Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
File: RK3etuoTlfaY9C51Qa70kkJiX2I.mft (raw, json)
Hash identifier: EvGuBp20eL8B4vr3I/aSn86fD77mMdL3tTNAeYey7AM=
Subject key identifier: E3:B1:4D:27:32:68:5A:2D:0D:81:2B:63:A9:8B:5B:88:1E:A3:ED:9D
Authority key identifier: 44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62
Certificate issuer: /CN=44addeb6ea1395f698f42e7541aef49242625f62
Certificate serial: 019643D69B6C2E36B94350F5C93D1DC40B8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
Manifest number: 14F2
Signing time: Thu 17 Apr 2025 13:00:59 +0000
Manifest this update: Thu 17 Apr 2025 13:00:59 +0000
Manifest next update: Fri 18 Apr 2025 13:00:59 +0000
Files and hashes: 1: RK3etuoTlfaY9C51Qa70kkJiX2I.crl (hash: 3MdMjaMIZc/H+uGk1yckg6NBBrOU4SMttZWgGjfNqBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:9b:6c:2e:36:b9:43:50:f5:c9:3d:1d:c4:0b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44addeb6ea1395f698f42e7541aef49242625f62
Validity
Not Before: Apr 17 13:00:59 2025 GMT
Not After : Apr 18 13:00:59 2025 GMT
Subject: CN=e3b14d2732685a2d0d812b63a98b5b881ea3ed9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ed:bd:8f:1f:29:fa:07:e6:63:f2:07:62:5b:
dd:f9:b2:7e:13:bf:34:7e:37:d8:51:58:e8:57:f8:
12:c3:dd:b5:ee:25:e2:b4:d7:41:4e:5a:43:de:ed:
b2:0f:49:a3:64:d0:ce:55:93:6c:7d:06:63:fa:12:
6a:95:3e:bb:e8:ee:fa:b9:42:33:d4:b0:93:0f:3c:
0c:78:ed:de:b8:bc:03:97:af:b0:21:43:b8:2d:79:
b6:ba:b4:38:89:86:8f:d2:b1:99:1b:27:ff:d2:7c:
8b:c4:6d:ca:3f:4b:1f:ce:01:23:a0:23:70:e0:c7:
c4:e2:89:50:2b:37:aa:bf:61:c7:4c:4a:c3:e1:29:
3e:19:cb:05:c2:99:0d:ef:e7:10:1f:2e:0a:fa:f5:
5a:62:41:14:4e:e2:a9:b1:11:84:31:ed:3a:6c:71:
28:fc:34:05:e9:b6:bd:1c:6b:44:4a:7b:e5:55:1b:
41:09:cb:ad:c6:15:53:eb:72:37:21:62:64:3f:8a:
e8:ba:1f:ef:7b:88:53:6e:fb:54:a7:05:b6:d8:19:
c8:52:cd:37:cf:16:91:5d:26:65:ab:3d:87:3a:a0:
3a:5e:df:7b:80:af:2a:ac:c9:f9:93:c4:f0:58:39:
69:95:ca:1a:6e:c7:e5:67:be:c2:6c:e9:8a:3b:bf:
01:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B1:4D:27:32:68:5A:2D:0D:81:2B:63:A9:8B:5B:88:1E:A3:ED:9D
X509v3 Authority Key Identifier:
keyid:44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f2:3a:e1:19:69:7b:80:4c:e4:42:a3:5a:5e:24:b5:79:5e:
d5:54:22:0d:6e:b4:ae:ab:42:1c:a1:4e:25:a7:8b:b8:ac:3f:
14:5b:12:5b:0c:d0:06:14:48:99:c6:65:b5:38:b7:14:ea:4e:
d9:d1:4c:f9:39:2a:52:24:33:7e:12:22:f6:40:9b:e7:45:ad:
f0:3c:bf:0f:60:d4:7a:65:be:81:3e:2c:3c:67:64:7b:ff:1a:
36:6f:f4:ca:6e:6c:2e:6b:1d:db:ea:ac:1b:70:c6:fb:d7:87:
57:33:9d:20:2f:50:ab:b4:6a:20:a2:a8:23:3b:ed:f7:bc:3f:
74:c6:d1:32:fd:73:ad:60:4e:19:a4:32:7c:9f:23:0b:a0:03:
ea:05:5d:c0:97:2e:bb:c7:11:58:a0:ed:5d:c1:55:07:fd:67:
d9:c3:54:19:ca:0a:dc:9f:c8:46:15:4c:63:81:4d:ff:e3:a7:
99:3d:24:af:84:cf:6f:7f:29:81:70:2e:2c:f9:be:a9:93:b9:
30:41:a3:4b:2f:34:43:72:43:92:61:9d:ad:0e:3a:d2:ea:9c:
dc:ea:59:b7:79:e7:8d:fb:6a:a8:3d:5d:c6:af:f5:0a:ea:d9:
c7:88:2d:bb:d4:b6:6f:ed:0c:6a:9d:68:6a:75:ef:3b:31:6c:
22:53:85:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:50:28 2025 by rpki-client