Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
File: 3plxFn-T_DSzvEebsh_2LTvzyYQ.mft (raw, json)
Hash identifier: FZs4D3EkmDKybTHWQwimMhsfC3Hfb+hsdVd4clM35Rc=
Subject key identifier: 29:6E:2E:DF:C1:35:F7:80:32:AA:65:3D:6B:43:87:9F:75:52:80:6F
Authority key identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
Certificate issuer: /CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Certificate serial: 0196D02B3687410760EB74C90C80A7186412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
Manifest number: 013F
Signing time: Wed 14 May 2025 19:00:14 +0000
Manifest this update: Wed 14 May 2025 19:00:14 +0000
Manifest next update: Thu 15 May 2025 19:00:14 +0000
Files and hashes: 1: 3plxFn-T_DSzvEebsh_2LTvzyYQ.crl (hash: u5tAVrK0j8ZD1RA98NfCCEPfhFVuRMvtlUV5PuML2u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:2b:36:87:41:07:60:eb:74:c9:0c:80:a7:18:64:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Validity
Not Before: May 14 19:00:14 2025 GMT
Not After : May 15 19:00:14 2025 GMT
Subject: CN=296e2edfc135f78032aa653d6b43879f7552806f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:c7:bf:b6:42:3f:87:af:e3:76:4a:9d:60:
4b:c8:aa:ab:b4:7f:e4:5e:93:16:27:06:21:80:fe:
21:25:c8:9d:50:45:07:3e:f9:f4:c6:15:2a:5a:e8:
a7:63:03:82:c2:63:21:9a:c4:a7:08:73:42:a2:ef:
3e:a3:fc:1c:22:d1:92:fa:d1:86:fc:80:e1:41:7a:
dc:07:75:cd:de:ca:d3:51:4b:b7:f3:8d:d3:fd:97:
12:3b:8a:2a:a3:ce:6c:61:01:d5:ab:60:99:c3:fd:
ee:c3:00:78:61:00:8b:76:d9:47:74:f7:65:08:33:
90:b4:cb:1d:08:d3:52:fc:c7:4b:53:40:c5:7a:31:
1a:62:31:43:c4:5b:a5:5b:87:5f:b4:cf:53:cc:77:
8a:10:7f:d5:09:01:9f:9a:60:05:35:4b:af:5a:18:
de:2e:4c:cd:0c:d2:e9:14:0e:5d:ac:2b:1b:5d:c8:
48:eb:bc:d3:61:8c:50:af:70:07:3b:63:76:4e:44:
c1:e7:ad:80:cd:3a:6b:17:40:1e:be:d7:33:41:e6:
1c:4d:69:c5:b5:bf:cd:8c:4d:4a:7b:d0:1c:14:0e:
db:a7:4b:e0:aa:26:68:ec:fe:74:73:88:6b:6a:f9:
70:a3:23:a4:82:bc:d2:2c:d2:d2:fa:80:fa:77:2a:
01:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6E:2E:DF:C1:35:F7:80:32:AA:65:3D:6B:43:87:9F:75:52:80:6F
X509v3 Authority Key Identifier:
keyid:DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:4e:f1:62:e9:35:d7:df:8b:d4:1a:e7:6e:cc:dd:d5:e7:12:
bb:57:a1:4c:a6:dc:4c:6f:a3:68:bc:98:8e:1b:6a:77:92:17:
d1:79:b6:cc:17:2c:c0:fa:53:2e:65:69:c4:51:da:2a:4b:12:
0e:38:97:ab:00:41:c8:86:44:98:64:c5:92:6a:75:9b:05:23:
db:de:0f:c7:cf:b1:0a:1a:31:50:d6:f3:ab:45:bf:f6:82:83:
4d:15:98:cf:57:36:51:55:c0:c4:96:60:8e:40:f7:3b:e9:1b:
32:ea:cf:56:13:50:f5:5a:e6:7d:de:cd:78:30:72:5f:54:e9:
48:ff:09:04:7a:72:b7:a3:d7:07:52:2b:49:8e:1a:5a:7c:93:
44:4e:ec:fa:ec:29:8f:85:60:e2:c4:a8:15:ed:42:bb:33:d6:
6c:0e:08:2a:d4:0f:6e:75:4b:f0:04:61:fe:45:80:cb:c6:71:
c0:7d:28:58:75:e8:5e:e6:d3:91:5f:95:31:8a:9a:ba:2c:ac:
ef:a4:22:8a:08:57:b2:ca:98:89:d6:fb:02:c9:ca:5b:b1:47:
d5:53:d7:b7:cc:03:c7:33:2b:ca:b5:15:f2:eb:6f:47:da:89:
43:95:5a:18:44:04:5c:5e:b0:39:45:fb:fc:aa:d2:62:45:6b:
ef:44:00:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:08:56 2025 by rpki-client