Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
File: 3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json)
Hash identifier: Uk6Gcpx/7IrwnyN11gzYX5EVwbkz26pjOqZzBRAc1fA=
Subject key identifier: 4D:91:8B:F0:A8:6D:BD:D7:D0:CC:7C:FE:15:2A:82:BD:0A:00:96:B9
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial: 0196C0B889007517A9650FFEBE79551E2579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 19:00:41 +0000
Manifest this update: Sun 11 May 2025 19:00:41 +0000
Manifest next update: Mon 12 May 2025 19:00:41 +0000
Files and hashes: 1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: Q+zhhRdLNf9ueQWQEaBx2trkCiJMIjMgz8mCP8TySW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:89:00:75:17:a9:65:0f:fe:be:79:55:1e:25:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
Validity
Not Before: May 11 19:00:41 2025 GMT
Not After : May 12 19:00:41 2025 GMT
Subject: CN=4d918bf0a86dbdd7d0cc7cfe152a82bd0a0096b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:2a:65:f2:6e:35:ec:1c:ad:25:79:b5:61:
5d:1e:86:ba:8a:b9:e8:b6:4d:c2:09:9b:6a:5e:26:
2b:89:8d:58:e7:b1:81:5f:06:95:ab:75:a8:31:ce:
75:5b:48:b1:74:a8:35:19:ff:d8:d8:62:c1:3a:e7:
23:e4:4a:b8:84:b5:8b:32:55:61:b0:16:c7:c2:45:
b2:17:76:da:94:8f:7c:2b:94:2b:f7:0c:e5:c5:d0:
9a:71:7a:fa:19:f3:27:0c:57:04:fd:cf:68:83:1f:
c9:7c:e5:e8:4e:51:3b:12:f2:dc:95:07:24:c7:94:
b0:1e:14:1d:76:c7:22:19:b4:1c:df:9b:15:e1:ca:
60:53:db:e6:c5:02:9f:19:d9:0c:06:9d:24:c5:29:
92:5f:86:3f:1d:e8:6a:ec:66:5e:8a:f9:06:da:ec:
dc:b3:4c:21:c4:cc:b0:1c:8c:f8:e8:f7:a7:a6:a2:
68:58:97:41:d2:7c:99:3e:21:9c:97:08:0d:c5:65:
87:a9:1f:ba:7c:fd:20:72:ad:79:e2:36:34:de:55:
27:63:3c:ee:f4:35:b1:75:27:3b:d8:d5:90:67:41:
40:f6:91:22:3f:29:af:65:2b:09:d7:7e:cd:35:c4:
45:34:46:ae:0d:92:cd:c6:2e:00:f5:aa:4d:fd:47:
f7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:91:8B:F0:A8:6D:BD:D7:D0:CC:7C:FE:15:2A:82:BD:0A:00:96:B9
X509v3 Authority Key Identifier:
keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ff:09:55:25:5a:f3:a0:1b:a8:0f:40:a2:34:bd:aa:5d:e6:
95:9a:27:f6:e2:fa:bc:db:a5:05:39:14:b8:ba:92:e0:b7:22:
b4:65:4e:65:be:f8:d4:fa:c7:1b:06:93:de:93:1f:af:68:3f:
9a:58:ad:aa:be:27:9c:66:0b:9d:f4:0e:19:74:cf:ba:34:79:
e4:e6:47:4a:07:5b:0e:f0:d9:c9:e8:da:05:b3:ee:d3:c8:ab:
cd:e8:16:09:46:3b:c8:0c:f5:f9:16:79:21:e5:a7:9e:56:05:
60:c4:fd:b2:fb:a0:30:5f:a5:3a:83:37:0c:4f:d6:92:5e:40:
c3:c2:3b:12:f6:b9:b3:7f:10:dc:20:20:ff:ce:2c:be:42:42:
37:7b:45:59:5f:c9:71:f5:59:1d:5c:d6:13:69:e4:94:6a:17:
e8:96:58:6f:92:1c:be:ad:df:03:63:cd:e6:9f:2a:72:3d:b1:
c4:34:24:1c:ad:b0:23:22:65:db:67:e2:9f:f5:78:8a:5e:fb:
d3:fe:a0:0e:32:ad:ef:79:4e:74:e0:13:c4:12:5f:72:f6:de:
92:ca:7c:93:0c:c4:82:13:6e:66:2f:44:83:69:67:5d:7a:81:
37:02:df:cb:43:a7:4c:eb:43:24:db:a9:af:52:69:d6:1d:bf:
ff:36:b6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:21:59 2025 by rpki-client