Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier: 5KrHSmFv1UOLojCAmXSPvfgutdASIRQm+P4apvn60UU=
Subject key identifier: DA:70:14:C0:DA:0F:D1:B5:65:C9:41:7B:C2:D9:4D:A8:CA:4B:08:0E
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer: /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial: 01964F6C807E4EEB328175B81EB29BD01E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number: 14F7
Signing time: Sat 19 Apr 2025 19:00:32 +0000
Manifest this update: Sat 19 Apr 2025 19:00:32 +0000
Manifest next update: Sun 20 Apr 2025 19:00:32 +0000
Files and hashes: 1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: VihbzU79Aos7gWTO7DHanD3C0D8nCYVTJkUdejJV9mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:80:7e:4e:eb:32:81:75:b8:1e:b2:9b:d0:1e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Validity
Not Before: Apr 19 19:00:32 2025 GMT
Not After : Apr 20 19:00:32 2025 GMT
Subject: CN=da7014c0da0fd1b565c9417bc2d94da8ca4b080e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d6:06:c8:01:34:d4:63:e6:c8:9e:0f:44:41:
d4:6a:0f:1e:17:f2:94:3c:46:a0:94:52:74:fa:2e:
47:6b:66:e6:90:1e:3d:d9:5d:89:91:4f:85:9d:23:
24:9c:8e:f5:eb:e1:2e:19:b2:49:6c:11:ce:ab:3e:
6f:20:11:d9:20:b3:70:c4:49:5d:6b:c8:bd:3c:35:
60:da:80:4a:34:72:f5:73:40:fb:2a:73:40:f0:90:
32:6b:aa:98:2d:d9:76:fe:70:e5:ef:9e:0a:82:fa:
72:36:4a:ba:89:84:91:21:71:b7:84:45:05:e6:51:
07:b7:60:d1:59:32:89:6a:ff:c2:f9:b0:d1:dd:78:
e1:09:3a:bf:bc:77:c6:c8:a6:de:cc:5a:a3:b8:3c:
09:fe:0d:72:84:f3:dc:7e:7c:a1:56:12:4c:fb:f3:
b2:81:ce:3a:e9:8b:e5:97:4d:ab:34:94:fd:33:25:
d5:35:2e:a0:05:92:54:af:f2:6e:fe:f5:29:2c:b1:
c8:18:f0:58:f2:89:3e:b8:47:32:49:b7:50:db:b3:
0c:17:8f:ff:b1:2a:a0:e0:17:54:ac:92:34:b7:e7:
1d:72:7d:01:89:63:e8:6c:e0:30:97:09:42:43:da:
bd:04:39:43:5e:e0:3b:db:be:2b:9f:46:98:30:ee:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:70:14:C0:DA:0F:D1:B5:65:C9:41:7B:C2:D9:4D:A8:CA:4B:08:0E
X509v3 Authority Key Identifier:
keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6a:79:2a:d1:3e:30:51:f5:b3:7a:d8:f9:35:af:77:99:ef:
25:7c:b3:e5:fd:f5:f6:76:63:00:9a:34:1c:8f:f9:07:13:c7:
7b:c6:f1:de:4c:dd:57:32:0d:17:34:4a:7a:b3:d9:e4:ac:54:
cd:09:0f:06:e0:17:d1:05:b6:2a:b0:0f:3c:a7:49:c1:89:55:
f1:f1:d0:d0:22:97:7f:33:9f:4c:99:ab:d0:10:a6:a8:f4:7a:
d4:11:86:67:93:f0:49:9b:21:35:f3:30:1e:bf:df:b3:17:7e:
0f:f6:49:b1:cb:c3:3d:45:51:a6:69:59:1c:2a:02:35:53:2d:
d7:fe:d5:fe:4d:bc:ed:43:b3:4b:87:c3:3e:28:bf:ba:a2:03:
bb:34:24:50:e3:49:0f:be:30:ab:aa:a7:ce:a1:65:d3:81:af:
20:5c:f3:83:53:b4:84:c7:26:d2:3d:fc:25:65:dd:a3:47:e2:
34:fa:5c:6a:f1:16:9c:1c:5f:ab:95:78:f1:b4:c2:e1:de:6f:
d0:ab:91:7a:9a:c7:f7:cb:87:83:01:be:e0:59:55:ea:c4:d9:
d0:88:b4:55:82:1f:be:29:0d:39:89:aa:70:7e:1b:fb:c1:a8:
fa:29:88:d6:c2:27:e9:c1:db:1a:f9:7c:09:a9:5e:9c:63:76:
0b:bb:9e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:35 2025 by rpki-client