Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: s1fKWLCIUImBOkWvzejweva5yo4OaNJbUG6WBJw8yi8=
Subject key identifier: 5F:29:9E:C6:B5:45:B6:4D:B7:7A:BA:29:4D:5A:74:E1:79:1B:C6:47
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 01964C34F11F9FBD3CF7EB5D3691C95A7BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 1000
Signing time: Sat 19 Apr 2025 04:01:00 +0000
Manifest this update: Sat 19 Apr 2025 04:01:00 +0000
Manifest next update: Sun 20 Apr 2025 04:01:00 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: GXjBdZOarYs8v6FZjf0FUtq8P+MlWOI5FRGMzEzCWcE=)
2: _eQTxfZZbwefhXlLKHO7CEbeNzo.roa (hash: XwbhtEsqMzoTs493oAMc1WoC+bVurXPqsNp3fAtN59M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:f1:1f:9f:bd:3c:f7:eb:5d:36:91:c9:5a:7b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Apr 19 04:01:00 2025 GMT
Not After : Apr 20 04:01:00 2025 GMT
Subject: CN=5f299ec6b545b64db77aba294d5a74e1791bc647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:56:d4:03:2e:5b:5b:f3:b0:23:e1:cd:f2:60:
97:a4:0a:20:b7:c5:79:71:9a:f1:4d:03:56:d0:3c:
fe:f6:c0:33:db:17:78:94:0e:45:92:73:f6:e1:53:
07:55:1f:ac:7f:c0:a7:41:8f:57:71:0e:d5:3a:2f:
bc:e0:8f:27:39:ee:8e:29:9a:cf:b1:4f:66:32:71:
de:53:e8:07:51:a3:c9:96:7d:ff:3d:be:9c:c4:67:
71:e9:fa:09:66:cc:33:b2:9e:3a:bc:3b:28:bc:2e:
81:d5:a3:e8:43:4a:be:27:f1:fd:ec:18:19:c3:84:
86:97:cb:6a:35:03:15:7f:48:ca:1f:08:96:e5:20:
c9:be:d6:55:42:66:7e:51:9d:38:e0:29:68:49:16:
b5:6a:97:0e:a3:95:87:63:02:13:26:4a:be:b0:c6:
ca:7f:5c:f6:27:5f:0d:88:6e:64:17:79:f2:f9:17:
c2:2c:75:0c:20:b8:2a:eb:57:b2:fa:0e:2e:de:c4:
fe:48:8d:ba:5e:6c:9a:a2:14:4b:d3:85:7d:66:84:
ba:cf:e1:83:f2:9b:50:a5:0e:9a:8d:6b:ce:4a:38:
e5:7b:f5:dd:86:b0:20:7e:65:1c:08:90:e9:07:66:
46:56:4d:de:2b:d3:f1:12:bc:6d:c6:53:ab:86:f6:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:29:9E:C6:B5:45:B6:4D:B7:7A:BA:29:4D:5A:74:E1:79:1B:C6:47
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4a:e2:8c:1b:24:2e:6d:10:3b:c9:8c:2d:d2:ff:6d:e7:57:
49:0e:b7:34:68:51:a2:17:21:cc:0f:a0:63:8d:ba:f2:a4:8a:
d3:a7:66:c5:63:77:56:47:49:00:f3:00:e0:9f:5f:64:a4:af:
87:37:87:d0:54:15:26:26:69:f0:04:b1:e4:dc:15:3e:f0:61:
c6:56:e6:b6:e9:88:17:73:9b:e3:57:94:da:51:09:21:6a:b0:
0e:7c:eb:05:40:a1:94:08:ce:f5:45:5c:0e:63:c6:d5:15:5f:
1a:8f:b7:d7:c2:a6:00:d1:3a:90:9a:95:db:90:24:5a:49:18:
d8:71:53:22:b4:73:3b:e4:31:b0:7f:25:38:15:91:25:17:31:
a4:76:4f:ee:ca:b8:1a:22:ab:22:b9:e0:95:2e:c5:ec:c8:e7:
c6:d3:89:b6:fe:65:d7:7d:23:2d:f6:30:17:7c:e1:58:2e:71:
d3:26:b5:73:2f:0f:27:b9:d5:60:00:60:50:bd:ff:2d:bb:98:
3f:98:89:56:2b:5a:2b:76:25:71:ef:57:5b:5a:e4:69:fa:d6:
97:85:0e:8e:3b:1b:c1:db:ba:85:74:81:07:c3:4e:01:24:be:
bc:0e:85:8f:8a:b5:04:69:b5:be:6c:59:93:cf:be:da:38:03:
bd:7c:21:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:46:24 2025 by rpki-client