Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier: MsOlxuuo9b6R+DjAiVFriiaoeX6oeNkRPxbm3j/zXMY=
Subject key identifier: C0:64:53:0D:61:4A:CE:6D:48:F8:BD:B2:91:CC:A4:C6:69:83:4E:8C
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial: 0196531231115804BE1375097D6DAB234AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number: 0D18
Signing time: Sun 20 Apr 2025 12:00:22 +0000
Manifest this update: Sun 20 Apr 2025 12:00:22 +0000
Manifest next update: Mon 21 Apr 2025 12:00:22 +0000
Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: XuEwbbSf/cyP/kQ2Um+ydcbw2LPuWG9FI/jYJuYKlxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:31:11:58:04:be:13:75:09:7d:6d:ab:23:4a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Validity
Not Before: Apr 20 12:00:22 2025 GMT
Not After : Apr 21 12:00:22 2025 GMT
Subject: CN=c064530d614ace6d48f8bdb291cca4c669834e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:56:a9:e9:de:ce:24:a9:5a:a4:8d:b2:d9:
4f:17:64:d9:66:79:45:9b:84:e7:88:c8:66:76:13:
0e:45:42:14:3b:64:4f:06:85:b3:74:24:42:9a:ac:
b1:18:1d:e2:19:29:9c:dd:2a:24:9d:da:cc:ff:10:
f9:49:2b:a6:59:5f:75:9a:c8:7b:67:84:c7:b5:56:
cb:fb:82:24:31:99:a3:56:1a:13:87:4f:91:da:67:
4f:f9:d8:1d:23:6e:b2:f3:31:27:95:aa:4e:bb:da:
d8:cf:a1:b1:79:96:46:85:74:bb:07:a7:1d:e5:37:
ba:e6:a6:a2:c9:d2:64:dc:5d:dc:37:3f:d1:90:13:
3e:4c:10:f5:4e:3a:77:96:4b:b8:ab:9a:8b:d5:98:
d4:e3:bd:fe:06:ec:6d:d7:7a:ba:40:b8:9d:8c:f3:
c3:8e:d2:e0:24:73:18:bf:98:dd:7b:7f:e4:14:55:
3d:b9:b7:2c:72:49:2b:84:c8:0c:1b:4d:81:ee:7e:
f1:e9:2e:9c:10:57:c3:2b:5d:05:67:3b:b7:fc:73:
19:19:d5:d4:f1:53:65:2e:58:16:c0:36:82:1b:ed:
0e:65:ab:18:53:0d:d5:71:20:bd:c8:6b:b0:4f:ef:
77:2c:d8:99:89:71:51:f6:e9:96:dd:a3:53:97:01:
cf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:64:53:0D:61:4A:CE:6D:48:F8:BD:B2:91:CC:A4:C6:69:83:4E:8C
X509v3 Authority Key Identifier:
keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5b:ad:14:b6:a1:8c:1a:30:62:c2:64:a7:c3:88:63:fa:58:
62:56:e0:f7:6f:b6:ee:eb:81:e5:c2:c6:5d:b0:f4:40:c9:04:
01:36:c0:c0:93:ce:7c:8b:f9:90:12:d5:9c:f7:f4:99:fb:a7:
d4:39:74:09:bb:83:73:e9:33:bc:77:40:79:17:1d:d1:54:57:
e7:fb:1c:fa:f1:8c:58:53:80:5d:58:2b:c3:62:8c:18:b1:c2:
a5:6d:a3:63:48:65:cd:48:fc:f1:4b:6f:8a:5c:47:0d:45:06:
14:3b:03:72:68:c2:40:8a:a0:b5:ae:1d:df:35:f7:e5:a3:68:
49:af:82:a2:97:ad:42:35:1f:d1:00:32:b7:84:55:61:c4:d3:
ba:65:c1:71:44:8e:5e:99:d7:0b:ee:d6:a1:88:ff:e3:30:70:
a0:cd:41:d0:c4:e5:9e:56:a4:f2:3f:4e:01:ea:5b:b2:e7:68:
8f:22:b1:05:a2:cc:6c:54:1a:2e:a5:9a:5e:b4:c0:8f:f6:1b:
e7:63:6e:7b:4b:c4:e3:fe:cf:90:81:4f:e0:c7:89:52:ec:db:
2d:21:74:1d:84:9d:a5:b4:92:fc:6b:a4:e9:44:9d:7a:ca:32:
2a:0e:2d:d6:8d:89:b4:14:52:0f:5f:e4:71:a7:04:e3:72:9a:
ec:7b:7d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:03 2025 by rpki-client