Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
File: e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft (raw, json)
Hash identifier: YOTDCvg4xnpK13uKREzgEOuQl0WyhLK3MlMPbicb9k4=
Subject key identifier: BB:64:B9:BD:F4:93:9B:AF:F9:33:0F:C6:AB:B1:E1:E4:9C:E9:71:D8
Authority key identifier: 7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F
Certificate issuer: /CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
Certificate serial: 019653EE8034A14BDB72FE7B0BBA88726BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 16:01:01 +0000
Manifest this update: Sun 20 Apr 2025 16:01:01 +0000
Manifest next update: Mon 21 Apr 2025 16:01:01 +0000
Files and hashes: 1: e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl (hash: N553UJh4qHVTcs73BHOT4y2BYzIwJlFrSzsiJOhV1DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:80:34:a1:4b:db:72:fe:7b:0b:ba:88:72:6b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
Validity
Not Before: Apr 20 16:01:01 2025 GMT
Not After : Apr 21 16:01:01 2025 GMT
Subject: CN=bb64b9bdf4939baff9330fc6abb1e1e49ce971d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:4b:c9:93:d5:67:24:af:fe:9f:b8:16:22:
d1:db:47:c9:4c:11:5f:96:a9:5a:4b:a4:88:ee:da:
93:f0:dd:f4:62:bb:5e:fe:2b:52:74:31:32:9b:c6:
6c:13:22:c6:ef:44:27:47:af:4a:e8:40:a6:90:50:
ed:cf:ae:cc:14:4a:4a:35:5f:66:f9:4e:f7:fd:94:
ae:70:11:21:2f:b5:00:81:66:a6:9a:5c:2d:42:75:
15:08:a8:d9:61:62:b3:e5:e3:1a:40:6f:4e:de:6f:
12:7b:b9:91:50:73:34:76:fb:d9:04:fb:57:ef:e0:
d0:40:f5:7e:54:f6:d8:bb:d6:d6:b2:af:0b:2a:a7:
9f:f1:bc:db:e1:d4:3d:f8:46:d0:5e:3e:f3:a4:9f:
87:6b:37:88:74:3e:7e:55:5d:2a:ea:42:b3:8e:d7:
60:9e:d4:b4:2f:be:26:11:cb:7b:e0:ea:4b:b2:70:
63:6b:dc:ea:dc:12:5a:74:1e:32:69:f1:a9:bd:5d:
89:03:78:01:af:2a:ae:80:c3:7a:6d:e9:84:f3:e6:
45:b5:4d:e7:4a:63:eb:18:fb:5f:ac:ed:8f:88:fa:
66:a1:d3:85:9b:9a:25:fe:cc:8f:1a:d2:bd:d5:01:
42:15:d9:85:c1:5a:81:c9:aa:f6:02:bf:f2:5c:2b:
3d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:64:B9:BD:F4:93:9B:AF:F9:33:0F:C6:AB:B1:E1:E4:9C:E9:71:D8
X509v3 Authority Key Identifier:
keyid:7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:74:2d:e4:70:83:72:8b:71:72:05:97:0e:61:b0:ab:41:ad:
0a:41:73:3c:87:39:86:6d:54:73:c1:e1:67:d3:b8:b5:6a:8a:
b8:fb:3f:c4:70:39:91:f0:0b:8c:93:f2:d0:e0:1a:de:29:fe:
96:f8:08:ae:7d:36:bd:f7:b6:52:08:93:b9:0b:89:dd:49:11:
fb:ac:75:b9:23:9c:b5:bb:21:65:8a:db:e1:fb:fc:ab:7a:44:
61:c4:7f:40:ce:df:20:22:11:b4:5e:c0:2f:42:dd:9a:a3:73:
60:fc:85:e0:3d:4d:ca:00:09:86:ce:30:ce:3e:e7:d9:ed:ba:
92:7d:4e:88:bb:16:43:e9:c4:b4:4f:2f:75:a9:01:ae:1b:79:
d9:c6:82:e1:30:f9:cb:68:dd:ca:aa:54:7c:76:a6:f1:8c:73:
19:3f:20:1f:0d:f7:3c:af:90:89:74:ee:11:19:d9:be:70:fd:
ec:4e:75:4c:fd:01:e4:4f:83:5d:40:cb:4f:85:00:f3:7d:05:
b1:df:16:c4:f8:1c:cc:39:4d:ea:63:50:53:9d:69:ca:37:ac:
26:c4:e5:17:87:8c:cb:68:96:10:2e:3b:4f:06:55:a4:de:01:
23:7d:a0:63:f7:a9:1a:5a:ca:3d:98:d6:99:3e:3a:c0:00:be:
54:15:52:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:26:19 2025 by rpki-client