Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
File: c3eHzyqHDZGxE2n510WRlXYCgU4.mft (raw, json)
Hash identifier: duoMExzi9/YVtEOGtbo7U/eELftHY1jISUYIET0akh4=
Subject key identifier: 71:06:6F:92:F8:73:5A:36:38:C5:90:66:BE:0C:97:5A:88:51:F0:50
Authority key identifier: 73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
Certificate issuer: /CN=737787cf2a870d91b11369f9d74591957602814e
Certificate serial: 01964F6D40105B0A3BC760D0EE9FDB426F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
Manifest number: 07C1
Signing time: Sat 19 Apr 2025 19:01:21 +0000
Manifest this update: Sat 19 Apr 2025 19:01:21 +0000
Manifest next update: Sun 20 Apr 2025 19:01:21 +0000
Files and hashes: 1: c3eHzyqHDZGxE2n510WRlXYCgU4.crl (hash: iZc4RJ9ysOoBNqo1pu0QspSB7UHu7+Fm+RUj6Qi63nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:40:10:5b:0a:3b:c7:60:d0:ee:9f:db:42:6f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737787cf2a870d91b11369f9d74591957602814e
Validity
Not Before: Apr 19 19:01:21 2025 GMT
Not After : Apr 20 19:01:21 2025 GMT
Subject: CN=71066f92f8735a3638c59066be0c975a8851f050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:5d:49:eb:99:3b:1c:5b:bd:29:16:f0:fa:
7a:38:da:f5:5c:cf:3b:9a:1f:2b:6d:89:e7:25:c5:
c3:bd:1b:39:41:40:f7:2f:5b:b8:b0:7a:1f:c2:eb:
f0:b9:43:52:0a:04:1f:17:67:6b:0f:0a:91:ae:17:
71:60:9b:0d:f2:55:50:58:b1:2f:a8:1e:54:5a:46:
b6:4c:86:78:ea:f0:0c:7f:ef:81:c5:cb:83:1f:d5:
ab:38:b8:9b:d6:3f:13:27:a4:25:88:da:b9:7c:d4:
7b:c0:6b:13:2a:5f:e7:8b:80:41:a1:29:bf:25:05:
d6:7d:f6:99:00:1a:5c:7a:63:92:ff:4b:ce:82:6d:
7a:dd:25:9f:35:6a:17:14:7a:a9:1f:bf:3c:6e:48:
7a:3a:c5:af:1a:b9:c8:b3:46:09:5b:2b:bb:80:86:
c5:1b:ee:e4:c8:91:14:0e:38:07:21:1c:80:78:a5:
99:d7:43:a0:1b:25:23:29:2b:51:f3:20:f9:0a:66:
bd:38:48:cb:42:71:3d:72:28:20:07:c8:c5:a6:5c:
d5:7e:9b:c5:39:76:18:6e:8f:ff:11:15:00:ed:f7:
c9:a1:85:c9:1c:64:ed:e6:31:71:97:1e:a3:d3:99:
b3:8f:da:91:18:e6:6f:94:25:cc:bf:bf:06:42:c7:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:06:6F:92:F8:73:5A:36:38:C5:90:66:BE:0C:97:5A:88:51:F0:50
X509v3 Authority Key Identifier:
keyid:73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f0:fa:83:9f:30:4d:89:bd:fc:be:a2:86:3e:fd:99:e6:8c:
27:e5:ab:76:1e:15:74:f8:79:89:63:c0:59:5b:ae:25:1d:a4:
1e:40:59:ea:8c:96:67:f7:39:35:69:1e:6f:93:f1:8a:37:42:
c5:c7:98:06:6f:ad:11:95:8c:3d:4b:17:03:62:89:dd:3d:2f:
0b:ca:aa:8e:36:a6:1e:15:81:f3:0f:30:81:3c:50:84:d7:a9:
16:96:eb:2d:28:65:8c:71:b1:67:a3:5c:17:f9:4c:f3:d0:d1:
04:28:aa:cc:7b:9e:c5:a4:36:4c:36:44:5b:cb:36:2c:b3:46:
22:8b:ed:48:ee:1b:58:7c:e1:17:e9:0c:d1:16:1e:89:8f:56:
86:3d:4c:f5:e5:a8:5e:d2:1d:46:c8:6c:e4:a8:fc:4b:7a:eb:
60:56:2c:47:bf:4d:57:e8:98:ea:3b:26:0e:7e:77:14:93:ce:
87:42:4f:d8:ce:c4:81:3a:17:bb:42:2a:46:4a:e0:38:c7:42:
d1:e7:33:2e:58:23:56:9b:ee:9d:03:7e:f2:11:a1:32:e6:d7:
da:d7:0a:11:53:52:f9:1f:48:82:7a:b3:94:c1:9d:9a:8b:ee:
3c:ac:bc:f0:f9:ce:e0:a7:2e:fb:91:a3:75:30:c2:2c:78:e9:
8c:fe:20:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:45:55 2025 by rpki-client