Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: 0E33anNxl6KMDtXjEjVdDDQfDW83OLhzgaWgh9gMFAI=
Subject key identifier: AF:66:30:17:4C:1A:48:A2:0D:BF:44:60:22:C7:32:3F:8C:65:13:D8
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 0196526D88C85349E6AEFEC6B0127F65708B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 04E9
Signing time: Sun 20 Apr 2025 09:00:32 +0000
Manifest this update: Sun 20 Apr 2025 09:00:32 +0000
Manifest next update: Mon 21 Apr 2025 09:00:32 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: KEW8JkgCVTufBUMwiImGhiNYCKKFOQcRt3CnDvOZTgU=)
2: w0q3VjpYAA26KoKS-OoF_EY4OL8.roa (hash: NjcgvyEw+m9zGeB1dD1onCDET/1Ymu7yU7l0wd7sHLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:88:c8:53:49:e6:ae:fe:c6:b0:12:7f:65:70:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Apr 20 09:00:32 2025 GMT
Not After : Apr 21 09:00:32 2025 GMT
Subject: CN=af6630174c1a48a20dbf446022c7323f8c6513d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:18:61:63:d3:3a:bd:bf:1d:1e:14:59:0b:99:
44:dd:c8:5f:08:3d:72:70:79:86:cf:df:89:55:9e:
e6:5a:ab:33:f9:67:1f:5e:0a:91:55:43:8e:f2:6b:
10:6e:6e:ac:6b:63:f3:51:08:58:6b:ea:66:30:86:
9f:aa:f8:c1:5b:0d:40:fa:7f:4b:52:99:ad:39:30:
92:67:0f:96:a5:ab:5d:03:da:54:02:49:8e:58:5b:
07:21:db:97:71:54:d3:7a:c6:22:0f:7d:4d:79:e8:
37:a9:c4:45:b6:76:30:a1:d4:b7:b5:7d:d4:a2:70:
27:b9:9e:1d:96:ac:bc:a0:92:4b:af:14:d8:eb:b2:
07:f9:b2:71:0c:51:41:ef:38:78:f4:e5:c9:9c:b9:
a6:ce:06:7a:76:31:b2:46:ba:f7:37:26:01:dc:42:
93:be:de:f1:11:ec:9e:c2:97:e5:53:29:a3:4b:6e:
0d:1b:c6:6b:74:4b:38:56:62:d5:d6:14:85:89:52:
32:50:af:ce:a1:e9:a9:49:2d:ab:a7:d6:6a:b9:39:
92:7b:1f:be:97:90:3f:22:90:5f:b0:b8:e5:e4:6c:
95:df:3f:e3:e4:69:bf:b4:df:d4:30:8c:88:35:62:
13:46:16:1a:72:8c:2a:20:b6:28:18:a0:59:93:48:
94:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:66:30:17:4C:1A:48:A2:0D:BF:44:60:22:C7:32:3F:8C:65:13:D8
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:57:cb:ba:02:d6:91:22:01:36:6d:33:b3:c6:b0:81:ca:30:
1d:85:94:86:bc:83:e7:b8:90:60:18:5b:e0:9f:7c:bf:bf:f4:
9a:f6:7a:c9:f1:87:b5:ba:ed:71:a7:6c:07:bd:6c:95:e5:b6:
e6:b8:74:8c:ea:a6:3b:e8:ca:20:8a:60:c8:89:87:1c:c4:72:
a3:aa:5c:f8:de:89:b3:55:32:c4:9f:13:88:37:de:c5:97:71:
e8:77:da:3d:08:9e:23:19:14:d9:d0:5d:16:e9:46:e5:d6:21:
05:62:9b:9f:ae:48:30:59:b5:39:ba:fd:d8:0a:73:6f:ca:e1:
09:69:4e:18:c4:3b:b9:7d:e5:db:b1:1c:a2:20:28:c7:68:7c:
8c:24:2c:50:e8:67:87:e4:8a:d2:f4:c7:87:88:e4:3a:69:f9:
f3:8a:ad:9e:70:62:9e:14:5c:f1:8d:8f:b2:4f:af:f2:a7:bb:
4b:97:93:b8:06:79:cf:98:27:e7:95:bd:9b:91:07:7f:b8:0d:
0f:89:03:98:ee:41:bc:c5:e1:d1:6c:7e:a0:e1:3b:3c:87:59:
92:12:b9:4d:04:54:ba:5e:2a:ae:c2:06:ba:89:c9:2f:a1:8f:
40:c5:dd:bc:7b:7d:ed:b5:8e:e5:cb:fc:a6:07:41:b1:b5:f1:
d6:dd:cd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:21:07 2025 by rpki-client