Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier: GDdPxDeyyMWjVi6ZK0LBXgAR9e8mQLchr22M39qNMq0=
Subject key identifier: E5:AC:55:CC:89:1A:70:73:3B:00:29:D7:2B:ED:89:82:EA:2B:C8:99
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial: 01960C7A919322CA0E98B11568BAE702DA3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number: 14DC
Signing time: Sun 06 Apr 2025 19:01:21 +0000
Manifest this update: Sun 06 Apr 2025 19:01:21 +0000
Manifest next update: Mon 07 Apr 2025 19:01:21 +0000
Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: L/nk/lTpjA1fNXsLu9CPu5H+S+Lw8DsWgfBAP5D8uI8=)
2: LeVlE50f0Ju2qE5HiH8sJRUEJoQ.roa (hash: YkmmjhKIKefN9QDN1GswscCa/vvv++M927O5HzFWEpg=)
3: O-XPeQu-YyLqAWSz1Ih5K-O-Zn4.roa (hash: qt91w+3/S+Ea26JEVNOvOodxAMoUk0pySpCeuSElj44=)
4: RonOUjE1P34U6vbbFs9w9AsGyN0.roa (hash: fOrx68LqSTvTWV0sMnHRK4WODfXfA787GTb+IyVk3b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:7a:91:93:22:ca:0e:98:b1:15:68:ba:e7:02:da:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Validity
Not Before: Apr 6 19:01:21 2025 GMT
Not After : Apr 7 19:01:21 2025 GMT
Subject: CN=e5ac55cc891a70733b0029d72bed8982ea2bc899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6d:ff:ce:3b:65:9f:95:6a:f6:b5:54:bf:e7:
f0:56:93:79:82:bc:3e:b8:5e:ce:5c:12:19:fc:48:
d0:27:7a:b3:36:3f:7e:9d:38:fc:c3:ed:e6:c2:ae:
e5:2c:a3:a8:5a:9f:17:0b:81:d4:75:80:de:fa:54:
a4:ca:de:94:a1:a2:34:0e:cd:18:ba:3c:a1:64:18:
06:a0:88:ef:b0:8d:80:25:47:12:b5:36:3a:2c:02:
0c:c1:64:68:7e:20:7a:c7:3b:07:c4:91:13:53:2c:
32:0b:3f:61:0f:9d:2b:59:56:d8:d4:c8:f8:df:0e:
63:c4:02:db:e0:82:f7:e3:c7:37:50:be:34:4d:aa:
a0:14:02:ad:23:db:b0:3d:c3:2e:7e:50:cb:f7:d7:
aa:9b:03:66:f2:ef:67:5b:ec:d0:84:55:05:c0:6b:
22:cd:e5:71:0c:04:e5:47:44:0e:b5:af:e6:5e:73:
79:93:df:b3:78:b7:2b:a7:fc:a8:28:cf:4b:4f:80:
3d:ae:3d:3c:e5:da:56:39:bf:ab:f9:f9:e8:bf:1e:
a9:93:65:21:f5:bd:9d:aa:bc:63:38:9b:e0:48:fe:
17:e3:53:c8:fe:c3:b4:2b:1a:30:e5:b2:72:40:ff:
d5:65:22:4f:cd:06:d1:1e:2e:c8:0f:de:36:c7:4a:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AC:55:CC:89:1A:70:73:3B:00:29:D7:2B:ED:89:82:EA:2B:C8:99
X509v3 Authority Key Identifier:
keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:60:58:9c:09:a8:35:5f:43:d9:04:e3:a5:c2:f6:28:b8:8d:
9f:b2:ff:3f:fc:9e:2f:92:3b:3c:98:76:7d:8a:49:bc:89:f6:
90:8f:ee:43:d7:9a:f2:af:63:4c:12:61:8d:9f:c2:5b:6f:94:
c7:07:e0:07:20:c7:cc:4f:18:e8:3b:49:9f:06:9e:47:eb:64:
1c:82:ae:d6:6b:79:da:41:70:32:6a:1e:10:1c:54:63:df:6a:
4b:3e:03:df:3d:28:a2:29:bd:3b:a1:e5:d1:cf:a2:ce:14:40:
b2:a4:19:2d:47:9f:31:9a:bd:eb:74:16:af:36:17:c1:75:bd:
54:d6:9e:8e:c3:fe:1b:95:e2:72:c0:5a:35:ad:08:db:77:96:
5e:63:7d:fe:ee:75:9a:fc:1c:7e:bf:ed:f7:98:4a:26:ff:d0:
bd:ff:49:04:42:19:94:52:02:6a:e2:fe:d3:0c:e5:37:4c:45:
cc:54:18:cb:c0:2c:6f:21:23:75:81:aa:ad:7b:37:0e:93:00:
41:d3:ac:47:3f:94:67:ba:88:44:c6:43:05:a4:a1:8b:73:bf:
1f:0a:7e:35:c9:79:b6:ee:c4:e6:cd:19:9e:64:a7:c0:bf:08:
92:f7:97:cd:16:66:a9:cd:eb:a9:78:e5:03:08:e1:f6:c0:5b:
4c:71:e4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:28:06 2025 by rpki-client