Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
File: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft (raw, json)
Hash identifier: awHlRO9Wng4PosK5cJ6HeVGIbNnen8yC5TstxoU7QbY=
Subject key identifier: BD:C5:81:8B:2C:E8:B2:05:4B:AF:21:37:F8:94:E8:08:BB:BE:19:A4
Authority key identifier: DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66
Certificate issuer: /CN=dd19b5047acc57dfdd2f87045764956f4b603066
Certificate serial: 01965914C9A2944AA4B5BDDFF849553AF7A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
Manifest number: 0C1B
Signing time: Mon 21 Apr 2025 16:00:56 +0000
Manifest this update: Mon 21 Apr 2025 16:00:56 +0000
Manifest next update: Tue 22 Apr 2025 16:00:56 +0000
Files and hashes: 1: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl (hash: JorOzRVp1e5bYHub/e8nlMSkjrxGksJ1Jvm0NQPOlWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:c9:a2:94:4a:a4:b5:bd:df:f8:49:55:3a:f7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd19b5047acc57dfdd2f87045764956f4b603066
Validity
Not Before: Apr 21 16:00:56 2025 GMT
Not After : Apr 22 16:00:56 2025 GMT
Subject: CN=bdc5818b2ce8b2054baf2137f894e808bbbe19a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ac:a5:25:ab:ae:5e:61:91:33:df:2c:dc:38:
a0:08:42:25:89:65:43:79:25:37:a5:e9:39:07:62:
44:d0:24:ed:b9:b8:2d:5d:b0:25:6e:2b:95:33:db:
32:cf:8b:db:61:ef:1b:5c:e5:ba:91:13:70:d3:1b:
cc:11:1d:8c:84:28:2c:53:4e:0a:60:f5:04:82:0e:
6b:21:b0:76:d4:d0:45:4a:3c:ea:cb:e4:5d:ea:99:
73:22:ac:f2:fe:28:fc:52:8e:f1:ba:6e:d1:70:b8:
e8:c9:0c:e0:36:d2:84:3a:fb:f9:0a:d6:4b:ff:f7:
88:82:24:45:49:4f:8a:79:df:fe:08:1d:43:57:06:
75:0a:51:d7:9b:16:b1:ec:c7:b1:b2:b3:67:1a:5d:
e5:7e:53:ae:d8:de:18:2b:c9:a8:6d:f1:18:b2:9b:
f3:ce:a6:63:d9:0c:96:ff:a2:30:68:24:53:3f:ac:
b7:cf:5f:70:27:61:06:1d:6d:c2:3b:1e:ef:c9:95:
5e:46:df:fa:0c:d9:a0:f0:50:58:c7:8f:16:09:6e:
c0:fa:91:e3:ab:f3:58:7b:60:d3:13:7b:ab:0e:63:
f5:23:e5:82:d8:0e:02:81:63:bc:ed:dd:56:d2:45:
c5:3c:d6:55:62:4e:65:b8:81:18:e2:4f:14:24:6e:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C5:81:8B:2C:E8:B2:05:4B:AF:21:37:F8:94:E8:08:BB:BE:19:A4
X509v3 Authority Key Identifier:
keyid:DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0f:3c:5a:d4:9f:e0:7c:e5:03:e7:be:76:31:a9:81:3a:50:
5f:07:9a:2e:9d:55:05:f5:e7:4c:36:59:20:ac:35:47:02:21:
21:b8:2a:02:ca:af:23:5a:6c:f9:f6:68:e0:51:58:0c:6d:46:
8e:1f:32:86:c7:28:c2:aa:17:87:27:ba:1e:ca:e3:56:09:bf:
3a:54:6b:14:27:0f:fc:e9:b4:b3:6a:0c:84:78:e9:f2:f2:c3:
09:ff:4c:9d:c9:da:99:ac:18:4c:6c:89:24:af:05:84:35:1f:
ad:94:d5:b1:05:6f:9f:79:12:31:d4:fc:1f:e0:45:7b:85:f8:
00:76:de:96:16:60:e7:8b:fa:d6:eb:e5:6d:0e:45:0d:24:bb:
7d:22:4c:89:87:38:dc:3b:57:e0:c8:6e:c2:31:9f:00:27:d7:
90:3f:49:cc:a5:4f:3d:6d:19:2d:10:1b:1a:24:88:28:29:b7:
28:da:79:e7:c1:9e:65:b8:cb:09:9e:1d:2d:f2:75:4b:cb:fc:
9f:95:02:7c:a8:39:7c:fa:60:0a:71:ba:a7:17:a3:12:ec:cb:
ec:12:99:2d:79:58:aa:06:a2:89:51:ec:04:40:d0:d6:87:53:
22:87:5f:0f:e3:3d:ba:85:52:cc:a6:01:e5:df:c5:10:7c:34:
ab:2e:8b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:32:06 2025 by rpki-client