Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
File: 03h3GhBvaw0FSld4U1aSLK8C40M.mft (raw, json)
Hash identifier: iDe/DXdH8cCmLeMIk1o/7t8Efb0S+bQo3am8uzLxaDs=
Subject key identifier: 6E:91:E2:20:AD:6E:A6:2B:02:52:23:9F:49:BD:5E:27:FB:67:73:AD
Authority key identifier: D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
Certificate issuer: /CN=d378771a106f6b0d054a57785356922caf02e343
Certificate serial: 01964632E4F2C1FC50D17ECDDB4479C61165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
Manifest number: 08A0
Signing time: Fri 18 Apr 2025 00:01:02 +0000
Manifest this update: Fri 18 Apr 2025 00:01:02 +0000
Manifest next update: Sat 19 Apr 2025 00:01:02 +0000
Files and hashes: 1: 03h3GhBvaw0FSld4U1aSLK8C40M.crl (hash: pWnhflqOH0U3zUm/qpeU2fF2pSo21I7yWCLC+F5Blws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:32:e4:f2:c1:fc:50:d1:7e:cd:db:44:79:c6:11:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d378771a106f6b0d054a57785356922caf02e343
Validity
Not Before: Apr 18 00:01:02 2025 GMT
Not After : Apr 19 00:01:02 2025 GMT
Subject: CN=6e91e220ad6ea62b0252239f49bd5e27fb6773ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b6:8f:c2:bc:21:98:56:bd:00:67:8a:44:f2:
68:71:0f:5b:e2:a4:32:e7:43:5f:4d:3f:94:fe:23:
45:59:70:07:89:bb:26:ef:d0:63:46:8a:84:ec:5c:
7e:24:e4:30:e1:89:a5:66:ea:e3:5d:de:1b:80:41:
57:84:2d:81:87:1b:ad:e6:07:b8:e5:a1:67:e3:62:
a9:4a:6a:a0:44:9e:0f:e0:48:3e:02:47:f5:42:f8:
62:d9:33:fe:a4:f8:e7:95:64:72:a9:20:8e:5b:67:
27:82:0c:3e:cd:ac:ad:00:6b:a8:e6:65:f4:f0:b0:
90:bd:2b:65:78:cd:9c:83:f6:b5:b2:47:c8:a5:f6:
9c:db:2d:32:09:bb:d6:a7:33:86:98:b7:20:99:e8:
df:c5:7b:0c:73:9b:e2:69:a0:cb:5c:ba:70:fd:c4:
77:74:eb:81:10:81:07:73:9b:68:43:3f:4c:3d:ff:
f2:b3:9e:13:86:11:16:8d:3f:79:bf:6b:02:af:05:
ee:9d:13:d3:18:0b:ca:4f:f1:37:2e:5e:f5:83:4b:
69:43:81:69:83:a0:95:94:be:10:55:e8:fe:22:c5:
9b:5e:54:6d:1f:8e:87:82:3b:c1:1c:02:2d:a2:c2:
ff:7b:99:f0:4b:a3:a6:06:14:0d:e3:5f:0e:d7:bf:
fc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:91:E2:20:AD:6E:A6:2B:02:52:23:9F:49:BD:5E:27:FB:67:73:AD
X509v3 Authority Key Identifier:
keyid:D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:49:28:0b:a5:99:dc:cb:af:68:bf:f0:86:38:70:92:4f:8f:
29:54:b7:84:d0:60:f1:9e:0b:51:94:71:13:bd:7a:84:fb:34:
6c:e9:c2:d2:19:fc:b7:72:99:5f:a1:7d:53:c3:18:1b:a1:05:
89:37:93:78:90:3c:70:23:05:35:7d:44:cd:36:f7:7c:e8:9a:
d1:30:ca:ba:ba:c6:64:3e:93:c1:c9:1b:1c:d0:fc:aa:79:43:
91:9e:a7:75:85:1d:ae:28:c5:81:c9:c6:b0:51:4e:1a:fc:34:
66:37:5c:96:aa:fa:41:e5:5f:9a:9c:94:76:1e:ae:e2:75:92:
ac:18:ed:7f:18:14:d5:95:f7:e9:ba:04:a5:6e:c0:31:bf:d1:
bd:d4:37:ff:05:6c:f9:e6:db:e7:3e:6f:dc:c1:7a:64:1e:b2:
4a:05:0f:da:12:73:37:0a:0b:68:5b:a1:9c:2c:c0:6f:b4:24:
8a:75:6f:a8:ab:3f:8d:e2:ef:67:c1:08:f3:33:8b:47:3e:b6:
72:b3:36:88:f8:c5:e4:12:08:28:80:a3:59:04:3f:c8:ad:dc:
bd:fa:2b:20:ad:12:67:be:27:29:7d:9a:3a:53:51:4f:91:c1:
d2:1c:72:0d:f2:00:88:c0:53:d7:b3:f2:63:b7:ab:c2:12:ab:
56:01:9c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:52:24 2025 by rpki-client