Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
File: rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft (raw, json)
Hash identifier: +yquOE9tFk3lEuY8h4b8sQcrjwzWoDUPhKNcIpqeqB8=
Subject key identifier: 3F:0A:93:78:3B:18:5D:D4:9C:45:97:73:60:6E:BE:C0:A3:77:C6:AB
Authority key identifier: AE:50:EC:35:2E:8D:BB:0C:DF:6E:08:C5:7C:71:CA:A1:1A:44:50:03
Certificate issuer: /CN=ae50ec352e8dbb0cdf6e08c57c71caa11a445003
Certificate serial: 0196A2777DE5817D960C328FCCDC8B10257A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 22:01:02 +0000
Manifest this update: Mon 05 May 2025 22:01:02 +0000
Manifest next update: Tue 06 May 2025 22:01:02 +0000
Files and hashes: 1: rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl (hash: f7O+K3nAYfGaJC9NjJ3Owi1Tq8dWfHMW7o2m+sc7F5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:7d:e5:81:7d:96:0c:32:8f:cc:dc:8b:10:25:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae50ec352e8dbb0cdf6e08c57c71caa11a445003
Validity
Not Before: May 5 22:01:02 2025 GMT
Not After : May 6 22:01:02 2025 GMT
Subject: CN=3f0a93783b185dd49c459773606ebec0a377c6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:14:69:b8:65:6b:2f:ff:f9:0c:0d:e4:c9:b1:
81:c8:72:ad:bc:f1:79:f8:c1:7c:14:fd:bf:d8:4a:
12:23:c7:69:f6:b0:cc:c9:a3:f7:31:ec:35:5b:e0:
84:19:eb:db:c0:4f:19:18:d4:f9:02:b3:19:73:83:
62:e8:e3:a9:29:ec:b3:9c:67:63:53:4d:de:c4:bb:
f8:1a:e3:03:3c:af:96:77:6e:1b:16:1f:4b:57:b7:
7c:24:e7:92:10:eb:c3:6d:52:36:02:1b:50:94:ca:
31:05:01:5d:51:4d:03:6c:ee:29:d9:5c:31:36:76:
5c:e1:b9:85:52:f5:7d:88:af:44:2b:d4:14:72:e8:
68:40:61:88:0f:0b:35:f1:bf:6a:43:5a:22:0f:4c:
0f:97:6a:d6:77:3c:e0:91:aa:9e:55:36:1e:a9:71:
d9:57:d1:6c:80:d5:19:e1:ca:dd:5d:d3:2a:e0:81:
fe:77:32:7f:5e:3d:05:1a:02:d9:3b:c1:1b:1b:40:
49:4f:94:77:70:6a:b2:26:e2:09:da:e9:8e:5f:b6:
0b:ea:ca:6f:22:f3:5f:31:0b:0a:04:bd:76:5b:45:
8d:80:8f:08:e7:0f:45:9f:d7:a7:2f:c5:e6:09:b4:
3b:08:ee:ff:5f:7b:fb:f6:bf:e8:33:8b:60:4e:a6:
c1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0A:93:78:3B:18:5D:D4:9C:45:97:73:60:6E:BE:C0:A3:77:C6:AB
X509v3 Authority Key Identifier:
keyid:AE:50:EC:35:2E:8D:BB:0C:DF:6E:08:C5:7C:71:CA:A1:1A:44:50:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ad:c7:3a:43:c8:39:6e:34:fc:47:f6:28:e6:f1:07:14:c2:
f9:01:28:44:8c:2c:99:9f:92:7e:e8:6c:5b:52:01:d7:37:71:
b7:64:45:df:d7:e9:b5:31:61:41:68:31:54:70:0e:14:c7:e7:
95:34:b9:e4:2c:c6:ac:d7:3f:c2:c7:d9:3a:d0:16:4c:26:a3:
dc:6a:e0:c1:09:f1:b8:6e:7c:29:2a:a7:b8:e8:6a:69:9e:88:
3f:e3:4c:8b:66:c7:87:0f:1f:a9:b6:cd:9d:62:7b:73:f4:96:
48:11:ad:fb:d4:8c:56:0d:f7:9e:11:66:9b:31:90:3a:02:19:
a9:8b:80:98:f6:6a:79:ea:6b:9a:e0:01:6c:15:d3:f4:75:10:
60:be:02:ed:fc:39:e5:06:4d:1c:bf:5c:19:f4:80:3b:ef:bf:
df:70:a2:1c:6e:4c:d3:9b:d3:57:b5:39:1b:34:9e:0d:5d:1e:
68:97:2c:2c:9c:91:a2:4f:63:33:50:9f:58:55:41:40:a9:b0:
d4:1a:f5:f9:75:7a:ef:16:3b:eb:89:fa:63:88:bb:ea:77:a6:
80:6e:9e:1c:bf:c8:ef:22:fe:4e:95:70:c5:d5:04:73:ce:a3:
75:24:95:80:a5:17:25:f6:e9:6b:28:e6:cf:7e:1d:7c:f5:5e:
d2:a6:c0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:26:22 2025 by rpki-client