Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.mft
File: 36U2RiiDKd9mVeJT5WsihIG-lZY.mft (raw, json)
Hash identifier: TNdV/4nX3VGWd5ohKwmh9tB9ni0A2SbphZN6YNmACoo=
Subject key identifier: 85:46:01:C0:A7:77:03:14:C4:59:FC:FA:1D:73:35:EF:85:DB:62:15
Authority key identifier: DF:A5:36:46:28:83:29:DF:66:55:E2:53:E5:6B:22:84:81:BE:95:96
Certificate issuer: /CN=dfa53646288329df6655e253e56b228481be9596
Certificate serial: 01965B02BE047A1ECAA669AC58378460934F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36U2RiiDKd9mVeJT5WsihIG-lZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.mft
Manifest number: 01A3
Signing time: Tue 22 Apr 2025 01:00:28 +0000
Manifest this update: Tue 22 Apr 2025 01:00:28 +0000
Manifest next update: Wed 23 Apr 2025 01:00:28 +0000
Files and hashes: 1: 36U2RiiDKd9mVeJT5WsihIG-lZY.crl (hash: UMuEhznNz0hOReaCZ+T57gIUZhDlqkzCk1WfvrFMsu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/36U2RiiDKd9mVeJT5WsihIG-lZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:02:be:04:7a:1e:ca:a6:69:ac:58:37:84:60:93:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa53646288329df6655e253e56b228481be9596
Validity
Not Before: Apr 22 01:00:28 2025 GMT
Not After : Apr 23 01:00:28 2025 GMT
Subject: CN=854601c0a7770314c459fcfa1d7335ef85db6215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:fb:1d:78:f3:96:05:f3:8f:0a:73:42:ea:
e9:50:8e:13:3f:b4:6a:26:7f:97:47:ad:cc:9d:b9:
05:25:1c:97:65:85:48:dd:f0:29:e9:d7:48:9e:8d:
43:86:8e:65:20:a2:93:27:15:10:08:aa:9c:98:fa:
70:76:6b:b6:6f:9b:32:40:93:ef:13:5e:b7:9e:69:
3a:f5:4b:ed:30:3f:58:73:ee:d1:a7:44:9c:4d:01:
ae:06:6d:b4:96:0f:84:cb:2d:49:32:5c:a8:2c:32:
e1:dc:3d:6b:b7:20:af:ce:cd:9d:f8:56:33:1e:a0:
06:73:19:83:c8:11:55:6a:f3:26:21:9b:c9:ce:ed:
93:af:3a:8c:a6:71:45:b9:f6:04:f6:6d:c6:60:e2:
08:36:f8:74:7a:7e:1d:f6:ce:64:df:6e:e8:1b:cf:
70:45:08:3f:25:77:01:69:90:6f:bd:69:3c:6c:53:
7a:e1:61:9d:44:79:1f:46:85:d7:6b:51:8f:2f:d2:
94:39:2a:bb:29:b6:80:85:c9:61:2c:02:d2:a0:50:
f9:d4:e4:94:e9:5a:1e:40:b6:3a:57:4c:c4:ff:ea:
7c:c2:05:1f:c6:f9:91:0a:32:c4:47:99:36:fa:b5:
3f:65:a5:0d:c5:9e:38:9a:ae:63:2f:17:44:6d:29:
74:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:46:01:C0:A7:77:03:14:C4:59:FC:FA:1D:73:35:EF:85:DB:62:15
X509v3 Authority Key Identifier:
keyid:DF:A5:36:46:28:83:29:DF:66:55:E2:53:E5:6B:22:84:81:BE:95:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36U2RiiDKd9mVeJT5WsihIG-lZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:85:df:fc:b0:db:f1:7e:de:be:30:da:6f:d9:b4:81:b8:fd:
ad:73:4f:b5:c9:3d:8c:9b:da:13:95:47:8c:fd:ab:5a:fd:94:
91:b8:ec:94:3f:d9:d6:6c:02:0b:bc:dd:d7:a6:37:17:90:f4:
08:9f:a4:cc:4f:f7:09:3d:0c:ae:17:03:30:ef:69:45:27:2b:
95:1c:a0:f0:87:59:03:7b:dc:a2:bd:2c:54:1c:17:52:54:c0:
2b:7e:e4:65:f4:52:4a:d9:ac:73:f5:de:d6:82:28:c9:79:29:
90:8e:f3:c7:5a:9f:92:f2:11:bb:fe:aa:2d:a4:34:31:ff:39:
87:dd:21:6d:73:31:16:a1:de:53:d8:b9:19:e1:cb:7a:85:f0:
30:c5:75:e9:b9:0f:8f:b3:60:9b:83:7d:b0:7a:d2:e1:87:f1:
ed:cf:9a:a1:8c:43:3c:0e:2a:2c:04:9f:4f:c4:b0:0d:4a:c5:
e5:b9:5a:4d:f9:95:87:c8:a2:43:fd:9b:cf:90:c0:cf:85:7d:
06:96:6e:aa:75:db:03:70:a7:4a:d2:2b:f5:c0:98:4a:58:d2:
6c:53:f1:24:d0:00:43:42:6a:b5:95:49:a6:74:ae:b9:70:c6:
23:3a:e7:b7:1b:50:1b:4e:5e:44:56:a8:1a:39:d8:3c:68:99:
ff:95:15:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:15:19 2025 by rpki-client