Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier: vp9rl55WQpBgnJpw+XRZCjK1QCUwOpn11l9lnoWBBKY=
Subject key identifier: B2:D1:98:08:27:23:93:E4:E2:EB:56:CC:A2:33:FB:F8:30:BD:7E:78
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer: /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial: 01965537A301DE310DC3708E1D61175D8F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number: 0BE3
Signing time: Sun 20 Apr 2025 22:00:31 +0000
Manifest this update: Sun 20 Apr 2025 22:00:31 +0000
Manifest next update: Mon 21 Apr 2025 22:00:31 +0000
Files and hashes: 1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: 97vGoj6tRLuSCRsKrnNzlhs6XYeSLyQzR2eh6IUT4AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:a3:01:de:31:0d:c3:70:8e:1d:61:17:5d:8f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Validity
Not Before: Apr 20 22:00:31 2025 GMT
Not After : Apr 21 22:00:31 2025 GMT
Subject: CN=b2d19808272393e4e2eb56cca233fbf830bd7e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:21:0a:11:db:72:9e:c9:36:23:74:5c:2c:
59:ea:c5:97:06:00:6d:21:ab:4d:ef:96:78:69:84:
29:2e:a0:0a:62:c6:e5:3b:89:68:f8:7b:27:79:75:
79:3c:85:90:6a:37:c2:5d:b2:45:e1:29:d0:5d:60:
44:2c:d2:dd:f4:3a:09:84:65:47:5b:52:fb:55:3b:
d5:bc:46:cb:77:9c:9e:c8:ac:86:9b:01:8e:0c:3d:
4c:d5:39:8c:3e:c2:1d:39:5f:e5:dc:f2:97:f8:fd:
8e:fc:b2:f0:dc:62:1a:ba:9b:dc:f3:1b:a8:12:85:
5e:ae:01:fe:18:cc:fa:7a:f5:3f:2f:3a:27:47:96:
c5:da:5d:0e:c2:53:41:0d:a5:1c:a3:d4:0f:ad:17:
2d:a2:c3:9a:03:b8:e5:ec:86:05:c0:75:c3:73:11:
5a:2c:27:21:c3:47:6a:70:65:c5:50:a7:53:86:81:
7a:e2:4f:d5:e3:81:6c:5b:0f:d3:98:14:bd:ff:04:
3a:27:b9:de:33:04:52:65:bf:f7:2b:9e:fd:ce:6f:
c6:34:7a:0e:fd:71:32:4d:8c:76:a1:e0:9e:f8:c4:
a4:c4:a4:eb:f6:3d:bd:dc:4d:f9:f4:2f:2f:71:39:
2f:7c:b7:42:80:3a:03:d7:e1:bb:70:a7:1b:c9:8a:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D1:98:08:27:23:93:E4:E2:EB:56:CC:A2:33:FB:F8:30:BD:7E:78
X509v3 Authority Key Identifier:
keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a6:63:bd:22:d1:97:6d:17:4c:ea:eb:f8:53:52:67:93:1f:
ae:06:06:a3:c9:87:dc:32:16:9e:47:a0:6d:71:bc:f4:9c:61:
d7:54:32:e1:49:55:0b:d1:01:ca:9e:5a:aa:8f:27:bb:1d:01:
be:23:4c:c5:66:dd:ee:67:96:c9:8c:be:d5:61:e8:f3:6c:d7:
0d:a7:e7:8a:8a:fd:8d:eb:20:2c:54:69:52:1b:b3:6e:e0:5c:
ec:3b:4d:4d:01:51:7d:04:ca:aa:1d:64:98:d5:a6:37:c3:6e:
3c:5a:0b:6a:dc:50:4f:fe:ca:a7:4e:03:25:21:25:0d:65:41:
c2:b1:f0:d1:54:5b:5b:98:04:83:ec:28:21:bd:8b:c2:5f:a8:
cc:99:7f:37:03:32:33:68:b0:2c:c0:d3:07:05:91:c4:01:18:
97:bd:ec:16:83:62:9d:89:96:cc:57:46:19:72:54:df:54:ae:
00:ff:6d:09:87:56:00:6d:bd:80:4f:86:0d:5f:3a:db:74:3e:
91:52:9e:ff:c8:c8:de:3b:bc:ec:15:6d:e5:fc:c4:34:f5:45:
7b:b6:e6:3b:a7:f5:68:e5:52:c5:7d:a2:98:8e:ab:b9:35:a4:
ff:55:d5:f8:bd:f7:4f:90:06:6f:f9:9d:c3:41:47:b0:26:09:
ee:03:ff:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:36:55 2025 by rpki-client