Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
File: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft (raw, json)
Hash identifier: DbBJx5qGulgqexFgkSXro4F6KHMa99vYXRt1uBmknmQ=
Subject key identifier: 9C:DC:23:C2:8C:84:BC:B9:DC:03:8D:C2:20:05:F2:F0:F8:C6:F9:EE
Authority key identifier: DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
Certificate issuer: /CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Certificate serial: 0196BC007DF1D3D77EF8B193D8FBBE185478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
Manifest number: 046A
Signing time: Sat 10 May 2025 21:01:10 +0000
Manifest this update: Sat 10 May 2025 21:01:10 +0000
Manifest next update: Sun 11 May 2025 21:01:10 +0000
Files and hashes: 1: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl (hash: iDX6AJwe6BN/GEyqYiyklnMZqDDj+fAHBzLsTYKTRVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 14:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:7d:f1:d3:d7:7e:f8:b1:93:d8:fb:be:18:54:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Validity
Not Before: May 10 21:01:10 2025 GMT
Not After : May 11 21:01:10 2025 GMT
Subject: CN=9cdc23c28c84bcb9dc038dc22005f2f0f8c6f9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:df:e4:55:e5:8d:1c:35:9a:85:b8:5f:e6:
0e:5a:c7:ab:14:15:e3:19:f4:8e:32:cd:a5:b3:de:
cc:4b:69:99:ef:81:ee:83:5f:33:84:ca:0c:fb:71:
6e:24:89:80:be:c4:cb:77:03:4e:92:c8:46:cc:70:
a5:9b:6b:68:f0:8b:b4:32:ea:29:f2:18:02:8f:16:
97:31:04:c6:d4:7f:ba:5c:1c:88:b6:0f:5a:85:41:
1a:81:4e:b1:c8:0b:e8:42:7b:62:cb:ce:b0:00:3f:
e3:dd:76:7f:58:2f:a4:37:ad:d5:52:16:64:51:be:
94:a5:66:1f:b8:46:bf:a8:c8:6e:dc:8b:9c:7a:35:
4d:06:53:b5:54:30:77:ef:22:74:64:81:37:c0:30:
c6:8a:80:b8:02:76:71:b5:27:1a:c4:ff:30:e8:de:
f1:cf:9a:5c:f7:8f:bc:2c:fa:4c:59:d2:e8:80:ba:
cc:fc:e1:30:18:dd:6e:41:1f:62:93:9f:69:48:d6:
3c:d7:06:61:d9:7f:58:2c:ba:b2:10:61:33:88:bf:
07:5f:c4:2d:ad:23:ff:29:77:61:38:0a:8d:cf:27:
f2:45:25:58:e6:49:fe:fa:bc:7e:8e:63:56:06:f1:
40:f1:c8:f9:90:52:65:9b:bf:c8:da:36:d0:49:36:
56:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DC:23:C2:8C:84:BC:B9:DC:03:8D:C2:20:05:F2:F0:F8:C6:F9:EE
X509v3 Authority Key Identifier:
keyid:DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:85:a7:93:e5:58:22:cf:ba:53:ab:bf:74:a8:db:39:1e:8f:
2a:07:35:04:20:34:2a:3a:d6:bb:93:e9:41:c8:d4:3f:25:c2:
d8:c6:62:4e:8f:43:69:38:1b:ad:5d:ee:5e:06:1d:34:5f:d0:
ba:d1:04:70:b3:c7:f2:1d:80:2a:79:a5:f1:cb:96:f7:54:5f:
f2:bf:36:c7:17:35:df:f8:0e:c6:9e:bb:0a:3b:27:c6:df:59:
21:cc:6a:9d:b0:50:71:b6:4e:28:7f:5d:d8:4e:d7:6f:27:60:
38:2f:6c:64:db:62:9a:41:c0:8c:d9:a3:cb:07:0d:23:d4:e9:
e4:ba:73:a9:87:65:86:0e:a5:6d:86:81:c6:ab:97:56:ff:7a:
75:ba:1d:99:7e:49:96:b1:18:32:de:97:d0:c7:5f:ec:a0:cf:
0c:13:cf:9d:37:13:c8:2c:26:b7:04:95:61:1e:f5:67:0b:29:
ce:45:6a:ed:26:29:28:62:7d:10:30:62:68:3d:7c:5f:4a:78:
be:e6:af:91:42:f8:6d:99:48:40:0b:20:22:90:d3:ef:63:17:
5c:0e:cb:be:07:31:49:a7:c4:6e:a5:0c:3e:4a:b1:4b:28:1a:
80:f6:f1:f0:0f:58:ae:0d:92:06:2c:fe:e4:b2:02:43:4c:cb:
50:c1:f8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:26:23 2025 by rpki-client