Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
File: 3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft (raw, json)
Hash identifier: 4Mkj79GsGYA9rROxCzOFp7HWpBrG2qUroirUs6VGlXw=
Subject key identifier: 23:93:35:ED:7F:0C:AE:7D:B4:DE:A1:43:B8:2A:6F:75:6B:7A:5A:A1
Authority key identifier: DD:70:C5:F0:9B:62:68:32:92:FD:91:09:E6:94:71:35:90:28:1F:8D
Certificate issuer: /CN=dd70c5f09b62683292fd9109e694713590281f8d
Certificate serial: 01964A46427C4663B7EEFC4B648C63743B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
Manifest number: 14F5
Signing time: Fri 18 Apr 2025 19:00:40 +0000
Manifest this update: Fri 18 Apr 2025 19:00:40 +0000
Manifest next update: Sat 19 Apr 2025 19:00:40 +0000
Files and hashes: 1: 3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl (hash: Eu247nc/KZg3bvKGrIPSgZaQeG1VSjyNe8JtjM8K0+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:42:7c:46:63:b7:ee:fc:4b:64:8c:63:74:3b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd70c5f09b62683292fd9109e694713590281f8d
Validity
Not Before: Apr 18 19:00:40 2025 GMT
Not After : Apr 19 19:00:40 2025 GMT
Subject: CN=239335ed7f0cae7db4dea143b82a6f756b7a5aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:0a:c4:fe:be:27:9a:8b:13:6a:84:e0:00:
51:bc:c5:70:f9:ba:1a:b3:34:4d:d2:ac:d9:be:5f:
d8:46:b0:aa:1a:50:45:c2:b3:01:99:a1:c7:35:f4:
7d:42:2f:7a:3b:1b:d7:c5:59:25:d8:20:59:24:2f:
63:b8:06:1e:38:cb:0e:62:7a:c4:2b:2a:aa:9f:b2:
4a:ab:0f:f0:9e:de:43:f8:45:66:65:57:75:bc:d7:
5f:3a:2c:8e:74:33:2e:39:ab:e1:25:df:2d:0e:02:
8e:5c:91:79:81:b3:65:79:a5:dc:fd:d6:c9:01:36:
61:c9:00:30:e4:47:e0:cd:9a:08:15:3f:10:64:53:
c8:c3:c7:44:de:50:24:3b:94:b6:a3:a6:90:f7:0b:
fa:4b:6b:93:48:13:6f:25:cd:21:5c:d2:87:c0:2c:
f1:7c:9d:85:c7:11:de:51:6c:a2:76:d6:1e:56:64:
ab:b4:b6:f6:5e:95:14:73:2c:58:9f:b0:65:9e:50:
40:a7:96:65:b1:f6:af:fa:37:31:63:be:47:1d:32:
cf:9d:61:d5:f0:99:b3:aa:50:17:86:65:32:93:ad:
25:50:b5:de:02:e3:22:73:78:f4:c8:b6:77:bd:8a:
c7:8e:2d:cb:8f:3b:54:52:96:8e:a5:8a:f2:84:22:
22:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:93:35:ED:7F:0C:AE:7D:B4:DE:A1:43:B8:2A:6F:75:6B:7A:5A:A1
X509v3 Authority Key Identifier:
keyid:DD:70:C5:F0:9B:62:68:32:92:FD:91:09:E6:94:71:35:90:28:1F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ea:ca:fc:6d:fb:70:da:f7:11:bc:44:8f:9d:87:4d:53:7d:
92:2b:2f:d9:2e:88:5e:e8:42:11:8a:2e:6a:44:7a:41:c1:1c:
17:59:e3:0b:3b:d3:bb:51:a7:16:36:27:ea:fc:c8:38:f4:a4:
93:ad:6a:ef:d5:a6:ad:62:25:9a:4a:7f:c7:a6:3b:bb:3e:a1:
3b:39:dc:02:a6:eb:df:ce:51:c3:65:0d:7b:62:ee:c9:95:7c:
58:06:39:f2:06:a8:6d:84:3e:83:cd:28:96:ea:0e:c9:fa:d0:
c6:6b:1f:27:34:d4:15:80:b0:44:9f:24:5a:c8:97:44:a5:9c:
cc:9e:83:cd:6b:f6:38:35:f8:e3:c0:64:e8:72:b5:dd:a0:ba:
9a:e8:75:53:2b:04:cc:c6:67:b8:7a:ee:0a:e9:c1:17:fe:fd:
56:80:b6:d8:db:bd:b9:ad:51:7e:42:7a:f6:fb:55:2d:df:6f:
88:8b:4b:bf:bf:96:45:05:4f:89:dc:b9:5e:05:52:4e:54:d4:
79:2f:0b:25:5c:59:a5:ce:c3:12:69:d9:32:1b:59:18:5c:ee:
26:5b:fe:f2:b4:f2:81:9a:ef:a8:c6:73:f5:f3:e8:f0:6b:14:
86:d5:94:46:68:d9:40:ce:63:db:27:a8:01:ac:0f:1d:21:5a:
3e:23:14:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:33:11 2025 by rpki-client