Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
File: 3hItFywTsVKR5B-UVoFSWCb--JI.mft (raw, json)
Hash identifier: xep+xIMUAFowhoLwg6KbjFbNB4noXq/immawgHlxUTM=
Subject key identifier: 81:4A:81:F5:95:FE:49:E7:37:E7:83:8A:A4:0F:72:CD:95:1A:73:B2
Authority key identifier: DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
Certificate issuer: /CN=de122d172c13b15291e41f945681525826fef892
Certificate serial: 01965CBA33E914B73D5456E0061BE3CEEA1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
Manifest number: 0E5F
Signing time: Tue 22 Apr 2025 09:00:28 +0000
Manifest this update: Tue 22 Apr 2025 09:00:28 +0000
Manifest next update: Wed 23 Apr 2025 09:00:28 +0000
Files and hashes: 1: 3hItFywTsVKR5B-UVoFSWCb--JI.crl (hash: O2o7b6KFvT/SVTJvEw0miCcBs0zZ/xk61G7+qyIm0j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:33:e9:14:b7:3d:54:56:e0:06:1b:e3:ce:ea:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de122d172c13b15291e41f945681525826fef892
Validity
Not Before: Apr 22 09:00:28 2025 GMT
Not After : Apr 23 09:00:28 2025 GMT
Subject: CN=814a81f595fe49e737e7838aa40f72cd951a73b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:fc:5d:aa:bd:ab:1c:4a:d0:2b:7e:94:ff:
14:13:ff:97:76:7b:ce:3d:8e:56:8c:bf:e9:f6:bd:
ea:16:dc:f4:31:de:26:a4:53:e5:ae:77:86:a9:44:
64:f8:36:7d:34:82:dc:0e:34:d4:1d:0c:1d:61:b4:
91:62:8b:46:a1:52:0f:57:1b:3a:b8:5d:ee:47:46:
1a:df:96:29:1b:7f:05:78:73:e1:29:9b:3e:53:9d:
36:15:6e:c1:c5:62:46:96:76:fc:6f:5a:57:52:57:
81:f7:f3:a6:d9:11:3f:f9:62:67:f0:0a:32:9e:2b:
cb:b6:48:e8:d4:c9:a4:e8:ce:2d:c0:9e:06:be:01:
b6:2e:1f:8e:22:29:6a:64:8e:1e:9b:64:b3:60:52:
25:48:90:f6:c1:72:85:8b:08:3a:89:5f:c9:50:48:
1d:5d:ee:24:ca:2b:9f:f9:de:11:1c:a6:3b:42:cf:
d7:bb:f4:ef:8c:d5:a7:db:e6:80:5f:f0:12:6c:1f:
34:87:9a:77:54:df:45:e1:e1:eb:6b:d0:c2:d6:df:
c8:95:71:aa:d5:aa:1c:0f:cf:65:86:e3:a4:e0:1d:
f6:6d:af:1e:f5:4a:da:e2:b5:91:e4:31:b1:29:e2:
b2:9e:d2:37:d9:91:37:71:97:b3:70:2b:31:a1:d3:
5e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4A:81:F5:95:FE:49:E7:37:E7:83:8A:A4:0F:72:CD:95:1A:73:B2
X509v3 Authority Key Identifier:
keyid:DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bf:69:7b:c4:7a:b6:75:bf:37:f4:1b:21:7d:f9:63:06:ce:
33:4d:f9:2d:07:14:05:08:b9:df:78:49:1f:fb:d0:0b:ce:1d:
b4:31:35:25:0a:41:8f:8f:38:6d:ca:ac:06:dc:3e:91:5d:e5:
81:c2:89:4e:f9:68:2f:c5:c7:28:b9:e8:de:8a:14:69:a1:0a:
f0:16:0d:b3:4a:90:e0:4d:11:cd:1d:50:d4:ce:90:cd:8a:ba:
be:f1:aa:6c:f5:88:9f:a4:0a:a1:c7:0d:a8:da:35:f7:86:f2:
74:ce:1c:b5:02:44:53:47:86:06:e8:63:a5:30:92:e4:17:a6:
04:21:e1:af:7f:85:06:2f:ac:2b:68:c2:5a:3b:bc:56:21:9c:
b1:80:4d:6b:00:02:2c:79:d2:45:5d:8c:c7:29:e6:db:d8:32:
ca:ad:ee:ae:25:59:59:47:fd:fd:e8:59:f1:6d:8e:90:24:fe:
49:ea:8c:48:71:1b:48:60:e9:6b:a4:3a:fd:f2:6f:1b:ae:6c:
30:8d:51:81:8a:20:6c:03:bb:e3:9d:b4:21:d3:4e:13:7e:c0:
48:00:38:8c:40:0a:3c:4f:2b:41:60:a6:c7:7a:ef:de:f4:e8:
f2:98:2d:73:3d:64:9d:ee:40:12:7c:9f:6f:6f:98:94:af:d0:
bb:7d:b2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:19:37 2025 by rpki-client