Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
File: cs3rVmQuM1iXcef9pxu3HgF_nZY.mft (raw, json)
Hash identifier: aXmYzZNpgP+5kWas6BFRSSoqWZeWxeLpdsIS2ZjxcrM=
Subject key identifier: 59:6B:9D:2B:EA:F3:30:C4:F9:F4:EE:22:A2:9D:5F:04:DD:F8:C9:0F
Authority key identifier: 72:CD:EB:56:64:2E:33:58:97:71:E7:FD:A7:1B:B7:1E:01:7F:9D:96
Certificate issuer: /CN=72cdeb56642e33589771e7fda71bb71e017f9d96
Certificate serial: 01962BCE5733C32881AB582B9D3041624084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
Manifest number: 0A06
Signing time: Sat 12 Apr 2025 21:01:04 +0000
Manifest this update: Sat 12 Apr 2025 21:01:04 +0000
Manifest next update: Sun 13 Apr 2025 21:01:04 +0000
Files and hashes: 1: cs3rVmQuM1iXcef9pxu3HgF_nZY.crl (hash: FI7uS+sDkWSPDxYEXIapbsyrnj9si/QDql4sgKSAVt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:ce:57:33:c3:28:81:ab:58:2b:9d:30:41:62:40:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cdeb56642e33589771e7fda71bb71e017f9d96
Validity
Not Before: Apr 12 21:01:04 2025 GMT
Not After : Apr 13 21:01:04 2025 GMT
Subject: CN=596b9d2beaf330c4f9f4ee22a29d5f04ddf8c90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:d4:71:73:4a:bb:a3:66:31:47:ca:23:da:
0e:34:03:ea:86:80:81:b7:aa:f4:85:a1:3b:75:be:
cf:a4:37:31:33:b8:99:b4:1e:54:fe:00:49:3b:2c:
5e:d5:c1:a6:ca:7c:7a:6d:9e:ec:85:ec:13:c2:6c:
ff:41:e3:20:26:77:f7:c6:6f:3b:a5:c5:e1:24:cc:
bd:14:01:7f:7a:9c:82:25:c0:fb:39:a9:4c:d9:9c:
ec:bf:a8:23:71:7d:25:8f:d7:01:c9:40:be:99:88:
5c:62:bf:d8:ab:75:a4:22:6e:35:3b:fd:b2:1d:ab:
36:17:35:a7:8c:24:9e:f8:97:e5:77:42:27:1c:62:
4d:60:d4:3c:37:d4:9f:8a:a1:cd:43:ea:65:ca:39:
00:09:a0:66:51:2f:f0:30:de:eb:96:b3:12:c6:84:
b1:f9:c8:64:56:f6:aa:3e:46:43:24:59:ee:59:0d:
de:03:e9:e7:20:92:7d:6f:cc:57:11:c5:65:76:8c:
da:fd:a5:cb:11:96:b4:b7:6e:84:0c:22:3c:7c:7f:
a2:c3:a6:ea:e5:83:5e:a6:de:10:8d:72:35:92:f3:
f9:e5:2c:09:67:c2:f1:6b:bb:e7:b8:e5:99:78:67:
66:4c:93:ae:02:49:b0:8d:4a:5e:05:8a:b7:4d:b3:
4e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6B:9D:2B:EA:F3:30:C4:F9:F4:EE:22:A2:9D:5F:04:DD:F8:C9:0F
X509v3 Authority Key Identifier:
keyid:72:CD:EB:56:64:2E:33:58:97:71:E7:FD:A7:1B:B7:1E:01:7F:9D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:57:1f:69:d6:59:ae:4d:d6:40:1d:cc:9f:dc:54:b8:31:88:
47:37:80:39:4b:b1:d4:e4:41:52:a2:ff:dd:63:bf:1a:4c:6b:
8c:80:7f:67:89:68:ad:aa:d5:50:60:3e:4a:6b:29:0a:6d:b5:
0e:9f:3c:66:52:89:2d:e0:85:c6:68:07:eb:7b:87:2e:66:36:
c9:ad:99:42:79:ed:de:44:4b:4b:03:f6:6e:9c:a5:3c:cb:15:
5b:87:8a:4d:3e:bd:48:b7:1d:48:24:92:fd:e9:3d:49:65:43:
40:21:47:51:30:b2:ab:8c:92:04:15:c5:47:18:41:05:79:49:
92:e7:ab:a5:26:05:d6:69:7e:78:48:c5:df:69:6c:4e:f5:4d:
a8:d7:6d:e6:14:fd:37:12:dd:85:bb:2a:af:3d:75:8a:5d:42:
89:ca:c9:43:bc:94:0f:0e:69:27:7a:c7:cb:0f:32:fd:be:17:
a6:db:a7:bb:38:03:47:ee:f9:ae:b4:c4:cf:26:17:d1:d5:1d:
7d:33:bd:d6:02:0f:93:0a:64:9c:b1:3d:e7:e7:67:1b:23:37:
bf:bf:f2:88:2e:99:3f:6e:62:83:57:96:9d:d7:1f:1b:9d:3e:
7a:74:66:bf:3e:77:30:4a:11:7e:49:94:af:29:2a:ce:8e:84:
7d:e5:da:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:38:53 2025 by rpki-client