Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
File: sTSesOfbZTbKeYKWH_rJsykWXF8.mft (raw, json)
Hash identifier: Oz77WJUYavbx3pm5dA5CZvd0opRVnW6Gcv8P+gtb3qI=
Subject key identifier: 3E:C4:94:6B:C2:38:5F:83:34:35:37:C9:5B:1A:48:39:9A:6C:4A:3C
Authority key identifier: B1:34:9E:B0:E7:DB:65:36:CA:79:82:96:1F:FA:C9:B3:29:16:5C:5F
Certificate issuer: /CN=b1349eb0e7db6536ca7982961ffac9b329165c5f
Certificate serial: 01964EFEE8EED4C443D4787A4CD8A5D04E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
Manifest number: 01AF
Signing time: Sat 19 Apr 2025 17:00:50 +0000
Manifest this update: Sat 19 Apr 2025 17:00:50 +0000
Manifest next update: Sun 20 Apr 2025 17:00:50 +0000
Files and hashes: 1: sTSesOfbZTbKeYKWH_rJsykWXF8.crl (hash: acOYSE3PizulbkM3yRj2t9uGk0zBdn3OpYo3Uzm9rtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:e8:ee:d4:c4:43:d4:78:7a:4c:d8:a5:d0:4e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1349eb0e7db6536ca7982961ffac9b329165c5f
Validity
Not Before: Apr 19 17:00:50 2025 GMT
Not After : Apr 20 17:00:50 2025 GMT
Subject: CN=3ec4946bc2385f83343537c95b1a48399a6c4a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:c1:e9:4a:a0:b2:1f:1a:d8:64:a9:84:b5:
bb:e3:3c:8e:ab:70:9e:b3:fe:f1:74:67:c1:e7:b1:
93:ec:3e:b4:c0:1a:4b:fd:d7:8d:71:67:04:03:1a:
67:18:0a:b0:72:03:6e:83:1f:d6:3e:9e:11:15:98:
1a:04:1d:11:6e:88:69:52:8f:82:04:d2:57:94:38:
3e:40:38:f2:fc:40:1d:a8:ea:38:63:b3:8b:eb:16:
49:4b:75:41:fc:7c:1e:03:73:4a:af:bb:65:49:35:
6a:9e:d6:92:5e:61:b2:82:fe:ad:58:0b:48:ba:8a:
9c:38:43:97:40:ed:39:37:82:5a:f8:c2:82:0e:09:
d8:cd:04:a8:84:24:e4:39:b9:85:e0:f3:68:7f:06:
f3:b7:03:12:f3:2e:94:d0:92:cc:5b:13:08:f6:65:
a4:ec:d9:59:37:10:32:2c:be:f7:1b:12:b8:f4:4d:
a9:73:92:9c:bd:d9:6a:30:8f:49:39:cb:b5:9a:80:
b7:d3:48:ce:63:ed:1a:d2:8b:1a:6d:2e:e0:77:8d:
cf:64:c5:75:7e:d1:9a:8d:7c:4b:c2:92:14:e4:6e:
9a:14:05:0f:b1:7d:de:1f:a7:22:96:a4:f3:8e:00:
7f:b0:cf:8a:3e:a6:ec:bc:cb:d9:71:38:d7:49:ac:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C4:94:6B:C2:38:5F:83:34:35:37:C9:5B:1A:48:39:9A:6C:4A:3C
X509v3 Authority Key Identifier:
keyid:B1:34:9E:B0:E7:DB:65:36:CA:79:82:96:1F:FA:C9:B3:29:16:5C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:39:c0:d3:b7:1e:10:65:12:f2:22:6d:a4:04:a4:5e:8a:9d:
fa:f3:84:3f:db:2c:a7:02:72:17:74:80:31:dd:39:0b:de:7b:
81:8c:13:a7:43:4c:68:c2:69:d5:e1:90:ec:ad:c3:10:8c:5a:
44:d4:f7:9e:d4:5b:ec:96:c4:e3:68:63:ae:c3:f0:30:0e:25:
5c:e1:e7:5d:ec:2b:5e:8d:70:cf:f4:15:6c:1e:7d:36:ec:2a:
f5:f3:03:97:c2:45:94:df:61:97:90:5c:05:07:b5:4f:18:d2:
b2:85:91:a9:94:88:9d:ad:89:f0:37:79:7b:1c:8e:65:0b:8a:
00:91:b4:19:8a:43:43:75:74:bb:5a:0b:0d:ec:80:87:8c:a2:
13:da:86:b6:c9:47:44:20:3a:ed:3c:9c:1c:22:ef:c4:15:d3:
34:41:ca:cd:dc:eb:8c:b7:5e:90:9b:64:f9:5e:1a:41:c3:92:
f8:dd:8a:36:ec:3a:82:8a:e1:e0:91:e3:d4:60:1c:61:f3:b6:
0f:13:8a:ee:02:d9:50:0f:1c:ec:fe:96:1b:c1:39:d3:4b:78:
ee:d3:0f:d0:19:8d:4c:05:6f:6c:b7:8c:f3:2c:eb:2a:36:66:
a7:21:a1:79:40:ef:1e:ad:b5:00:26:77:ec:e7:1c:d1:b7:44:
8e:b7:42:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:31:30 2025 by rpki-client