Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
File: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft (raw, json)
Hash identifier: uAmncOftW/mGynFz6A0UOTXvRgyCe22p/G6dQ6QCWHc=
Subject key identifier: BB:EF:CE:C5:DE:9F:2E:11:A3:3A:EE:25:07:07:1B:FB:A4:39:87:8B
Authority key identifier: DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
Certificate issuer: /CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Certificate serial: 0196C15D827B2ED7E0D5A80792CF2D6ABAC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
Manifest number: 11F1
Signing time: Sun 11 May 2025 22:00:53 +0000
Manifest this update: Sun 11 May 2025 22:00:53 +0000
Manifest next update: Mon 12 May 2025 22:00:53 +0000
Files and hashes: 1: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl (hash: t+aH1HT2Ouj6I/KdpvVyaUr53KwBRKa45REbdjSug1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:82:7b:2e:d7:e0:d5:a8:07:92:cf:2d:6a:ba:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Validity
Not Before: May 11 22:00:53 2025 GMT
Not After : May 12 22:00:53 2025 GMT
Subject: CN=bbefcec5de9f2e11a33aee2507071bfba439878b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:c5:8f:00:cd:99:61:66:a7:a1:10:63:91:
45:1d:9b:71:4a:74:78:d9:db:ad:fe:da:07:c0:72:
53:74:48:8d:2c:7d:d6:6b:e5:f4:88:3c:1d:6c:dd:
cd:aa:57:dc:75:4e:97:61:55:5d:56:fe:52:c6:73:
f4:92:83:4b:2f:f3:5b:8c:e3:66:aa:12:31:ef:6d:
bc:0a:46:be:92:71:bf:b2:05:ad:89:d2:4a:9b:4f:
bb:63:01:3b:74:5d:3e:04:91:85:85:d8:63:ed:a7:
16:40:2f:4f:52:36:cd:96:e3:b4:9d:27:26:3e:b8:
e7:f3:be:7e:b1:24:07:57:cb:d8:61:61:18:2e:d1:
0d:e8:7d:2b:43:c6:44:fa:15:a0:d4:f8:98:a3:1a:
f3:03:72:aa:a1:3c:2f:8e:ba:01:25:e2:72:76:f9:
fe:8e:b9:29:94:28:6c:6f:23:c6:04:5c:fc:7f:41:
0c:88:53:f8:0e:4c:36:ab:5d:34:47:1b:7e:0f:50:
32:d8:74:51:af:09:db:89:db:11:76:2d:ea:b6:03:
3c:41:8e:4b:b4:c1:15:dc:4d:9b:25:a0:78:4d:92:
13:6e:1e:e2:90:cc:8a:38:e8:11:34:7b:b4:7a:c9:
01:d5:23:f9:80:25:ad:06:b5:b7:5a:a3:2c:e2:55:
69:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EF:CE:C5:DE:9F:2E:11:A3:3A:EE:25:07:07:1B:FB:A4:39:87:8B
X509v3 Authority Key Identifier:
keyid:DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:76:98:92:0b:70:f4:9a:73:a7:4b:ea:11:e2:71:ec:dd:96:
0b:15:78:e9:02:34:1e:42:67:5b:1e:e3:eb:d0:f8:ff:1a:94:
5e:15:f9:e4:40:ff:be:7e:ce:d2:66:1f:02:54:79:d6:20:da:
8b:1c:64:aa:66:50:f5:17:46:e6:80:27:d7:1c:b0:a7:bd:39:
78:e3:57:6e:c8:b9:8a:f3:c3:e8:e4:96:3a:53:8b:26:66:6b:
9c:3d:49:49:f5:dd:57:16:39:40:26:26:d8:fe:7c:fb:eb:2d:
8b:ee:33:52:ef:88:1a:ad:96:77:f5:b2:78:98:63:54:02:1b:
03:13:b9:e2:33:0a:73:1e:15:26:22:ea:c2:eb:47:c5:74:6a:
8e:03:52:3d:25:a4:cd:fe:dc:5e:a6:94:28:23:aa:ec:bc:97:
90:66:e7:e8:ce:6a:2c:8b:16:8f:de:28:69:3d:90:9a:9c:2a:
e7:01:24:4e:43:5f:c8:ef:e4:e8:6d:e0:44:0b:fe:93:19:cf:
be:6b:b4:c8:c5:af:78:41:6b:2d:db:2e:40:d5:39:8d:00:00:
6a:4f:07:dd:9c:f7:a0:9f:66:d3:9d:ab:59:65:37:3b:63:53:
24:21:89:3c:3a:35:1c:91:0e:6d:e7:ef:fa:95:59:b8:e8:6c:
03:85:fa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:28:14 2025 by rpki-client