Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: sxOR1/fmLW6OPuHFjp+tU4E+1UlCFVQ9mvsHI5QCdE0=
Subject key identifier: C9:AA:24:E4:5A:5D:E1:B8:D7:84:B1:32:8C:D8:90:D8:62:D3:44:72
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 0196A12D4AB5AAE5EF349949CD43F975648F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 040C
Signing time: Mon 05 May 2025 16:00:21 +0000
Manifest this update: Mon 05 May 2025 16:00:21 +0000
Manifest next update: Tue 06 May 2025 16:00:21 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: V988EV8+5Pq2YW40IaSKYDsDawlPfN1eq9RuGcB5aDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:4a:b5:aa:e5:ef:34:99:49:cd:43:f9:75:64:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: May 5 16:00:21 2025 GMT
Not After : May 6 16:00:21 2025 GMT
Subject: CN=c9aa24e45a5de1b8d784b1328cd890d862d34472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f0:02:0e:66:de:76:d9:60:d4:d3:b5:6e:c8:
7d:24:15:72:25:19:9c:31:2a:5a:59:39:19:ff:53:
c2:84:42:71:70:15:07:62:c0:af:95:12:f2:06:4f:
9b:72:23:3a:a5:50:5f:54:5c:26:34:ad:87:81:4e:
e7:c9:40:d2:7f:d6:7f:18:1b:44:b5:5f:ce:25:52:
16:8a:84:8d:de:43:0b:73:a8:3b:2b:49:c3:bc:e7:
e2:ef:99:7a:c0:11:dc:05:10:b7:9f:60:d9:11:af:
be:a7:fe:d7:68:e4:e2:cf:7b:99:da:9f:24:98:7d:
1d:25:62:1e:cb:28:e4:3f:f1:f8:21:70:14:08:46:
8a:c7:e1:08:4e:7b:41:e1:36:ef:9c:3f:89:ac:9a:
d7:ce:9c:57:df:2d:84:a1:93:02:19:7e:d0:30:01:
23:99:09:51:f4:d6:30:fc:b8:c1:0d:47:80:c4:6d:
82:bf:19:79:96:9b:21:b3:8a:b2:98:1b:89:9e:a5:
50:99:40:09:29:d5:7e:79:5d:2c:53:fc:f4:b9:8f:
75:35:ad:da:91:4a:3e:cd:f8:ea:b2:86:70:72:81:
34:65:c0:73:19:c2:ed:a9:2e:14:37:fe:b1:1f:25:
6a:e4:86:8f:90:78:19:35:eb:0b:67:83:1f:1a:da:
c8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AA:24:E4:5A:5D:E1:B8:D7:84:B1:32:8C:D8:90:D8:62:D3:44:72
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:01:70:7b:9d:fa:cc:56:7a:a2:e5:1e:92:e7:cb:00:0b:0b:
16:49:5a:f1:72:8a:df:2a:d3:74:f0:22:e4:dd:7a:b6:57:43:
53:cd:9c:f9:15:6b:4c:91:b5:57:ec:a9:2a:8f:bb:4f:ad:65:
c7:71:df:7c:21:63:96:fe:5b:5c:f0:57:8c:ff:b5:b8:6b:63:
a9:30:63:cf:2c:b4:2e:8f:66:fa:ee:ca:97:d8:70:52:8e:63:
72:30:6e:fd:b1:db:84:98:84:fe:fa:a1:ce:49:22:96:ca:e8:
d8:a5:d6:4a:3b:b2:74:ad:1f:35:35:ac:3a:b8:cd:10:84:74:
70:29:c2:98:f1:8b:7e:a2:b7:43:c6:77:1c:68:91:da:ca:b7:
19:c0:df:28:06:48:85:3c:a3:48:67:60:6c:2a:f6:6e:56:f1:
f7:67:6c:9f:d2:1f:8f:95:8f:6c:45:00:43:b5:ff:87:5e:ce:
d7:0e:eb:92:34:d0:e6:f8:0e:e3:39:b7:49:5d:43:96:47:32:
89:fa:fb:5e:c8:12:b9:b9:aa:65:e8:cf:c0:ee:6d:7c:c0:41:
83:cd:31:22:8d:97:af:97:dd:59:d9:6f:ae:8d:59:de:9c:bc:
6c:e2:3e:0d:2e:da:1e:9f:81:55:8e:e9:73:13:c7:b1:dd:92:
69:3f:3c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:23:11 2025 by rpki-client