Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft
File: I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft (raw, json)
Hash identifier: rYldyJDUibU7DLMGUCsjBRj2kDZpY1hXDELXOt2BIZU=
Subject key identifier: A9:7F:9E:0F:D9:46:76:C0:1E:E2:03:4E:19:56:1B:C7:44:C1:7C:88
Authority key identifier: 23:7A:FF:0D:F4:80:83:C7:E2:1D:79:4A:B1:47:BB:97:11:14:12:44
Certificate issuer: /CN=237aff0df48083c7e21d794ab147bb9711141244
Certificate serial: 0196A6F8D489A517B960021C2D535ED27505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft
Manifest number: 0939
Signing time: Tue 06 May 2025 19:00:47 +0000
Manifest this update: Tue 06 May 2025 19:00:47 +0000
Manifest next update: Wed 07 May 2025 19:00:47 +0000
Files and hashes: 1: I3r_DfSAg8fiHXlKsUe7lxEUEkQ.crl (hash: SXed+WEVq9l6l/PRLvPiHfn5YVgkUznFEp0IOmtgmAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:f8:d4:89:a5:17:b9:60:02:1c:2d:53:5e:d2:75:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237aff0df48083c7e21d794ab147bb9711141244
Validity
Not Before: May 6 19:00:47 2025 GMT
Not After : May 7 19:00:47 2025 GMT
Subject: CN=a97f9e0fd94676c01ee2034e19561bc744c17c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:13:b3:d3:6b:2a:bb:eb:f6:47:34:0f:30:
9d:9d:96:aa:a5:52:55:9c:a8:47:8f:8a:70:48:a7:
30:64:3b:7d:cc:81:c4:1f:1a:1b:1b:88:49:cb:e9:
7f:89:a0:12:7b:e9:b3:ce:c8:fc:23:b5:60:23:9f:
4d:24:fb:a0:28:a7:83:d6:ec:3e:52:bb:c4:23:11:
93:60:75:ba:f1:d0:2a:47:f2:8f:cf:ae:60:f2:d7:
c5:2e:59:14:58:bf:16:d8:70:e9:38:87:02:6c:de:
ba:62:1d:fa:9d:b7:f5:c5:6f:7a:29:8a:72:23:f6:
2d:7d:6a:d7:ac:1a:b7:f4:0c:15:16:b3:60:3f:bc:
2f:b6:fe:64:4f:c2:cc:2f:90:21:d5:96:cd:73:b1:
00:2c:e3:ed:51:37:27:62:15:b0:02:dd:20:51:70:
6a:6d:89:c4:af:4a:3c:e0:3c:7a:fd:1d:f8:06:0b:
a8:d1:20:10:fd:9a:57:13:6f:fc:6a:d3:e0:36:3f:
ee:a9:aa:6d:3a:4b:d0:ba:15:97:c8:c8:cb:0b:3c:
75:3c:9c:ba:25:12:3d:b4:3b:d2:61:82:54:4c:2a:
ae:e5:fa:9c:32:11:34:d0:79:f2:46:e0:2c:40:c6:
87:6f:24:dd:c7:cd:87:0e:f6:88:53:21:b2:a4:40:
1f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7F:9E:0F:D9:46:76:C0:1E:E2:03:4E:19:56:1B:C7:44:C1:7C:88
X509v3 Authority Key Identifier:
keyid:23:7A:FF:0D:F4:80:83:C7:E2:1D:79:4A:B1:47:BB:97:11:14:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:92:ce:47:cf:c8:ff:cf:4f:3b:9e:dc:ff:7c:e2:a5:e1:ac:
86:57:74:b4:ec:80:65:60:26:b8:f9:82:34:8f:e5:7a:19:7a:
74:8a:1c:f8:0c:ca:15:48:b0:ab:2c:33:20:13:67:ea:47:83:
23:27:0d:51:ff:cc:7e:be:a2:39:0c:22:60:bd:33:df:4f:af:
16:91:37:c5:fd:49:77:0f:77:76:f0:7a:99:14:4c:ba:4c:07:
34:f2:6f:76:00:ee:0c:86:a4:b8:f7:3a:00:e6:fa:08:8d:76:
b6:9c:31:42:49:47:75:bb:d0:0e:b6:78:a0:c4:6e:aa:f2:7b:
a4:63:e9:4b:da:a0:0e:e9:9c:4f:0d:09:e5:64:64:4a:73:93:
c0:c3:bb:fa:d7:5d:5c:71:11:b2:ad:87:ab:85:b5:66:8a:58:
84:d9:2a:b9:69:da:ec:cc:06:ab:60:47:3c:77:13:57:ac:df:
7c:54:36:34:41:ed:f1:eb:8b:7a:e5:9d:74:bb:ea:e6:35:1f:
1a:73:46:74:b8:f7:69:b3:c1:69:d4:d9:df:5a:74:e6:af:da:
18:f9:ec:99:c0:82:20:76:fc:d6:79:c0:04:46:80:0f:bd:bb:
f6:a6:31:07:53:c0:bf:c8:7a:0d:38:4b:1d:27:ea:b5:dc:21:
0c:fd:0c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:34:24 2025 by rpki-client