Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier: Ey+j5OVhWBYLE5S+fzn8V9yIIMjhDBVsCW97vuNc8CM=
Subject key identifier: E9:74:D2:86:59:DA:0B:0E:B5:5C:7B:F5:64:53:5C:A2:A5:64:28:E8
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer: /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial: 01958C60021DBE2324DC2EB40B38ECA7FA8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number: 1492
Signing time: Wed 12 Mar 2025 22:00:57 +0000
Manifest this update: Wed 12 Mar 2025 22:00:57 +0000
Manifest next update: Thu 13 Mar 2025 22:00:57 +0000
Files and hashes: 1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: rnRYZCtMyihrgapfkNap0NDWB6XtnzIHnsWOpE8vbjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:02:1d:be:23:24:dc:2e:b4:0b:38:ec:a7:fa:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Validity
Not Before: Mar 12 22:00:57 2025 GMT
Not After : Mar 13 22:00:57 2025 GMT
Subject: CN=e974d28659da0b0eb55c7bf564535ca2a56428e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:3c:26:96:9e:d9:c5:91:a4:39:ea:22:b8:
77:d2:81:37:9e:44:04:07:ae:68:fd:e9:a0:a5:67:
94:c4:71:0d:a9:43:26:7b:fc:cd:f7:4b:d9:59:e9:
4c:61:f9:fb:d1:3c:22:e2:f5:68:7d:80:03:58:02:
d6:38:50:18:62:e9:03:7c:a5:c3:37:a4:4b:95:f3:
05:86:e0:06:63:05:a7:7a:0b:0f:6e:68:6a:15:b9:
3a:34:6e:e8:cd:21:1b:20:01:24:64:dc:d5:98:da:
82:4d:2b:e7:36:1b:e7:1c:d5:40:e7:96:7a:29:06:
3e:ae:83:d1:18:55:87:2e:d4:a9:6b:52:c7:f0:d4:
ee:ed:ba:3f:4d:32:64:0f:6d:26:42:6e:ae:e9:f1:
ed:03:de:eb:04:78:9a:f2:70:ac:24:6c:e2:aa:29:
08:53:a2:11:0b:d5:0d:a6:69:a3:13:59:ae:11:52:
42:7a:43:fc:12:6a:83:80:15:9c:b5:3d:c6:31:d0:
a7:58:e0:a8:26:55:08:c3:b1:44:18:12:3c:53:52:
27:07:e5:b5:3b:2f:da:8f:28:92:24:53:28:85:1c:
b6:f7:c3:f1:c4:87:14:0f:68:61:4c:47:ed:eb:ef:
db:dc:b9:a2:85:7d:95:9c:1c:57:db:cb:cf:7d:86:
72:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:74:D2:86:59:DA:0B:0E:B5:5C:7B:F5:64:53:5C:A2:A5:64:28:E8
X509v3 Authority Key Identifier:
keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:34:3a:46:6a:2f:41:f0:32:38:24:14:73:cc:75:ad:16:b0:
b5:1e:aa:8d:22:17:f6:b2:d1:92:5d:67:21:08:bd:21:14:29:
12:6a:0e:b0:0b:dd:db:d8:d9:db:53:ee:d3:b8:95:29:8b:8a:
77:48:12:9f:18:65:1c:e2:dc:b6:aa:90:22:13:d6:f4:41:7b:
ca:59:5d:b6:26:4d:87:5c:50:b7:f8:3b:3b:a1:59:b8:27:94:
3c:dc:84:1b:f4:15:f2:f9:d0:e7:44:75:f5:37:ae:4b:38:7f:
ac:c7:38:33:e7:b3:b8:d2:98:53:2f:19:bb:7d:cf:b6:4c:e8:
5d:7d:ec:db:5e:09:4f:75:be:94:0b:e7:43:de:e4:20:8c:f7:
8e:33:22:da:7b:2b:2f:73:ce:5e:98:25:aa:fa:f6:79:4b:4a:
59:47:a2:68:d5:aa:d0:4d:ac:d7:67:0b:81:e8:6a:d2:10:2a:
b4:2b:11:f4:a3:c5:19:1a:6d:40:ed:f8:72:69:aa:87:e1:cf:
b9:42:f1:db:77:7d:73:7d:04:33:b9:2d:34:cb:20:e7:2e:19:
b7:59:f6:3a:8c:fa:d2:79:ef:b4:66:63:b0:8b:4b:37:a9:41:
cc:c1:02:79:e6:83:ba:3a:5f:79:7b:40:b3:60:77:b1:f5:e5:
ca:c1:91:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:12:56 2025 by rpki-client