Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
File: 3C8IdW9U7NcoDR6sz4eK6z8orE8.mft (raw, json)
Hash identifier: BXpB7Dy9wK+uoMxh+pvcthgekqWiQ1PU63a7SOtvMME=
Subject key identifier: 1D:DA:27:2E:69:F4:F9:C6:39:3F:5E:AE:B2:E7:E1:7A:07:EB:AE:BE
Authority key identifier: DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
Certificate issuer: /CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Certificate serial: 0196CF4FA79F854487AFEC4B8B80E7AD24F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
Manifest number: 124B
Signing time: Wed 14 May 2025 15:00:25 +0000
Manifest this update: Wed 14 May 2025 15:00:25 +0000
Manifest next update: Thu 15 May 2025 15:00:25 +0000
Files and hashes: 1: 3C8IdW9U7NcoDR6sz4eK6z8orE8.crl (hash: FuI3nJpGYVm7QFhHfJCzFHZexgQlIU8GW7aFaxc5PkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:4f:a7:9f:85:44:87:af:ec:4b:8b:80:e7:ad:24:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Validity
Not Before: May 14 15:00:25 2025 GMT
Not After : May 15 15:00:25 2025 GMT
Subject: CN=1dda272e69f4f9c6393f5eaeb2e7e17a07ebaebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:b4:98:b6:0f:35:58:bb:99:73:3f:c5:b9:
12:a7:79:c3:ce:2e:c9:65:77:41:fc:19:2c:54:10:
63:80:2e:28:1a:56:c2:83:e1:d5:17:0f:78:26:f1:
70:25:db:71:17:d1:e0:9a:bc:47:2e:d6:1f:09:82:
a2:72:9d:46:9b:59:db:99:f8:c2:88:d7:be:7a:2e:
08:c0:79:69:6a:e0:84:80:2f:c8:06:11:17:c0:99:
27:a7:09:21:ff:9a:7c:46:83:d5:80:08:a3:76:97:
c7:04:b8:89:33:6f:5f:a6:16:84:4b:9f:3e:25:fc:
5e:26:00:87:d7:f9:d5:4d:59:73:c0:d1:94:de:e7:
38:01:2d:a3:00:22:0f:ef:d5:1b:f9:27:f7:d8:00:
0f:b9:a6:b8:cd:dc:20:57:5e:23:10:ed:88:83:42:
9b:8b:ec:97:43:27:95:28:13:cf:b2:90:4c:4c:90:
b3:97:21:11:80:fe:ce:89:e0:db:3d:21:2b:92:36:
62:ff:d5:cb:79:6f:a5:e1:ff:3e:e4:61:1b:97:a4:
b8:33:fa:af:cf:2a:dd:d8:79:48:1c:7d:4f:f0:3e:
67:ce:2e:1a:c0:26:f2:3e:f7:6e:16:33:73:4a:2a:
59:be:2f:5d:e4:6c:05:fe:90:03:64:46:53:76:49:
7e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DA:27:2E:69:F4:F9:C6:39:3F:5E:AE:B2:E7:E1:7A:07:EB:AE:BE
X509v3 Authority Key Identifier:
keyid:DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:2e:2d:f8:21:98:46:8d:ee:bf:1b:b4:c3:f3:91:31:d8:df:
4c:9b:5b:d8:4b:f1:bb:11:e1:73:2c:ae:10:fb:ff:60:18:cd:
56:9c:c9:9f:41:3b:56:85:ff:d8:89:57:d3:6c:a0:3e:7f:9c:
97:af:93:80:0a:8b:06:49:bc:97:0b:41:cb:4d:38:e9:c4:84:
76:13:47:42:71:ef:8a:ef:76:c3:64:4b:13:9e:9c:62:bd:94:
69:d2:74:65:2d:51:09:31:71:e1:70:b3:e4:f2:f0:5e:9c:e0:
aa:62:68:a9:f2:e8:e4:8a:a2:58:17:17:36:a1:65:71:3c:36:
d4:13:fe:52:db:33:a2:3b:ba:f3:58:9a:40:7e:c6:1e:48:d1:
c5:d1:36:52:b0:7c:50:a9:47:9a:f9:b3:c5:19:d3:29:f5:3f:
5e:7a:d3:9a:7e:c2:71:e3:eb:54:11:84:21:87:70:e9:43:d2:
6f:fe:af:4c:de:14:ad:a2:8a:41:cb:bd:38:ee:46:88:89:8e:
8b:41:d2:0a:70:b2:f8:ee:eb:45:3b:30:cb:d0:a9:8c:0d:17:
71:03:2e:1e:f0:c3:5d:c6:a8:d7:31:82:cd:56:4b:92:5b:c0:
be:4b:f1:f8:d2:58:ce:38:b9:35:aa:2d:ac:a2:f2:39:5e:c8:
55:80:60:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:27:21 2025 by rpki-client