
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
File: s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft (raw, json)
Hash identifier: n1AaXCE9lWv7haf/nrzbD5TUiTBqRwMAukiFSG2J+ws=
Subject key identifier: D8:C4:17:41:5B:99:AB:A8:16:CC:9C:DE:F8:C9:71:75:19:A4:A0:58
Authority key identifier: B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
Certificate issuer: /CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Certificate serial: 0196A277EF7BC85093166D5205AC3137ADD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 22:01:31 +0000
Manifest this update: Mon 05 May 2025 22:01:31 +0000
Manifest next update: Tue 06 May 2025 22:01:31 +0000
Files and hashes: 1: s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl (hash: lcuuPYn4/sIL2s48Vtl9bnbdXUr/Kuk5tFsKAxXPUG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:ef:7b:c8:50:93:16:6d:52:05:ac:31:37:ad:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Validity
Not Before: May 5 22:01:31 2025 GMT
Not After : May 6 22:01:31 2025 GMT
Subject: CN=d8c417415b99aba816cc9cdef8c9717519a4a058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:f3:66:04:e4:1d:23:a8:d0:43:7d:00:e0:
f1:b6:88:7c:be:96:e2:11:6c:a0:18:b8:37:ee:73:
e6:23:8c:9d:cf:45:df:8c:65:90:11:f7:1c:9e:73:
0e:d3:9c:42:ec:63:ac:fc:e4:eb:e1:b6:5f:62:20:
d8:d2:c1:ba:ff:c9:35:ba:c2:24:63:78:21:93:95:
3e:b2:c4:64:ff:c1:f2:50:17:7a:f1:ed:4d:6e:55:
08:ca:a0:7a:65:48:79:7c:4f:f0:ac:92:f8:41:a2:
8a:4c:86:c7:c2:20:cf:7e:e1:10:a5:2b:ab:03:08:
75:c2:de:9d:f7:4b:b4:c8:00:e9:b8:9d:52:2a:fa:
a9:af:13:03:c9:19:96:5d:bb:be:3a:ee:2d:ca:54:
8d:9c:c9:45:03:c0:bb:93:88:32:4e:a6:1f:d0:ee:
8d:62:5f:59:36:15:78:5d:3b:94:0e:ae:c1:ec:4a:
03:a0:c5:86:6f:cd:eb:49:8b:1f:bc:96:72:3a:44:
28:3e:f9:37:c5:77:f3:5b:82:d5:10:52:fa:23:db:
a7:92:88:89:e8:f0:5f:dc:22:1d:5b:a3:f3:ab:f1:
45:0e:2e:bf:d2:53:45:f6:ff:97:d4:ed:3e:3d:b6:
91:1d:47:ed:d5:51:22:26:82:7e:24:93:45:bd:b9:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C4:17:41:5B:99:AB:A8:16:CC:9C:DE:F8:C9:71:75:19:A4:A0:58
X509v3 Authority Key Identifier:
keyid:B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d4:ef:1f:ce:3b:fc:49:61:99:83:3e:a0:64:20:2e:a8:77:
de:ff:3c:ea:5c:01:e1:47:c5:a7:ca:0e:68:73:37:b5:82:f7:
68:c1:87:f6:88:a8:d8:9e:a6:31:ba:22:f9:de:cb:9c:fb:6f:
36:7a:a9:cb:ac:e4:7f:a0:f6:8c:3f:77:c6:91:db:90:e1:7d:
0b:48:b0:0a:6a:9f:27:91:65:42:dc:41:1c:03:dd:22:ed:35:
0e:5e:f9:58:a9:97:eb:16:79:f0:3d:91:d0:15:75:f6:9f:78:
6c:82:64:f6:c5:2e:92:3c:23:9e:22:2e:7c:35:b6:f0:1e:2d:
92:b2:0d:bd:c8:f1:d4:fb:96:a3:10:46:55:00:07:9c:2e:4a:
67:e0:1a:ff:c3:80:be:47:4f:ce:0b:7c:e4:d0:10:88:b3:d9:
11:de:d3:9c:73:0d:da:8d:6e:14:ab:40:cc:a0:7b:ae:fb:77:
54:af:5b:7f:15:ac:e0:b8:64:eb:4a:06:c4:da:98:cc:f6:9f:
41:8f:e1:ce:38:a9:9b:cd:43:84:31:45:9a:44:f5:df:31:2b:
13:a7:e9:aa:4c:56:31:c5:d4:42:ea:65:9a:23:14:00:6c:e4:
97:76:8e:94:6e:34:c4:03:36:c4:bb:a6:db:da:8b:68:f3:c6:
97:3c:d4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:27:05 2025 by rpki-client