Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
File: 3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json)
Hash identifier: nsLHtf6ucofgE5kOcBGDEqCkjzqXDzKcJVN5E9UvqbY=
Subject key identifier: 24:F1:8E:04:41:9C:4C:04:80:42:0A:05:A6:1A:80:85:EC:07:02:D9
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial: 01965493057E5FEE9D721A894375DD666019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 19:00:43 +0000
Manifest this update: Sun 20 Apr 2025 19:00:43 +0000
Manifest next update: Mon 21 Apr 2025 19:00:43 +0000
Files and hashes: 1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: 3HNdZtkBoOpDgwmdHUNTnflwIUqRONAPapjHaVgPQ6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:05:7e:5f:ee:9d:72:1a:89:43:75:dd:66:60:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
Validity
Not Before: Apr 20 19:00:43 2025 GMT
Not After : Apr 21 19:00:43 2025 GMT
Subject: CN=24f18e04419c4c0480420a05a61a8085ec0702d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:49:4e:16:01:48:e2:42:d6:5c:92:d4:5e:b9:
75:dd:97:d6:e7:88:e8:dc:fa:9a:a7:c2:9e:4f:7f:
0f:fe:3a:23:e0:77:83:cb:2c:54:58:69:6a:fa:f5:
06:b0:3f:08:24:22:6e:cb:0c:ff:60:aa:04:ce:12:
22:fd:25:c9:a8:77:04:c2:1c:07:3a:e6:e5:19:2e:
f2:c7:86:f4:a7:a1:31:e7:42:60:27:87:40:b0:96:
94:21:35:9e:35:cb:3c:93:de:3f:3b:74:04:0d:ba:
62:b6:bd:b8:20:7e:6e:1a:98:3e:60:5b:8f:94:1b:
8c:fa:23:04:75:44:e7:c1:d7:47:0a:6d:fe:f3:95:
60:79:a9:83:21:6a:81:86:7a:a0:10:1f:40:23:3a:
7f:b8:f2:01:71:99:5a:c2:08:80:e0:2f:80:b9:fe:
69:3a:e5:46:52:40:73:5b:ea:da:70:71:e1:b7:36:
18:ac:36:87:16:8f:09:76:0a:e2:91:44:cc:a4:36:
f7:38:da:4e:37:83:75:9e:d5:35:9e:0f:31:b0:c3:
5a:b7:b4:ae:20:80:56:79:c1:f2:70:4c:3d:53:59:
ea:52:0c:7a:4c:6e:4b:8e:69:fd:88:83:76:88:14:
3b:8b:52:8e:64:62:a0:79:dd:1c:55:e8:ba:e1:52:
45:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F1:8E:04:41:9C:4C:04:80:42:0A:05:A6:1A:80:85:EC:07:02:D9
X509v3 Authority Key Identifier:
keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fa:43:b2:00:62:9e:38:c1:fe:7d:51:71:da:2b:b5:ad:7f:
46:ac:80:4e:6e:d9:23:27:b1:cd:3e:d7:a2:b1:5c:f1:a3:de:
bb:c5:f0:87:0d:1f:28:7b:48:f9:46:2a:0b:e1:01:4a:21:ec:
47:8d:12:46:f8:3a:71:75:de:87:c8:eb:6d:14:05:27:04:88:
35:33:a6:4e:15:2e:37:c2:22:a2:55:b5:86:31:a6:aa:0d:db:
3a:fc:b6:a8:95:b1:b1:31:07:d4:c5:9d:9e:d2:05:0d:84:77:
95:d5:df:04:32:f7:ad:27:ea:ff:96:3f:1a:3f:e7:66:95:ab:
dd:08:bb:a6:1a:5d:0b:dd:c4:1d:8d:52:b9:9f:5a:f9:00:99:
3c:5c:f0:9d:ee:e5:06:06:43:18:f5:70:6b:99:42:9a:58:0a:
81:f2:81:f2:6f:6e:d9:00:6e:e2:ed:20:09:03:75:4d:d3:85:
5b:46:1a:b9:19:19:f0:30:0f:aa:35:45:58:3e:3e:04:8d:59:
74:99:be:60:18:4b:e6:e6:48:57:bd:88:63:9b:52:c0:b8:71:
d3:f0:b2:b5:f0:52:f0:5c:76:9e:78:b6:ee:9b:16:c9:7f:12:
40:41:ec:7e:ff:d9:85:21:01:bf:b6:e7:a1:f0:45:3b:50:10:
50:30:72:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:14 2025 by rpki-client