Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
File: w3Q8id807HcKZZc_EAUUa_sysPI.mft (raw, json)
Hash identifier: Y6c824G6TaRUV3L+DLcMfZIG0LEZWGv6IapMyJCfhcs=
Subject key identifier: 38:04:2F:5E:EC:51:BA:4A:B0:E6:D0:9A:1B:74:31:09:38:E3:FD:33
Authority key identifier: C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
Certificate issuer: /CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Certificate serial: 0196463308C6A1304F462B2BAEF9F4965571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
Manifest number: 0BD7
Signing time: Fri 18 Apr 2025 00:01:11 +0000
Manifest this update: Fri 18 Apr 2025 00:01:11 +0000
Manifest next update: Sat 19 Apr 2025 00:01:11 +0000
Files and hashes: 1: lGKMR71wIiss24ARjCT6dglSzeg.roa (hash: pOKk5O831tF+GU5ZB5nOM1eHOcUVJqNluw5xZGpLXhs=)
2: w3Q8id807HcKZZc_EAUUa_sysPI.crl (hash: 6BJL59taIlTo/gPCJ7RfWY39DZG2E5j2BvbUA2eC9s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:33:08:c6:a1:30:4f:46:2b:2b:ae:f9:f4:96:55:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Validity
Not Before: Apr 18 00:01:11 2025 GMT
Not After : Apr 19 00:01:11 2025 GMT
Subject: CN=38042f5eec51ba4ab0e6d09a1b74310938e3fd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:db:43:04:79:59:37:ed:c1:8f:a1:05:fc:
76:e9:f4:12:a6:a1:1d:1d:5e:d3:fa:18:29:05:89:
4f:c9:d1:e9:6b:41:48:2f:1c:b9:86:c5:c4:08:c8:
1d:fc:7b:e0:de:4a:0f:2b:9f:fc:ff:ef:a4:5e:12:
95:68:14:4b:17:01:a0:c5:ca:c4:fb:22:5c:e2:22:
fd:14:a2:58:4b:18:9d:e5:a7:8e:6e:82:c7:0d:a6:
34:13:02:0e:9b:e8:36:5d:52:78:36:f0:df:67:31:
a7:15:9e:93:15:01:65:d1:b2:5e:d9:25:36:a6:42:
b9:23:16:bd:53:2d:a9:dd:c5:41:88:16:2b:37:7b:
96:40:bc:a7:37:2b:9c:68:f5:fa:69:a9:23:47:b5:
48:f5:49:c8:4a:a2:79:09:1f:47:4d:b4:0d:49:d5:
e1:86:f8:4f:1e:31:b9:dd:8f:49:62:6d:3d:41:09:
16:77:84:79:5f:f4:a4:14:2e:59:7d:7f:55:fb:5f:
46:c2:bd:3e:57:0c:06:d1:bc:c7:6e:9c:89:a5:d3:
a7:95:05:bf:06:19:26:13:11:28:06:d3:39:7e:4e:
f1:62:63:e8:60:3a:6d:cc:a8:4d:95:e4:9b:ac:49:
2c:63:a2:c3:cc:04:6b:90:9f:fb:bf:2c:e5:86:00:
c8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:04:2F:5E:EC:51:BA:4A:B0:E6:D0:9A:1B:74:31:09:38:E3:FD:33
X509v3 Authority Key Identifier:
keyid:C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d8:28:29:99:6c:16:62:28:c6:a8:2a:cb:55:c1:d1:cf:52:
fb:35:6f:aa:b1:f5:3e:e3:67:0c:d7:b5:33:b8:db:10:32:73:
02:04:07:96:26:3c:9a:51:8a:8c:5f:c1:a0:b3:a4:d8:02:29:
b5:59:a4:9d:1e:00:3e:98:80:b8:57:51:c1:fc:88:83:53:3a:
0c:87:5d:35:ff:25:36:11:34:58:5f:af:6d:7f:91:09:49:54:
05:38:08:88:82:e6:eb:6c:cb:0c:6b:c4:bc:27:77:5c:02:c7:
46:21:19:15:f8:87:91:45:65:58:bf:85:24:b2:4e:0f:e4:80:
fe:fd:59:7b:44:a0:8e:6c:cf:50:b0:43:39:08:a8:fb:9f:1f:
db:8d:53:f0:90:c8:34:74:46:c8:b8:85:35:83:56:30:24:da:
a8:4c:b7:7e:61:4c:e8:a7:e3:65:03:e7:db:d3:15:5c:f0:d2:
ad:81:16:de:50:8c:7a:de:b9:5b:41:dd:e3:c4:e0:24:48:42:
98:a8:8c:7d:76:14:1d:3e:23:78:db:a5:b2:db:09:07:d3:b1:
c9:3d:d6:13:8d:14:ea:a4:09:9a:a2:7b:4d:39:c3:6c:4c:48:
49:c3:2c:a6:e0:72:f2:c9:1e:3d:71:30:1d:e4:40:30:c3:d1:
09:ba:ff:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:00:48 2025 by rpki-client