Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
File: x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json)
Hash identifier: JJnnxi1dwBWxwNZM5lXGURQQlaN07pNMere9Qdgh37k=
Subject key identifier: C1:AD:9E:4A:05:6C:FF:D7:9E:08:87:F3:50:85:E6:EC:4B:3D:41:B0
Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
Certificate issuer: /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Certificate serial: 01964DEC957FC5E1A91A371E64D4B55F6560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
Manifest number: 0532
Signing time: Sat 19 Apr 2025 12:01:12 +0000
Manifest this update: Sat 19 Apr 2025 12:01:12 +0000
Manifest next update: Sun 20 Apr 2025 12:01:12 +0000
Files and hashes: 1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: hQ+IfIRmieLJ0Bcp6sdsSlAJVooYyB9RlBVQWgndd1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:95:7f:c5:e1:a9:1a:37:1e:64:d4:b5:5f:65:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Validity
Not Before: Apr 19 12:01:12 2025 GMT
Not After : Apr 20 12:01:12 2025 GMT
Subject: CN=c1ad9e4a056cffd79e0887f35085e6ec4b3d41b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:44:7e:70:90:61:10:81:e3:c8:3a:20:88:
70:c5:f9:d9:38:df:0c:69:b3:ad:56:d5:bb:81:67:
3a:8a:26:64:cc:56:b0:24:d8:b9:c2:e6:8a:1e:fa:
6a:cb:bd:5a:79:d0:97:2e:67:c2:44:c7:bc:57:f5:
5a:85:ee:32:c2:12:ba:56:fe:66:34:16:9b:86:09:
88:56:c4:51:b1:4b:31:ff:4f:3f:18:e5:03:9e:73:
92:5f:91:ef:38:e9:5a:16:c7:2c:bd:8e:0a:dd:c5:
82:e7:d1:34:2b:b5:9b:38:16:2f:15:ce:9c:ae:ab:
09:80:e2:b4:5a:0b:dd:71:09:8b:e4:d8:b2:dd:ce:
b2:59:fa:6a:f9:4b:e0:bb:7a:41:19:11:84:59:70:
3c:35:68:f5:cc:76:9f:88:6b:18:59:42:42:03:4e:
40:03:3e:9e:3e:50:7d:fd:d7:fc:c6:88:6c:61:95:
a5:7f:64:15:58:d5:e6:39:d0:26:27:04:5b:46:0a:
64:10:8a:47:c9:50:60:b5:77:0b:91:13:4b:3f:36:
93:ee:16:45:ed:85:42:47:79:af:b5:a4:72:62:3e:
b8:9a:6a:f1:0b:e5:0e:79:e2:6e:03:c5:41:1b:6f:
21:77:59:7b:c4:19:86:46:19:9e:65:11:e7:c9:d3:
0b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AD:9E:4A:05:6C:FF:D7:9E:08:87:F3:50:85:E6:EC:4B:3D:41:B0
X509v3 Authority Key Identifier:
keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:bf:26:15:60:ad:64:c2:dc:99:9c:11:60:67:6e:f2:bd:e5:
ea:f9:f5:0e:00:14:4a:29:4a:95:e2:90:49:ee:2e:a5:f0:09:
b6:82:fb:94:26:c0:6d:81:1f:a0:e6:8a:bc:2e:67:8d:c7:25:
50:80:e2:2d:22:01:30:d4:f2:7f:0c:9f:ea:a0:23:ae:8c:0d:
c2:24:f2:1c:12:31:05:08:74:9b:8e:d2:32:5b:b7:5c:04:88:
47:34:0f:55:d4:f8:8f:18:59:13:3e:4c:64:2b:b3:6a:8d:18:
1c:bc:d7:56:1c:77:f9:74:96:6b:e8:06:13:58:a7:a1:de:d8:
df:14:4a:28:4e:b1:fe:83:bc:b9:3f:0f:48:c3:43:92:9d:9c:
f2:d4:79:01:9e:02:bb:03:e5:5b:4d:89:87:4d:21:8b:8f:3e:
8a:9b:3b:3f:53:a9:97:00:24:d2:83:13:43:63:78:fa:89:9e:
f8:24:96:df:8e:23:03:96:ae:cd:5a:13:a2:29:88:70:0a:cd:
18:25:a2:10:9f:cf:38:8d:97:b6:8c:56:84:29:21:e7:9e:30:
5a:f8:18:bf:fd:b1:02:ce:a1:19:43:be:cc:bf:c6:61:ba:dd:
09:ec:d7:d9:42:74:8d:fa:b3:13:26:05:fe:d4:fb:64:30:13:
ab:95:53:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:22:47 2025 by rpki-client