Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: TBO5U/sD03LiHoJWDkl4cj4Dr0EGxKd66LDggbW3y/w=
Subject key identifier: BB:1A:29:20:36:70:1F:5B:48:3E:08:7F:AD:49:EF:10:E9:08:BE:77
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 01965011D98279C6CF0ED1B5B2F3B3A3336A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 03E2
Signing time: Sat 19 Apr 2025 22:01:09 +0000
Manifest this update: Sat 19 Apr 2025 22:01:09 +0000
Manifest next update: Sun 20 Apr 2025 22:01:09 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: z6SuIzSefDA3cM1/UTaW16w6sufSGePzSaoZRXValnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:d9:82:79:c6:cf:0e:d1:b5:b2:f3:b3:a3:33:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Apr 19 22:01:09 2025 GMT
Not After : Apr 20 22:01:09 2025 GMT
Subject: CN=bb1a292036701f5b483e087fad49ef10e908be77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:4b:aa:e7:ad:af:fc:d6:59:a2:49:4b:1b:
43:60:51:06:04:9a:eb:43:da:00:a7:53:47:ea:b2:
1d:16:47:5a:f6:f1:e0:ae:d2:24:12:42:3d:84:2f:
39:9d:ba:20:24:3a:92:8a:2f:94:9e:31:b3:4d:21:
35:59:dd:83:b0:0a:ef:53:eb:a2:69:67:2a:28:1c:
03:bc:7c:bf:e8:74:58:3f:87:b3:28:57:8e:2c:10:
ae:af:ed:bd:7e:1c:6f:95:a0:5c:2e:11:67:ec:8c:
6e:77:26:9b:e7:2f:9b:0b:f4:9d:2e:a3:5a:62:6b:
71:76:f0:28:a6:da:38:55:2b:74:7a:31:d1:7b:11:
ea:71:e3:c0:c1:e9:c6:6d:55:e1:bb:de:60:20:7c:
ce:61:f2:e0:a8:36:41:d7:bd:3c:cf:31:be:26:c6:
c8:81:14:0d:0c:59:61:0f:6e:bc:c4:c1:26:c5:65:
5d:d2:1e:e2:0d:f6:ef:88:6a:b8:9a:e8:65:da:8b:
a3:27:1a:df:f7:86:b9:9b:9c:02:2c:c9:85:36:a0:
24:e5:15:39:ba:31:82:ac:59:37:7e:9c:5f:a6:f9:
c9:87:9f:b0:7a:a7:e5:a1:e8:1a:24:8f:98:8f:2f:
10:21:d3:0b:c3:bc:9e:25:ff:78:18:f4:84:8d:1c:
45:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1A:29:20:36:70:1F:5B:48:3E:08:7F:AD:49:EF:10:E9:08:BE:77
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:42:49:e7:aa:66:42:23:f5:c2:59:3b:d3:0c:5c:87:35:0a:
5c:9a:84:d9:47:55:fa:97:9e:21:ea:4d:53:b8:a6:99:2c:bf:
d9:83:af:d2:ca:8e:b5:71:f7:44:3b:4b:c3:47:79:02:39:af:
86:5e:dc:a7:6a:74:b3:fc:3b:84:87:a4:19:07:ef:8a:66:27:
6f:36:b6:6d:68:4d:4b:fe:95:04:17:04:d7:c5:38:e5:65:83:
fb:ce:8c:58:ad:8a:d6:bf:19:c2:e8:68:fb:1a:b1:51:9f:a4:
94:86:bd:68:c3:b1:76:0d:e4:97:0b:ed:4c:f9:77:3a:ef:40:
c8:e2:9c:20:0c:36:b8:54:3b:ce:f4:99:ea:7e:78:0d:31:37:
ca:3b:e3:f7:33:db:2f:17:ba:e2:fa:28:c0:11:9a:5c:83:1b:
12:a0:8e:de:d1:a9:3c:ba:9b:dd:6f:85:f2:bf:12:07:31:f0:
03:b5:f0:ed:89:d6:92:57:7b:d3:72:ba:35:16:4a:5d:0b:2f:
db:12:64:e6:c4:9b:b4:f2:6d:24:3e:23:b7:0a:04:b5:1a:03:
6f:01:74:f6:b4:b3:fa:32:3d:65:ec:03:d2:1e:99:08:94:e4:
a2:0b:5f:bd:05:59:17:a5:1c:0f:68:50:ac:5d:90:90:c5:e7:
93:fd:b4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:23:12 2025 by rpki-client