Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
File: _3CGjwwsIYdl-mtTq5rwZf8znwY.mft (raw, json)
Hash identifier: 2eYyM2AOVfaG4aNPK/y3iLCcoETDf2xMYoQ/284uKiA=
Subject key identifier: DA:66:4A:C3:9D:81:17:7E:EA:35:5C:58:ED:89:76:72:9E:21:5A:73
Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
Certificate issuer: /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Certificate serial: 01964D475C9B78F516D49F19A5199E402C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
Manifest number: 0C34
Signing time: Sat 19 Apr 2025 09:00:44 +0000
Manifest this update: Sat 19 Apr 2025 09:00:44 +0000
Manifest next update: Sun 20 Apr 2025 09:00:44 +0000
Files and hashes: 1: ReFijUPsIVT0JnrY05_yeSrYpfM.roa (hash: 6xv/Nzbw1MhH+laW+tJrBXU6SEJVZqBXBHHnSnM5yB0=)
2: _3CGjwwsIYdl-mtTq5rwZf8znwY.crl (hash: JoQx3cewhmwPk1fsOoAbWng4lZjCtmhY9JzrsoCpMMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:5c:9b:78:f5:16:d4:9f:19:a5:19:9e:40:2c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Validity
Not Before: Apr 19 09:00:44 2025 GMT
Not After : Apr 20 09:00:44 2025 GMT
Subject: CN=da664ac39d81177eea355c58ed8976729e215a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:58:48:2a:56:c5:8c:2a:28:7d:bd:b3:cf:a8:
66:84:4c:7f:1d:cd:d4:21:7b:ef:0b:47:14:8b:c4:
90:61:a9:5a:33:86:63:ec:64:5e:97:aa:c4:9a:3f:
1b:42:92:f9:85:e8:c5:93:75:b0:fe:41:62:8c:9b:
86:97:a7:32:75:1d:f2:db:66:6a:95:50:fe:f9:ef:
f7:67:01:8b:ea:ac:23:83:a2:02:8e:c5:b0:3d:94:
36:5b:c5:ec:79:5c:e7:07:9e:eb:23:42:78:3a:5f:
f2:b2:f8:e0:80:c9:4f:10:7e:31:6c:b7:d4:77:4c:
62:6d:92:50:f4:7d:0e:3b:8f:72:f8:d7:11:a2:ac:
92:00:ba:19:a7:94:54:61:da:22:a7:27:df:33:67:
03:9f:ee:59:ef:fd:02:3d:3c:2c:56:8c:f9:c5:7a:
28:dc:c8:f5:43:85:53:e5:4a:51:da:38:ab:41:d8:
51:74:a2:a0:e3:db:b9:fc:e2:6b:1b:ba:a7:11:98:
05:e2:5c:69:06:83:03:05:21:90:48:f6:d1:ce:5d:
95:fc:5c:df:7f:42:f4:b5:04:61:da:25:8d:5b:10:
df:f8:16:69:d8:cd:ac:ea:7b:d6:5a:3b:ed:d2:4f:
1f:89:f8:ed:0c:6f:27:c0:d2:71:da:6a:80:44:51:
f1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:66:4A:C3:9D:81:17:7E:EA:35:5C:58:ED:89:76:72:9E:21:5A:73
X509v3 Authority Key Identifier:
keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:54:8a:9c:14:82:41:df:d2:3b:fe:26:25:f1:43:4e:fc:dc:
4e:9b:a1:48:48:52:54:14:01:b8:03:87:92:96:9a:82:6b:15:
8c:11:48:cf:67:36:f9:7f:bc:ab:ce:77:02:6f:b1:86:da:2e:
cd:c8:c0:4f:9d:d6:ce:15:da:cd:ca:0e:88:7e:9c:83:3b:36:
14:c5:e1:ea:c3:ba:a0:15:84:c1:8c:23:21:88:80:0a:dc:a6:
1f:48:cd:c4:ae:3b:ca:9d:d8:b5:9d:d0:05:69:b9:33:ab:fc:
d2:fd:24:57:d4:6c:cc:57:c1:b7:42:94:22:0d:b2:d1:d1:f6:
d3:3e:42:bb:66:2b:4b:ff:fd:71:bd:65:90:54:dd:d7:a6:a2:
c2:3b:af:04:dd:49:d1:bd:bd:51:b0:09:4b:1d:db:80:2a:4e:
3c:27:28:fc:c0:e8:91:66:ab:f2:29:38:3e:6d:17:2e:e6:41:
ff:d6:b2:6e:ce:e0:38:5e:17:0d:8a:7f:c4:74:46:0e:21:1b:
65:cc:75:15:f6:d8:8a:9b:b9:e8:7b:4a:fc:15:6c:d8:91:35:
be:f4:b6:ba:03:4a:17:83:97:c7:9b:e3:66:34:25:85:8a:07:
42:f2:f8:a3:81:ad:26:fc:4b:2e:34:c6:cc:20:10:95:e6:dd:
bf:c9:0a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:12:22 2025 by rpki-client