Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json)
Hash identifier: ugk/osiMoVzNQqn1v8DXSm9SVglXHIlCdshCatxTPkQ=
Subject key identifier: 7B:8F:5C:BB:31:3C:D0:ED:48:44:7D:F0:21:99:6C:2E:13:36:EC:1B
Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Certificate serial: 019659EFD1A03414243E0EF488969C7269A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
Manifest number: 0BE0
Signing time: Mon 21 Apr 2025 20:00:10 +0000
Manifest this update: Mon 21 Apr 2025 20:00:10 +0000
Manifest next update: Tue 22 Apr 2025 20:00:10 +0000
Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: NxkHabxJQSEJGfKw9//kgkPmTvnJ50hkdZRgVMxK09g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:ef:d1:a0:34:14:24:3e:0e:f4:88:96:9c:72:69:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Validity
Not Before: Apr 21 20:00:10 2025 GMT
Not After : Apr 22 20:00:10 2025 GMT
Subject: CN=7b8f5cbb313cd0ed48447df021996c2e1336ec1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:4f:38:46:dc:69:eb:00:08:1c:81:c3:ca:
8a:34:56:69:e1:f1:f2:4a:7f:16:87:a4:8b:61:b4:
01:25:3f:48:6b:dd:7b:8d:9b:7f:2f:c9:1d:c1:62:
8b:5f:4c:af:6b:61:00:50:dc:d2:5d:25:c2:9d:55:
6c:df:ef:a7:6e:9a:e2:a3:66:4d:3b:46:74:43:24:
92:8b:61:09:eb:a2:67:10:aa:2e:0e:e3:df:93:d7:
99:14:1c:15:e1:68:16:cb:b0:47:96:61:e2:0a:fc:
ea:82:f1:c3:c3:c4:d3:ab:eb:88:18:a7:a1:2c:75:
11:48:f3:af:24:90:31:49:4e:4d:59:07:2f:b8:df:
fa:5e:27:d5:03:0d:1a:ed:21:97:5d:b8:fc:35:f2:
ba:ab:23:08:ce:87:d6:09:73:3b:15:aa:08:38:16:
c8:a6:9a:5c:56:b6:fb:98:2b:84:67:a0:36:ec:d5:
ad:79:bc:67:9d:31:e5:3b:3c:3c:d7:c2:fa:78:c5:
04:56:80:e1:94:0e:f8:51:22:bf:72:ff:29:33:17:
5a:c6:07:5b:70:2a:59:5f:9c:2b:ca:c6:44:63:95:
98:41:ab:bf:fe:25:98:d7:28:36:c0:48:40:3c:a7:
e6:dc:c5:4f:3d:98:10:bb:9c:00:47:0a:8a:cd:1a:
2f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8F:5C:BB:31:3C:D0:ED:48:44:7D:F0:21:99:6C:2E:13:36:EC:1B
X509v3 Authority Key Identifier:
keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:fc:df:ba:4e:a5:46:0c:b5:15:6a:91:21:2f:37:ac:cc:55:
15:df:e0:e4:df:3e:6d:9e:ca:46:e2:4c:30:f3:65:f7:a8:fc:
58:29:44:92:c5:3b:da:0b:36:d3:3c:bd:99:7b:e7:c7:5b:3a:
90:e6:36:8f:86:1f:1b:8d:aa:0d:76:ff:9f:c1:17:07:a8:07:
df:b9:da:56:44:2b:c8:6f:73:76:a1:0c:00:50:a0:99:38:f0:
fe:d2:a1:13:d8:d9:d9:44:42:4b:1e:69:fa:f4:3a:f8:35:b3:
5c:0e:15:e5:16:ce:87:a1:f5:ad:79:4b:ab:fd:e7:50:bf:5d:
27:50:1a:5b:06:ee:8d:cd:a8:d2:5b:45:f8:96:b3:cd:2c:cd:
70:70:1f:da:b7:1c:f0:e8:d1:87:fb:67:08:ba:2e:24:f3:a5:
4f:cc:6d:a6:fe:e9:45:44:03:07:f2:f3:1c:82:11:b9:d4:d2:
20:d5:4a:4a:b7:70:06:20:56:30:76:1c:37:fd:67:f4:a0:a7:
d0:a4:d9:76:e1:c5:03:6e:65:a9:5f:87:23:31:f5:5a:83:60:
b2:f0:8e:e7:43:00:03:d8:8f:f5:31:d5:82:1c:b7:b3:d2:cc:
df:12:cf:a0:80:10:74:f9:ab:f2:18:ff:5d:76:51:de:6b:23:
47:ec:24:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:16:32 2025 by rpki-client