Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File: A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier: q///aoSFERJv3l78H2jfBrlc0Zo/qS3oq9nj+E81uy8=
Subject key identifier: 36:9E:8B:67:68:99:7F:9F:1B:F4:D1:5F:5D:FA:F7:84:CA:16:DE:B4
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial: 01964DEC425F5AF4E967FD36819926C0AA40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number: 1224
Signing time: Sat 19 Apr 2025 12:00:51 +0000
Manifest this update: Sat 19 Apr 2025 12:00:51 +0000
Manifest next update: Sun 20 Apr 2025 12:00:51 +0000
Files and hashes: 1: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: 1I4T37u5iBF6bwXa6rppraDMbqczp4afnZ0lVJID1ys=)
2: AB4qyh-GFm_4fCIscWpIBFj0Kek.roa (hash: eMCLNriDfdANy3mBQaEbKePj36AsyrGRMWbPR231aA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:42:5f:5a:f4:e9:67:fd:36:81:99:26:c0:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Validity
Not Before: Apr 19 12:00:51 2025 GMT
Not After : Apr 20 12:00:51 2025 GMT
Subject: CN=369e8b6768997f9f1bf4d15f5dfaf784ca16deb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:95:4e:dd:a4:9d:33:77:8b:2f:b5:02:e2:c6:
ff:09:8e:09:be:1f:de:d3:2d:0b:73:47:77:e0:18:
bf:2f:41:05:c4:8a:7f:31:94:c6:39:2f:39:c6:ed:
ce:b4:62:7a:41:aa:d2:72:de:dd:ae:1f:ab:1e:57:
bb:02:1c:55:4d:27:6a:76:35:29:00:00:03:40:e9:
e6:1d:77:e9:93:c9:b1:c3:c8:20:4c:ec:16:18:25:
66:d8:ca:75:b7:36:e3:c2:76:ba:aa:e5:50:5e:ab:
0c:f2:7f:3d:3c:38:09:d9:bd:0a:b2:0e:9c:c8:69:
96:d5:22:da:5e:cc:94:85:9e:ec:fd:90:ae:9e:18:
90:f6:1d:73:50:b2:65:fb:06:70:6b:92:71:04:ca:
19:8c:c7:bd:b9:b4:15:81:cb:bb:5c:3d:e8:78:a1:
93:9e:6b:37:b3:4f:02:d1:6b:34:ac:17:0e:04:24:
e4:ec:e3:97:df:5b:06:fc:af:8c:57:62:7c:1d:12:
59:81:5d:4a:99:be:fe:22:8c:a4:98:d0:8d:97:47:
31:a3:28:05:86:64:98:db:02:81:64:27:01:70:6b:
ec:3c:6b:dd:ba:31:c9:a0:a8:a8:5e:e9:4f:0d:4b:
88:a9:6d:8c:c4:d0:51:13:05:aa:5f:b9:57:35:29:
2b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9E:8B:67:68:99:7F:9F:1B:F4:D1:5F:5D:FA:F7:84:CA:16:DE:B4
X509v3 Authority Key Identifier:
keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:02:55:4b:23:e2:d9:28:db:98:5d:bc:16:74:88:74:85:6a:
64:a4:aa:e7:61:c4:ea:30:5c:01:d4:a4:63:af:65:77:f6:bd:
96:27:5a:4e:e0:67:5c:bb:cf:0e:ad:5b:6a:f8:ea:6b:ce:de:
17:a1:45:95:83:bc:c2:09:73:e0:3c:63:34:2e:9c:2a:9d:ff:
f7:5c:49:8f:3d:5b:77:e9:23:93:0a:99:ae:8f:c7:ce:c0:62:
7d:0a:f2:e5:c3:48:5a:2f:d5:b4:78:0c:a2:fb:db:c6:c2:6a:
79:73:8c:5e:b2:f7:02:42:84:19:16:8d:a0:52:f2:b6:22:af:
7e:10:0d:28:d1:17:f8:23:8a:ec:9c:83:f3:e6:1e:b6:ff:cd:
f0:d3:69:87:97:b9:54:96:73:bf:a8:c2:18:3a:49:44:1c:ce:
30:12:5a:01:93:91:b5:44:66:19:ff:79:8f:2d:a0:76:4a:70:
2d:cf:dd:9c:dd:1b:0d:0c:40:10:78:8c:49:43:08:bc:ea:2d:
a1:8f:b3:0a:9d:42:dc:2f:bd:f8:b4:c6:9a:bd:2e:63:2d:7e:
ab:2a:30:d8:c9:a8:d9:7e:de:cd:4d:b7:ca:db:87:32:63:1c:
a9:0f:7f:57:f3:33:d1:20:81:79:bf:46:bc:f4:dc:01:b3:fd:
9a:a9:08:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:06:36 2025 by rpki-client