Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
File: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft (raw, json)
Hash identifier: yxJagJRqRoIlPYaN8Ov3onEcl5tqWgGNaM7qD+fx+nY=
Subject key identifier: EF:0B:20:8F:AA:6B:40:B0:4C:7C:86:5D:8A:98:B1:F5:1A:D4:F2:C5
Authority key identifier: DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
Certificate issuer: /CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
Certificate serial: 0196D13EB09D9C1FF439C3BA5831AE105FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
Manifest number: 1539
Signing time: Thu 15 May 2025 00:01:08 +0000
Manifest this update: Thu 15 May 2025 00:01:08 +0000
Manifest next update: Fri 16 May 2025 00:01:08 +0000
Files and hashes: 1: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl (hash: FIHGPmpCqbNrVLsoHUejanx4/5CAfsbVpos+hddolNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:3e:b0:9d:9c:1f:f4:39:c3:ba:58:31:ae:10:5f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
Validity
Not Before: May 15 00:01:08 2025 GMT
Not After : May 16 00:01:08 2025 GMT
Subject: CN=ef0b208faa6b40b04c7c865d8a98b1f51ad4f2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:b1:36:6d:3e:be:ed:57:2e:9d:0f:b0:f2:
89:75:c8:48:64:17:54:87:a9:e2:08:07:64:76:1b:
86:6b:c8:f1:91:3c:83:a3:2a:5d:3a:d7:26:57:aa:
6b:38:26:49:17:a2:b4:0c:01:5f:9b:59:14:75:94:
fc:0f:c5:7d:2f:fa:d7:58:e5:da:40:7a:69:c1:8c:
d5:6b:fc:c3:2d:e2:62:ff:ef:5f:7d:3f:e6:9e:ff:
76:73:93:99:3c:03:79:6e:c7:8f:a7:50:34:35:c5:
a3:0c:3c:dc:f2:32:f8:1e:b3:9f:b7:fd:9e:9b:5d:
df:cb:11:f0:14:b7:01:47:f0:6d:52:c2:22:ca:d2:
2e:d0:63:a2:33:f5:44:48:85:ab:8b:af:f8:2d:b0:
14:7e:28:ae:ee:3e:89:0a:b2:1c:cd:da:1a:6a:90:
0d:5e:d6:00:ef:07:55:6c:bf:07:03:40:7e:e2:b4:
5e:d8:98:97:fe:68:5f:6b:ac:19:0d:31:7b:d2:c0:
1e:aa:2b:d8:b5:39:fd:b9:e8:23:1b:47:ad:da:bb:
42:fe:c2:97:7a:80:80:e1:aa:49:25:16:fc:ca:bf:
78:64:15:a0:a0:94:96:94:a9:e1:f0:f3:45:67:3c:
6e:d8:64:98:20:77:e4:66:07:64:83:5b:ce:69:79:
ca:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0B:20:8F:AA:6B:40:B0:4C:7C:86:5D:8A:98:B1:F5:1A:D4:F2:C5
X509v3 Authority Key Identifier:
keyid:DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:69:b7:bb:a6:9f:ef:0d:e7:fe:10:f0:b0:6b:26:1a:85:f8:
38:21:bf:74:ec:51:25:87:eb:84:0a:a2:59:50:b7:91:20:8c:
f7:80:c7:67:1e:e4:c3:33:83:0c:34:19:a5:9b:d3:ae:ac:3d:
08:4c:58:dd:ef:5b:be:3c:a3:45:37:2b:fd:2c:32:51:1e:c8:
5c:aa:a4:7f:50:d7:02:d1:8d:36:6d:44:e2:1a:74:0e:d9:89:
4c:46:9b:74:e8:8e:bb:57:a9:5e:17:c0:01:4b:11:ec:81:1e:
13:39:fa:7a:ae:e5:2c:67:f5:dd:8f:76:37:94:29:84:f3:8f:
83:9a:e6:bd:89:5a:66:f6:98:f3:94:7c:b2:bf:14:89:15:c7:
08:53:64:0e:ad:c2:b1:13:9b:90:2d:b6:ee:76:75:a3:b8:03:
b2:3d:bf:06:90:4e:ac:98:5b:e2:14:40:43:86:c9:54:51:33:
4a:4c:df:43:10:1f:65:0f:66:7a:90:43:0a:78:92:b8:b0:98:
52:43:d5:b6:07:6a:3e:72:2b:82:ee:14:76:5e:d5:1b:63:1a:
a1:8a:de:07:b1:42:f7:96:1a:f6:97:5c:4a:67:f0:29:7d:c8:
7d:cb:b7:05:f1:2e:df:a3:78:7d:5d:0e:eb:b8:26:21:0a:87:
a5:06:f9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:02:31 2025 by rpki-client