Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
File: R37BXKT5JNlmlnVFEk9lUxDSyXM.mft (raw, json)
Hash identifier: wSt8DC2Qpron0MPrGUzNlgVpUZeusLIaXS6mf1jGDI0=
Subject key identifier: 10:98:DD:53:93:F0:66:9C:0D:2A:9F:6D:26:AD:95:7A:35:21:40:CB
Authority key identifier: 47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
Certificate issuer: /CN=477ec15ca4f924d966967545124f655310d2c973
Certificate serial: 019654932DD7229FB3B8D1D2D094ED1B3DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
Manifest number: 045D
Signing time: Sun 20 Apr 2025 19:00:53 +0000
Manifest this update: Sun 20 Apr 2025 19:00:53 +0000
Manifest next update: Mon 21 Apr 2025 19:00:53 +0000
Files and hashes: 1: R37BXKT5JNlmlnVFEk9lUxDSyXM.crl (hash: xsPhMq+FIFeURFlOlV2D1+4RZX1GnF3u+1IiqVuuh7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:2d:d7:22:9f:b3:b8:d1:d2:d0:94:ed:1b:3d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477ec15ca4f924d966967545124f655310d2c973
Validity
Not Before: Apr 20 19:00:53 2025 GMT
Not After : Apr 21 19:00:53 2025 GMT
Subject: CN=1098dd5393f0669c0d2a9f6d26ad957a352140cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:ea:4d:ae:dc:74:5d:a8:39:e8:29:32:9c:
fb:ff:ec:e9:7d:2f:91:2d:9e:1e:f2:98:84:99:3d:
b7:aa:44:f9:33:e4:de:09:5d:01:d6:ff:7c:64:b1:
b7:3c:84:2a:07:49:b6:b9:fa:f3:48:27:dd:f9:f5:
b5:55:c8:49:bb:10:54:d2:cb:20:ec:5f:5d:55:b1:
f5:0b:8b:10:f7:47:bd:70:39:45:5e:24:97:16:4e:
0a:86:3f:18:47:69:d9:e5:c0:24:27:15:ae:0a:fc:
63:8c:af:81:61:e0:83:44:98:fc:98:0a:26:38:31:
84:62:9c:9d:ae:63:ab:9e:61:25:59:d0:46:a1:49:
5b:80:66:5d:3b:bc:9d:b6:ba:46:d2:0f:6d:dd:ee:
b4:f9:94:00:08:0d:cc:a0:8e:f8:29:60:6f:06:8e:
8a:c7:9f:66:84:f8:ad:96:af:d9:39:6c:f1:4f:7a:
74:4f:2c:aa:74:79:da:cd:2f:f0:da:14:8c:70:5f:
a0:0e:30:6d:ec:54:12:39:bc:fc:fa:b9:8e:39:e7:
80:61:8c:80:3f:2a:f1:cd:3a:5b:3a:88:ef:75:27:
da:f2:b2:34:87:14:60:e0:ed:69:2b:3b:5c:4c:3c:
17:6d:2a:7b:1e:c0:6a:54:9b:3c:4e:61:10:52:8d:
a2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:98:DD:53:93:F0:66:9C:0D:2A:9F:6D:26:AD:95:7A:35:21:40:CB
X509v3 Authority Key Identifier:
keyid:47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:af:0e:52:36:00:8b:05:6e:0b:cf:f0:1d:b4:f6:50:03:44:
86:0a:93:d7:e9:9e:12:87:c6:29:3a:ee:06:95:49:e6:1a:96:
34:de:0b:93:c5:22:8c:34:42:18:63:03:b8:db:6c:8e:d2:9f:
8d:5c:b8:f6:69:2f:3f:9c:d1:eb:19:00:35:f2:fe:e7:fe:91:
cd:a4:47:28:ac:61:08:0a:52:6c:98:d8:73:c9:c4:87:c4:31:
9c:da:cd:f9:11:41:15:74:b3:b2:bb:c7:f2:09:71:e1:5d:a4:
9e:7a:c8:92:c9:19:db:d9:f4:ce:8d:5d:66:20:8b:4d:79:e3:
dd:5c:be:17:9c:22:e5:eb:43:97:3a:43:58:4f:2e:b1:bc:5d:
f1:54:db:37:94:63:f7:40:a4:fe:8f:12:83:0e:ac:95:2a:3e:
fc:f1:87:9b:51:15:a6:dc:35:31:59:b8:94:80:2b:cd:a1:13:
95:15:fc:84:c0:38:e2:16:c7:28:cb:30:b3:95:23:c7:69:6a:
73:fa:9b:70:79:d4:d2:69:11:1b:a5:01:51:f1:ba:3d:36:ff:
a1:55:5c:e7:74:0d:74:3a:c5:d5:a4:84:e8:38:4c:cd:36:b0:
0d:aa:4d:d2:30:26:95:96:2f:81:e0:f8:92:1f:c6:2d:5b:cf:
e8:26:6c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:29 2025 by rpki-client