Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
File: 3tRskpaCjJwCVTCqaEFgmt8FaaA.mft (raw, json)
Hash identifier: WclqjZYaMUr7Cd25EGO5ZfZ17Bh2NQA0l63rg1jNZio=
Subject key identifier: BF:3C:FC:25:04:00:5D:C7:FD:B6:21:94:71:1F:C1:F7:C7:31:F2:D9
Authority key identifier: DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0
Certificate issuer: /CN=ded46c9296828c9c025530aa6841609adf0569a0
Certificate serial: 0196564A3CE19C1E8D8A65CE14B36BB0A50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
Manifest number: 0216
Signing time: Mon 21 Apr 2025 03:00:27 +0000
Manifest this update: Mon 21 Apr 2025 03:00:27 +0000
Manifest next update: Tue 22 Apr 2025 03:00:27 +0000
Files and hashes: 1: 3tRskpaCjJwCVTCqaEFgmt8FaaA.crl (hash: eY3d/LUr0dtrx44ut4/ir11FAoSAS1s1swv1JS7gRZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:3c:e1:9c:1e:8d:8a:65:ce:14:b3:6b:b0:a5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded46c9296828c9c025530aa6841609adf0569a0
Validity
Not Before: Apr 21 03:00:27 2025 GMT
Not After : Apr 22 03:00:27 2025 GMT
Subject: CN=bf3cfc2504005dc7fdb62194711fc1f7c731f2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ad:fd:f7:d1:63:6e:6d:31:ad:fb:d3:fd:65:
05:cf:ef:4d:58:ed:ab:a1:44:52:f7:d5:21:ec:c3:
30:4b:ae:01:32:fc:ce:6c:b2:c7:df:26:1b:a0:3b:
51:c5:b0:4d:09:ff:66:73:fb:67:bf:8f:2b:4d:a4:
0c:c8:1c:2e:b1:7e:98:63:c8:4a:06:cf:ce:85:4f:
c4:b8:12:42:43:37:c8:bc:e8:5f:32:73:1e:ab:12:
d5:c3:a7:fd:0f:24:4e:d0:0b:88:46:1f:66:7b:29:
a1:1b:02:4c:67:18:71:a6:ce:24:a4:82:a9:90:89:
34:97:43:8d:68:ac:57:2d:d5:6b:22:ef:37:b0:57:
d0:3c:6c:80:4f:fe:36:35:d1:55:a8:9d:3c:f6:9d:
c0:d1:f7:52:93:6b:e0:39:82:d7:2d:94:5f:89:62:
04:7d:74:a1:a4:ac:9c:1e:5e:20:b6:2c:85:fa:c3:
90:1b:81:82:20:da:d8:58:78:7a:80:07:fe:79:e4:
60:7d:f1:4f:32:8d:44:53:b0:e3:cb:49:46:c6:bb:
74:a5:5c:1a:de:fd:e3:16:20:22:b8:0c:0e:bd:74:
67:f8:da:e0:48:e8:33:79:98:2b:8d:3a:b1:95:5b:
a0:ec:5d:d2:36:de:4e:a8:eb:54:91:a7:49:3b:39:
89:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3C:FC:25:04:00:5D:C7:FD:B6:21:94:71:1F:C1:F7:C7:31:F2:D9
X509v3 Authority Key Identifier:
keyid:DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:24:11:7b:e7:6e:10:09:34:16:6b:8c:54:b3:90:0d:39:a4:
7c:3b:02:d3:cb:c1:3f:a1:89:70:c0:29:5e:e1:43:e9:be:1d:
a4:9f:1a:4a:90:a6:ed:15:82:b9:1e:35:c1:6b:99:3d:86:fd:
9f:18:3b:50:36:f5:9b:ed:80:f6:56:60:58:01:57:5c:2e:a6:
05:65:ee:18:dd:6b:f1:59:a1:19:20:0a:40:35:bb:9a:56:2f:
43:86:2a:ff:02:51:58:db:8d:95:5d:98:a9:c3:13:96:76:6a:
14:94:69:20:6a:0c:94:03:02:9f:e1:4f:d8:70:73:c2:c2:53:
6e:64:76:82:28:28:19:30:55:1a:b1:1d:ef:42:8f:d7:7d:2d:
b1:da:dd:35:c2:ac:97:03:62:b2:c6:7e:18:cc:20:71:de:9c:
43:b9:5f:ac:a4:12:9b:03:a7:04:a4:38:4d:8a:89:15:36:82:
27:91:b8:b4:3e:7d:09:60:b0:95:50:f6:42:05:ad:b4:37:92:
01:7f:6b:e9:37:af:9e:5d:27:7b:80:95:60:8c:01:14:c1:31:
98:4d:a6:d5:e7:71:05:fc:3c:ad:da:b2:0a:3e:91:61:66:54:
e8:75:cd:70:26:f7:01:c2:6b:35:e1:ce:ac:f6:b3:4a:2c:19:
fc:8a:8f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:36 2025 by rpki-client