Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
File: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft (raw, json)
Hash identifier: XBQK7ssW6viHhQu66qHhkQVR5uhjptt7cU4jpw0TK8k=
Subject key identifier: C0:C1:80:F2:13:DF:80:B4:E9:D9:80:36:6A:BA:26:8E:EC:D0:FE:EA
Authority key identifier: DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
Certificate issuer: /CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Certificate serial: 0196BB91CA6381C6B4FC8D24CB7306B216A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 19:00:15 +0000
Manifest this update: Sat 10 May 2025 19:00:15 +0000
Manifest next update: Sun 11 May 2025 19:00:15 +0000
Files and hashes: 1: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl (hash: yJM+hzA3xaU3gMqwpg3RHYRz1lzXpMB//fyFtck9rQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:91:ca:63:81:c6:b4:fc:8d:24:cb:73:06:b2:16:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Validity
Not Before: May 10 19:00:15 2025 GMT
Not After : May 11 19:00:15 2025 GMT
Subject: CN=c0c180f213df80b4e9d980366aba268eecd0feea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5d:a2:a4:5e:5a:16:1d:3f:fe:7a:6e:a2:70:
c7:d0:04:a6:5c:a9:9f:52:19:28:b4:07:7f:9a:3f:
2e:74:f3:d3:d0:59:0a:a0:03:69:f0:ee:95:af:2d:
b3:a6:75:9b:30:5e:83:61:f4:71:84:4d:c1:50:95:
43:c8:7f:a9:1f:57:8b:ed:c1:9f:15:d9:18:34:a6:
36:29:38:d1:ac:d5:ee:02:de:4c:c1:4e:7e:81:60:
bd:12:3b:51:12:b2:33:27:ea:68:b6:99:3c:e7:5c:
0d:d5:ae:83:b4:d1:d7:55:1c:be:bc:03:76:4e:fe:
32:b2:68:80:f2:c3:80:b7:82:f1:ea:6c:84:1b:09:
61:e3:31:6a:52:70:07:86:46:5a:10:19:d4:ee:6c:
ba:8e:74:92:47:51:31:96:dd:ab:44:7d:95:7b:50:
a8:91:59:7a:5d:b8:5e:b3:9d:ba:20:69:a6:56:d2:
2a:9e:4f:4a:cb:fe:e4:7a:cd:40:97:27:f1:e7:09:
49:6b:42:58:b6:6e:74:4f:80:4e:01:8c:5f:8e:7f:
74:e5:06:0b:de:9f:31:d4:59:00:c2:e4:66:ca:f7:
17:1d:04:fd:1c:09:3f:6a:32:c7:c3:38:53:af:89:
cd:d9:bd:a6:4b:f2:41:f7:fa:04:77:ef:29:18:c6:
c3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C1:80:F2:13:DF:80:B4:E9:D9:80:36:6A:BA:26:8E:EC:D0:FE:EA
X509v3 Authority Key Identifier:
keyid:DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d6:dd:19:87:09:e4:be:9f:97:9e:42:e7:65:0b:a9:d5:78:
bd:d9:72:83:4c:31:ee:d0:e8:a0:24:9c:0c:70:52:91:58:1b:
9b:cf:32:f0:98:f9:eb:73:34:cb:42:77:21:ec:38:58:37:c7:
1f:f9:3a:37:ad:ba:a4:6c:9f:cc:28:b3:44:19:41:66:2d:c4:
20:cf:04:a8:9d:65:1e:6b:f2:08:55:78:16:55:78:28:2b:8c:
e9:2b:93:0e:e0:3b:da:99:21:cf:f0:72:fe:79:f6:0b:47:51:
ed:76:e4:b7:d4:6b:50:93:9d:10:6b:90:e2:21:40:df:49:a1:
f0:c2:c2:6a:d4:23:88:da:b8:31:47:8f:2f:d6:18:19:c2:f9:
37:b8:2d:2f:b8:d5:7f:06:ea:28:8e:aa:d1:6f:12:ed:04:05:
4d:97:ee:34:18:99:dd:2a:e7:32:3d:6e:de:f1:3b:3c:48:8d:
09:1c:73:61:d0:de:1e:f1:9e:aa:3a:1e:b6:45:a5:e1:99:2e:
dd:67:c1:25:60:d8:a6:62:15:0a:66:d4:3b:19:b0:dd:ff:8a:
38:da:38:1a:4d:40:a6:26:ea:20:f6:94:11:4a:07:be:a0:d8:
0f:30:cf:c4:ee:26:fc:bb:e5:2a:9e:1d:91:11:bc:5d:b0:c9:
14:0f:02:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:00:04 2025 by rpki-client