Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.mft
File: t38R7tTnnIXMxWLfPR8oPjOdou0.mft (raw, json)
Hash identifier: c0vf/jbIWoxq2AN8bvlaBYHHL9f32nmzekX9MtbNmUo=
Subject key identifier: EE:2B:96:14:19:D5:ED:57:18:AF:26:32:9F:CB:78:C9:F1:AF:A0:7D
Authority key identifier: B7:7F:11:EE:D4:E7:9C:85:CC:C5:62:DF:3D:1F:28:3E:33:9D:A2:ED
Certificate issuer: /CN=b77f11eed4e79c85ccc562df3d1f283e339da2ed
Certificate serial: 01965B02A05B1EC598BA543852E733FD5CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t38R7tTnnIXMxWLfPR8oPjOdou0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.mft
Manifest number: 0BA3
Signing time: Tue 22 Apr 2025 01:00:20 +0000
Manifest this update: Tue 22 Apr 2025 01:00:20 +0000
Manifest next update: Wed 23 Apr 2025 01:00:20 +0000
Files and hashes: 1: t38R7tTnnIXMxWLfPR8oPjOdou0.crl (hash: sZ1RsmLkD4hrV1hGJsfP+FCFlozRIMFseAKF3R4FXj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t38R7tTnnIXMxWLfPR8oPjOdou0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:02:a0:5b:1e:c5:98:ba:54:38:52:e7:33:fd:5c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77f11eed4e79c85ccc562df3d1f283e339da2ed
Validity
Not Before: Apr 22 01:00:20 2025 GMT
Not After : Apr 23 01:00:20 2025 GMT
Subject: CN=ee2b961419d5ed5718af26329fcb78c9f1afa07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:67:48:4d:2e:2e:cf:f3:80:7a:8a:9c:6d:
5f:38:89:cb:3e:bf:e9:44:df:ed:21:c8:ea:0f:68:
86:93:b6:5f:a7:63:47:e2:d5:70:8f:5a:21:00:e1:
7b:ab:4a:3b:f5:c8:d4:c7:83:fc:bc:85:39:0f:be:
06:81:b5:24:88:67:d5:41:e6:fa:dc:11:0c:ae:70:
1f:36:0e:31:01:2a:a4:f8:56:a5:01:b0:ab:0b:5f:
2b:2d:ae:c5:9c:43:20:1a:10:ae:3c:11:96:b5:68:
74:63:d9:bf:de:04:74:81:dc:8b:fd:ad:03:50:32:
1b:82:e6:97:33:dc:6d:a0:8a:2d:9b:66:4c:9c:f2:
ef:93:98:67:fb:d4:d6:29:c4:ff:26:09:9a:3e:b6:
d6:86:8a:c2:04:b3:2b:e5:ba:e3:c6:2e:d4:a1:b7:
3a:25:ee:74:8a:44:ab:8a:6e:f0:28:55:80:e4:20:
16:86:31:e5:b3:67:3b:a1:7f:cb:47:f6:69:c0:7a:
1a:56:20:32:70:22:be:04:cd:57:bf:a7:ae:5a:96:
6a:a4:e4:16:69:d0:92:e3:d8:3f:4b:66:64:35:10:
06:2d:0a:f1:04:a7:39:53:56:95:dd:4a:98:57:04:
b2:cf:7a:74:bc:60:2a:08:f7:45:4b:d5:78:00:de:
31:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2B:96:14:19:D5:ED:57:18:AF:26:32:9F:CB:78:C9:F1:AF:A0:7D
X509v3 Authority Key Identifier:
keyid:B7:7F:11:EE:D4:E7:9C:85:CC:C5:62:DF:3D:1F:28:3E:33:9D:A2:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t38R7tTnnIXMxWLfPR8oPjOdou0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:c8:ff:0c:e5:ef:c7:02:da:aa:23:b2:17:c1:09:81:91:26:
b8:a1:22:b6:76:13:6f:d3:f1:a6:a6:2e:bb:29:3e:48:6c:0b:
d1:48:e1:8c:a4:db:b2:19:1a:64:f9:a8:a0:ab:a9:68:9d:bc:
bc:1c:07:6c:3d:13:44:b5:0a:bd:a0:30:60:7c:af:6d:14:07:
35:24:3b:af:04:3e:31:04:e6:73:88:2e:1d:3f:ae:df:63:58:
4f:d0:3e:25:a1:8c:f8:ea:4c:60:8e:ba:8f:ee:61:f7:0f:71:
25:f3:91:5c:9c:48:f5:9b:ce:b9:f2:8a:95:d5:ea:fc:7d:89:
2d:fc:2a:3e:81:ea:c9:32:36:ed:05:b1:9d:c0:05:4d:9a:22:
3d:10:05:65:7a:30:05:2d:ec:c8:a2:ab:7d:ad:d1:89:cd:3c:
a9:c3:c5:a7:33:38:41:06:ed:7c:90:5e:eb:32:f1:02:e8:ec:
13:2d:99:4d:da:66:fd:d9:11:33:a4:c6:ce:b5:d6:0b:f3:92:
34:ee:65:41:57:63:78:72:a5:f3:d2:63:96:16:67:3a:a6:cf:
46:69:bd:c9:15:63:92:13:c5:68:6b:20:01:53:3b:88:27:cd:
f8:d1:fc:af:51:2f:02:e1:1a:51:5f:e3:54:9d:f1:f1:61:f8:
12:5d:5e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:19:02 2025 by rpki-client