Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
File: 3vg4UDz7wFKD_erdRkSke_14P84.mft (raw, json)
Hash identifier: VgslijZn9XPBt6+ZpWHIZNIgTdXrPv0yGDHwlWZFYLo=
Subject key identifier: 2C:B6:9B:FC:74:1E:ED:ED:FE:BD:65:DC:D9:B4:0A:10:5A:93:6D:D4
Authority key identifier: DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
Certificate issuer: /CN=def838503cfbc05283fdeadd4644a47bfd783fce
Certificate serial: 0196CC4F06F9EB4AF367CE4CB6A18DD81047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
Manifest number: 0765
Signing time: Wed 14 May 2025 01:00:53 +0000
Manifest this update: Wed 14 May 2025 01:00:53 +0000
Manifest next update: Thu 15 May 2025 01:00:53 +0000
Files and hashes: 1: 3vg4UDz7wFKD_erdRkSke_14P84.crl (hash: b/jA95zI5vlPgmO/fFxjzXPVRN0iJLoubdNxYOSOnFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:4f:06:f9:eb:4a:f3:67:ce:4c:b6:a1:8d:d8:10:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def838503cfbc05283fdeadd4644a47bfd783fce
Validity
Not Before: May 14 01:00:53 2025 GMT
Not After : May 15 01:00:53 2025 GMT
Subject: CN=2cb69bfc741eededfebd65dcd9b40a105a936dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c3:96:6f:1b:c3:46:d2:2a:06:b7:55:8b:03:
f3:c2:da:87:50:39:c5:65:98:f8:97:30:ac:d5:fe:
e2:00:d4:93:89:4c:a2:96:e5:fa:35:d6:eb:55:92:
4f:4b:c6:f7:63:49:8e:fe:1f:ad:5a:96:56:d8:a7:
33:51:fd:b4:77:f5:8f:bf:9e:da:3c:4c:2e:91:ae:
ab:92:71:b7:57:4a:fb:5b:b0:45:e4:10:c3:c3:a8:
ce:bd:b2:70:85:45:84:40:7a:2b:0c:77:3a:dd:9c:
f4:96:e6:ee:63:66:9b:ee:af:3d:ea:03:fd:91:3f:
c0:ae:da:b0:cf:d4:35:eb:4b:90:c5:32:ad:e4:d1:
66:27:19:76:69:0a:a0:10:cc:5a:78:42:13:e4:4d:
88:0f:d0:00:04:b6:6b:f0:d8:f0:e5:4d:df:ed:7d:
d4:0c:d8:56:59:a5:ab:42:9e:73:e4:67:be:81:bb:
03:fb:27:af:bc:e9:f1:3d:c8:f4:c2:a1:61:a7:da:
e5:7f:65:29:cb:03:a6:2f:88:ec:de:0a:cb:cf:6e:
26:d4:30:48:ba:6a:5b:fa:04:96:e7:11:7d:b2:93:
f3:62:30:39:57:98:86:4a:19:42:8f:1a:45:a2:4e:
5b:68:f0:5f:74:c2:a6:96:8f:53:77:0b:ee:f4:94:
24:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B6:9B:FC:74:1E:ED:ED:FE:BD:65:DC:D9:B4:0A:10:5A:93:6D:D4
X509v3 Authority Key Identifier:
keyid:DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7b:50:f7:6e:49:a6:c8:d6:c8:e4:c0:9b:0c:3d:77:b1:d4:
f8:4b:e2:6d:13:d3:0c:ba:3a:cd:6f:2f:64:e3:c7:56:61:7a:
55:96:35:5e:d0:29:61:bd:53:1b:45:02:26:0e:b4:d3:14:6f:
a8:79:28:24:e9:fe:07:fe:68:a7:dc:7b:42:68:6f:8f:53:17:
43:e2:35:b9:86:78:9e:2f:98:11:ed:56:58:bd:6c:3b:23:2a:
2f:38:47:56:6d:2b:2f:09:46:c6:dd:25:f0:dd:54:99:9c:88:
10:a0:eb:32:6e:84:e5:e1:66:a6:45:04:38:e6:a9:62:6e:56:
ac:03:24:6a:2c:8f:a4:0f:ac:56:95:23:9e:d3:c7:af:37:aa:
d0:e8:89:29:75:be:6c:4d:25:1a:a7:10:d0:00:1d:d8:e2:34:
a7:da:1d:31:f1:b3:20:07:e4:e0:06:34:44:db:08:31:4f:b4:
29:47:e3:e4:13:97:26:38:c3:27:d0:2d:fc:05:ae:f4:e8:9b:
f8:62:4e:9d:f9:95:16:74:3d:eb:15:c7:fc:84:17:eb:64:34:
25:15:56:75:08:4a:17:07:75:a9:a3:6f:5c:89:9a:59:84:33:
08:01:9d:8b:bb:cc:5e:19:c2:9a:25:33:c0:59:ea:e4:3f:03:
d0:d1:c2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:57:52 2025 by rpki-client