Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
File: 3kK6kvCUZ8GIi16eNEiVB0SweYE.mft (raw, json)
Hash identifier: QJXcUzY5ovLHr9DJ+oU5rHufi9M1tPF10rX7CvRRypM=
Subject key identifier: 5C:9E:4E:11:02:52:16:CB:88:DF:BA:97:F7:93:1E:CA:63:59:D4:DE
Authority key identifier: DE:42:BA:92:F0:94:67:C1:88:8B:5E:9E:34:48:95:07:44:B0:79:81
Certificate issuer: /CN=de42ba92f09467c1888b5e9e3448950744b07981
Certificate serial: 01965725E477D8C4A4B369F4F04353253562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
Manifest number: 0F6E
Signing time: Mon 21 Apr 2025 07:00:23 +0000
Manifest this update: Mon 21 Apr 2025 07:00:23 +0000
Manifest next update: Tue 22 Apr 2025 07:00:23 +0000
Files and hashes: 1: 3kK6kvCUZ8GIi16eNEiVB0SweYE.crl (hash: CBvFJOQyyCE9GvBAPYmaxiiYhjjCArFv06o06a48h1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:25:e4:77:d8:c4:a4:b3:69:f4:f0:43:53:25:35:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de42ba92f09467c1888b5e9e3448950744b07981
Validity
Not Before: Apr 21 07:00:23 2025 GMT
Not After : Apr 22 07:00:23 2025 GMT
Subject: CN=5c9e4e11025216cb88dfba97f7931eca6359d4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:63:03:c9:e4:04:fd:55:34:57:6d:34:41:
3a:45:62:dc:b0:f1:90:d2:f9:cc:14:54:a7:f3:26:
b6:ee:93:ee:9a:26:cb:6c:b9:65:1e:b2:b1:eb:c0:
8b:fe:1c:af:f5:7e:12:e1:20:5e:32:40:ea:05:d8:
8e:91:fd:95:6a:11:09:5f:44:e2:e8:18:a5:6e:be:
99:47:aa:90:2a:48:64:ca:0a:05:95:80:5d:9d:6a:
8a:15:5f:85:32:63:3d:bd:9a:9b:6c:35:18:d4:ce:
2e:ec:9d:de:c1:24:f6:4f:42:70:ce:87:66:4b:9a:
ca:2d:1e:ff:be:9b:02:51:35:a0:90:4f:cf:aa:e1:
f6:c5:6c:4e:5d:29:0e:e3:9e:c9:4d:36:8f:88:53:
8e:a3:2a:ca:21:c1:2b:1d:9d:20:5f:79:7c:7d:92:
55:28:fe:cd:48:8c:b3:15:e7:0c:74:b4:5a:4b:2b:
d0:30:d6:90:30:60:27:ae:9f:97:e2:d6:64:7a:a0:
7c:7a:ca:9e:dd:29:3a:e1:51:96:e2:3e:b1:f7:21:
a7:50:42:dc:8b:d2:01:19:dc:94:58:91:d1:a6:3e:
95:31:35:fd:b7:bd:ae:08:ed:6a:c5:42:33:af:34:
a0:b3:9f:87:b8:d9:23:ed:9e:93:31:e1:23:17:9c:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9E:4E:11:02:52:16:CB:88:DF:BA:97:F7:93:1E:CA:63:59:D4:DE
X509v3 Authority Key Identifier:
keyid:DE:42:BA:92:F0:94:67:C1:88:8B:5E:9E:34:48:95:07:44:B0:79:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ca:24:90:fe:be:92:dd:8d:87:8c:2a:76:ab:fe:2d:d1:7f:
bd:a5:74:42:99:71:59:93:48:78:f4:44:35:40:ae:3e:36:59:
06:42:7c:af:73:80:3c:1c:b5:e5:ab:71:0d:e3:12:45:8a:96:
74:48:45:0b:2d:4c:44:8f:d4:53:0c:5b:1c:a8:f5:93:41:64:
c5:fa:0b:64:36:e1:28:69:22:7c:a9:40:c2:a5:0f:6b:55:6e:
d7:81:ed:3e:37:e7:f5:fc:3b:9b:ec:e3:8e:99:f6:f7:9a:b3:
3d:47:2b:73:3f:91:7a:53:90:da:16:ce:f7:f6:52:ca:5c:8a:
83:bf:23:d2:15:80:4b:09:be:c9:13:92:6c:02:25:cd:b9:05:
2c:a0:f4:a2:dc:72:f7:a9:e3:62:5b:e8:f1:dd:94:51:b6:06:
b7:81:23:57:fc:c7:b2:ea:64:23:78:73:b9:2f:93:08:fb:74:
2a:ef:ca:65:5d:5b:a9:2d:1c:0c:3f:50:78:2d:79:33:fa:94:
80:bc:2b:4b:e5:f3:0a:d9:50:d4:8b:af:65:fb:0f:48:1c:be:
c4:48:be:e4:01:3b:c2:f1:bb:f3:68:6e:67:c8:65:9a:0b:5b:
c1:49:7d:75:ed:07:95:eb:e6:b7:42:fa:eb:06:9f:71:ac:a4:
bb:41:8d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:42 2025 by rpki-client