Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
File: 03fcZqVjo68h7gerM-i__nr5KI4.mft (raw, json)
Hash identifier: xK63ULHTQITRBcYr+JdBsYLJA75uSkOfl9z/FbCsZ0E=
Subject key identifier: 8D:0D:33:B3:1A:0B:BF:C9:6C:37:1C:4B:A3:CD:63:9D:F2:7C:3C:D9
Authority key identifier: D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
Certificate issuer: /CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Certificate serial: 01964BFD9DFD9EB4DDD58B6A657EC65EC392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
Manifest number: 0344
Signing time: Sat 19 Apr 2025 03:00:34 +0000
Manifest this update: Sat 19 Apr 2025 03:00:34 +0000
Manifest next update: Sun 20 Apr 2025 03:00:34 +0000
Files and hashes: 1: 03fcZqVjo68h7gerM-i__nr5KI4.crl (hash: XQ9vS7MW6XfQnLE0vzvFuK11Pqmtluxx19ddgqIxZhU=)
2: 6NWP4SmZYIKGrMKHkiHYbZ6J5I4.roa (hash: m+2x+5LklJoq5rlCh1u/r9pBwdaQs57tN+EGau9SsmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:9d:fd:9e:b4:dd:d5:8b:6a:65:7e:c6:5e:c3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Validity
Not Before: Apr 19 03:00:34 2025 GMT
Not After : Apr 20 03:00:34 2025 GMT
Subject: CN=8d0d33b31a0bbfc96c371c4ba3cd639df27c3cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:c5:75:fa:c3:ee:a9:03:95:ca:39:6b:0d:
26:50:6f:b7:27:99:b7:a1:1f:99:e3:dd:75:cf:02:
60:0c:0a:98:2b:3b:e7:10:59:21:5c:43:a3:3f:4e:
72:57:71:81:62:5e:e6:e0:8d:50:76:b4:9a:c2:48:
83:36:be:32:94:51:17:a3:4f:0b:e1:80:83:6c:38:
28:a2:0c:73:46:98:49:32:3e:cc:6a:e2:19:17:73:
8d:ec:dd:16:f6:97:4b:5b:aa:4a:b1:55:a6:a9:d7:
35:1e:27:28:50:cb:64:ab:0b:f5:2e:d0:ab:61:1f:
6d:df:c5:55:53:79:a9:4d:0a:62:44:66:d8:dd:e2:
e7:61:e5:5a:62:5b:45:fa:68:18:d4:77:ea:c6:a2:
90:08:3a:cf:de:ce:ee:c3:34:64:9c:a4:c0:4c:5d:
5d:de:42:c7:57:c5:df:4c:d1:1d:d3:30:68:a1:ee:
6b:6e:68:94:f8:74:65:5a:2f:46:3c:b3:73:c2:9f:
a8:8b:80:99:5f:4b:63:4b:e2:ef:8a:91:ea:1b:17:
82:7d:16:fd:3c:5a:96:54:51:70:e7:69:38:06:13:
25:fe:f9:d0:7f:f2:bc:ba:02:3a:81:e2:35:5f:95:
3b:84:d6:59:c0:d1:b3:ee:6c:9a:3c:7e:c0:99:9a:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0D:33:B3:1A:0B:BF:C9:6C:37:1C:4B:A3:CD:63:9D:F2:7C:3C:D9
X509v3 Authority Key Identifier:
keyid:D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:ad:08:c9:c4:7b:6a:ea:b1:6f:f2:d7:fb:df:f7:36:d6:0b:
86:85:ee:1c:f7:e8:9a:10:c9:38:f0:e1:06:5b:4b:8c:d0:68:
cc:77:15:25:58:17:ba:ce:d6:4b:d5:11:e0:f8:45:0d:b3:ba:
75:47:6b:3b:e9:21:5b:ee:f1:62:53:5e:28:a5:43:d6:9f:56:
66:66:39:1a:07:95:13:6f:b1:7f:62:b3:ca:6f:14:41:d1:2e:
f5:dd:da:0b:e1:ca:e5:66:ba:c7:ee:de:b6:c4:8b:41:94:54:
64:07:e8:8a:99:90:15:fe:7d:b1:04:dc:ca:d1:d1:d7:83:3c:
c7:a3:30:e7:a4:6b:e1:70:ef:00:da:21:af:c5:33:6e:d5:62:
68:c4:b6:9e:22:15:4e:90:1a:1e:10:c8:a0:88:cb:7d:38:f8:
69:46:f4:aa:5e:d3:32:8f:0c:52:02:d5:ba:c5:ab:00:80:bc:
ea:b5:be:57:2d:d2:21:4b:2a:f0:c6:71:c8:9d:7c:e7:1a:7f:
8b:2c:d5:ae:67:05:7c:df:3a:37:b0:05:bf:68:be:66:56:1f:
db:58:ff:40:cd:f1:e6:1b:63:44:d8:2d:7c:56:ba:1e:2f:84:
77:e8:a2:fb:bf:d2:c0:28:50:6b:1d:ec:e0:22:e3:be:e1:98:
40:33:9f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:03:09 2025 by rpki-client