Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
File: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft (raw, json)
Hash identifier: 3htTAt8dUjvL0yw8MgHwySU1fg1n2Eo90k+H+UHmwtk=
Subject key identifier: F0:F0:FF:08:82:63:08:00:15:76:D8:4B:86:96:52:91:42:C7:A9:5F
Authority key identifier: DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
Certificate issuer: /CN=df180e0543d471dcf0d83860d6be6395c2b88888
Certificate serial: 0196B3D8CFA0CF929949BA5125038F4B22BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
Manifest number: 088B
Signing time: Fri 09 May 2025 07:00:52 +0000
Manifest this update: Fri 09 May 2025 07:00:52 +0000
Manifest next update: Sat 10 May 2025 07:00:52 +0000
Files and hashes: 1: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl (hash: kUqpLKXMuKU+h5xcj33o71sNV8vG2AY295CViU3FtyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:cf:a0:cf:92:99:49:ba:51:25:03:8f:4b:22:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df180e0543d471dcf0d83860d6be6395c2b88888
Validity
Not Before: May 9 07:00:52 2025 GMT
Not After : May 10 07:00:52 2025 GMT
Subject: CN=f0f0ff08826308001576d84b8696529142c7a95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:31:ff:a5:44:24:db:f2:5b:4f:32:c7:0d:
29:14:ad:6b:74:ec:41:91:3b:6f:05:20:7b:2c:31:
a3:5d:0a:6d:97:ed:2f:c8:ef:cf:bd:64:54:0b:e2:
5f:6b:37:16:8c:7a:da:e0:8e:5f:06:72:5b:1b:e2:
4e:55:8a:40:9c:3a:76:84:d4:a8:52:f2:bf:7e:6a:
0b:9f:a8:52:b4:50:75:45:0c:06:d7:2c:ac:cd:62:
9f:36:96:df:ab:f6:91:cd:f1:9d:17:5a:1b:f6:ae:
2e:d7:ef:66:56:e2:e3:3d:f6:79:37:dd:ae:5a:e6:
68:39:ed:ee:43:1b:0e:cf:b3:28:a9:9c:f8:5b:65:
2a:de:82:33:f5:25:e3:4e:0a:6f:b7:8b:7b:36:aa:
24:f2:b4:f0:75:5c:29:bb:b7:5e:b8:18:b8:56:93:
fc:f0:b2:79:da:a5:54:36:9c:d8:b8:3a:aa:c1:cf:
9a:c4:a2:ca:8f:d3:ea:64:0f:5e:db:91:41:db:98:
44:3e:53:e3:8f:8d:c6:5d:07:f3:cf:c1:18:5d:e5:
73:c3:ae:76:b1:c6:2f:05:8b:ce:92:28:77:bf:4a:
3d:a7:eb:eb:dd:b7:fa:84:09:a6:65:d3:ca:f2:f8:
ab:bd:79:5a:56:62:9b:64:c8:52:32:f4:78:e0:25:
98:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F0:FF:08:82:63:08:00:15:76:D8:4B:86:96:52:91:42:C7:A9:5F
X509v3 Authority Key Identifier:
keyid:DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9e:b4:b4:e4:b1:40:c6:88:da:67:fd:b3:40:58:cf:5e:7e:
0c:3b:89:9f:67:a6:e3:58:ef:81:59:29:3c:68:65:a6:c9:15:
50:50:0d:8c:01:11:ba:6b:57:be:36:4d:c5:3b:c9:6e:db:8a:
e4:98:0e:c2:06:5c:aa:b5:aa:01:59:8d:39:e5:e1:d3:e1:4d:
21:f7:db:28:7b:c4:95:08:10:14:cf:da:c2:32:6c:1e:5b:c7:
3a:b2:a7:b9:bf:d4:48:14:6f:18:1c:4e:91:b7:fd:76:aa:43:
fa:4f:75:fb:74:d5:07:65:c4:08:a6:fc:b8:6e:ed:78:54:0f:
55:d8:6d:a3:6b:05:25:7c:12:38:8d:2e:26:da:d2:48:cd:fb:
43:de:fd:d5:76:3a:2b:7c:3a:4f:ea:4d:98:2f:92:89:6e:a6:
1a:2a:6c:5a:4f:87:f7:6d:de:c3:b7:5a:7d:18:d9:7b:f0:47:
7c:1b:51:9c:d7:1e:8e:e0:f0:e3:d6:04:8a:aa:87:69:b5:f3:
9a:1d:74:6e:c1:a6:9a:a1:5c:e8:dd:1b:27:fe:1a:c7:59:2c:
f1:04:b9:b4:00:c7:c2:c6:c2:22:6a:c0:a4:52:64:3f:f7:f9:
03:49:d9:c5:4a:ac:aa:01:75:31:d3:3c:88:7a:20:25:6a:f3:
bd:88:ea:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:02:49 2025 by rpki-client