Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
File: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft (raw, json)
Hash identifier: ssCzJ4dNsLWdTRvjnGWEmNQRhtAjEJGBbcpUbYGKT04=
Subject key identifier: B3:A0:A3:C2:88:00:46:9A:B2:1B:9F:7C:38:2D:6A:1C:56:42:52:3D
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 019654C99E7E524F4C4BFE86187F3958AF46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
Manifest number: 0CE3
Signing time: Sun 20 Apr 2025 20:00:21 +0000
Manifest this update: Sun 20 Apr 2025 20:00:21 +0000
Manifest next update: Mon 21 Apr 2025 20:00:21 +0000
Files and hashes: 1: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl (hash: OxF6t6kXEmppOICgdj9QumxhO1wiSOr4BKcoGa5hzCQ=)
2: D7PGGduIwX7v-ShQSUz8OVV9C1w.roa (hash: 7ckgBrpQ8LkiNGwk/n+SRdsap+chU5QW5iJNm8qHanE=)
3: IrsYdpqcOnQ3SpbKBx6nFfzcVrQ.roa (hash: AIbJqohxVTkRlwXht+/E+fE7aYFk0d/YsXjveY/e/+A=)
4: QV_KHSRk0F1p49xmdU8Cjw9F95k.roa (hash: bXFoeKrbp3I/mSHJx/SNzgxE/ZuKpJd2GAhpkwSz+z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:9e:7e:52:4f:4c:4b:fe:86:18:7f:39:58:af:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Apr 20 20:00:21 2025 GMT
Not After : Apr 21 20:00:21 2025 GMT
Subject: CN=b3a0a3c28800469ab21b9f7c382d6a1c5642523d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:8b:7b:2e:a2:ec:21:b7:c0:c0:c9:38:c6:
3a:19:bb:2d:b0:d1:8e:da:fc:61:5b:0e:25:43:be:
fd:8f:4e:54:f9:6e:2e:a7:70:8e:7f:0f:a8:5b:72:
11:d6:41:06:f3:da:03:c2:2f:43:42:00:c2:e7:a6:
70:8c:c0:c9:54:0c:58:27:04:f5:99:e4:3d:98:fd:
74:54:07:40:54:47:01:b9:3f:0e:e1:4c:c0:19:0c:
95:64:cd:0e:8d:71:8f:29:a0:1a:ef:67:fe:f4:ab:
70:28:3e:94:3d:ab:9f:9f:69:4d:ce:20:6c:73:64:
6a:ec:e7:92:27:44:17:de:47:d9:5d:aa:7f:8b:a2:
f0:0d:a8:1f:fa:27:16:f9:fd:3e:ae:3a:cc:65:08:
04:e5:0d:3b:74:49:75:ec:29:dd:8f:1b:67:12:7f:
47:a2:68:7d:7d:1a:7c:aa:47:2e:45:e7:94:80:11:
43:f8:80:b7:6e:92:fe:b3:9d:87:2b:f7:5b:06:4c:
13:b0:bc:8b:71:3b:a2:65:de:41:23:ab:37:b0:28:
1c:f4:76:9e:5f:0c:83:0e:e8:46:fa:3d:8a:a5:2a:
a6:74:3e:01:32:76:70:8e:15:05:a8:c7:d5:5a:eb:
0e:cc:35:ec:5d:76:cf:cd:ba:0c:5b:19:1c:87:f4:
ff:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A0:A3:C2:88:00:46:9A:B2:1B:9F:7C:38:2D:6A:1C:56:42:52:3D
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:0c:f4:39:d1:d6:5a:d3:73:d6:85:95:a7:d2:50:97:a3:b5:
60:57:53:2b:d1:33:f8:8d:e6:99:42:88:4a:2a:f5:bc:07:21:
e3:8d:d7:74:ce:cf:1e:7f:f5:23:e3:fa:a8:12:d6:10:e8:6e:
36:1c:00:00:a3:05:56:ef:28:2d:e6:8c:87:b8:0c:8e:e0:0c:
e2:aa:ed:95:05:ec:92:b9:c9:c2:c3:fe:97:cd:ef:14:f1:80:
f2:94:00:9f:19:cd:93:96:f8:dd:a8:9b:83:03:f4:00:93:a7:
75:87:54:34:93:c8:4d:56:2e:81:74:dd:8d:23:df:f9:98:c7:
46:1e:d2:78:50:ee:e5:17:b6:b7:38:b7:9a:c8:d2:d2:c0:b3:
25:d4:c4:df:92:10:19:bd:ba:b2:d5:bf:c7:c4:18:85:86:c3:
32:6c:c9:d0:ea:d0:0a:57:6c:d0:69:0f:00:76:71:f7:d2:68:
5d:d1:62:a5:c7:89:a9:93:4b:ba:e0:78:ed:26:cb:31:eb:69:
f1:5e:ae:37:57:b2:d6:79:c3:f4:14:5e:64:27:35:dd:11:06:
34:98:ba:ad:87:0a:e6:c4:3c:16:63:a4:05:83:7e:d7:1d:46:
13:23:aa:3c:e2:03:67:4a:7a:87:e7:d8:84:aa:63:8e:e8:54:
f4:dc:55:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:45 2025 by rpki-client