:
54:be:d3:fd:46:d3:5f:f9:0e:d6:87:7b:49:64:da:
50:47:99:5c:60:63:29:18:d4:bc:fe:83:69:53:80:
e7:6c:3b:50:07:e1:9d:6f:78:6d:47:f1:01:7e:08:
15:a5:a7:e1:4c:ea:6d:64:8c:4d:8f:61:73:b0:ab:
02:fa:3e:dd:13:64:7f:86:f7:f1:2a:c5:b2:ff:8d:
53:70:01:7d:db:b8:31:3e:ea:dd:d0:06:96:9e:48:
8a:4c:df:b1:39:81:bc:71:77:88:e5:1e:31:5f:88:
0a:59:2c:b6:fc:2b:ab:ed:eb:03:7f:5e:64:5b:fe:
c7:ed:84:3c:46:f9:5c:46:56:3f:5f:8d:0d:22:33:
88:a6:5f:16:47:0c:31:e0:2b:76:55:8f:03:6c:81:
7e:23:7b:99:96:b2:a2:43:f7:a9:52:ee:f2:a3:a0:
2d:54:cf:a4:f5:21:fe:b9:a7:2c:7a:30:d8:d2:15:
05:b0:99:3c:91:72:b4:8b:4b:31:b0:ca:8e:d0:7e:
9c:2c:6b:7c:d9:51:88:c6:5b:77:e9:f7:c3:d0:63:
60:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B9:DF:6C:DE:D3:26:DB:26:BC:C7:B9:9E:F3:99:37:13:94:0D:2B
X509v3 Authority Key Identifier:
keyid:79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8e:d1:91:3c:24:40:54:c2:2b:55:cd:23:41:80:a5:de:50:
e8:4d:f8:ec:01:fb:cc:05:06:9e:1a:13:8a:db:f1:c9:b3:0f:
a4:df:7e:c7:ee:b4:7c:3e:bb:0b:c1:6b:98:9c:42:49:0d:5c:
69:62:4d:22:78:37:39:bf:36:11:65:2b:4f:1b:ce:a8:e4:fb:
57:65:e4:77:8b:55:2a:fe:f8:50:07:a7:20:86:c3:cf:ed:b5:
09:28:5b:4c:e7:1f:2c:ee:e2:c8:d6:fd:ba:c2:4d:7c:a3:6e:
45:fc:0b:20:e1:87:4d:20:33:51:81:c5:63:77:4c:6d:cc:2a:
37:62:be:dd:dd:a3:22:8e:ea:e3:90:7a:d2:90:41:7e:56:a3:
3a:cc:9a:ba:7d:f0:6f:c9:9c:4a:2f:8a:69:5c:6d:b6:3b:38:
f9:fc:f2:20:29:25:40:c4:c7:cf:88:65:43:66:c6:54:ac:27:
5e:ca:ad:e3:9b:4b:74:38:bd:78:64:3e:98:e2:5b:7f:6f:7c:
9d:da:1b:b3:42:6a:e2:89:90:ec:34:16:e4:46:8e:32:00:69:
e3:9d:b8:37:70:77:b7:28:5f:bd:2d:6a:7e:b6:06:a3:d7:9a:
a1:7c:5d:ad:ab:a2:22:58:eb:5a:39:63:f7:75:9f:94:9a:ad:
82:dc:d3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:06 2025 by rpki-client