Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier: uUsV7eCMflu/kczsIUWEhWF4U38WoZHQGS+Mkebm3cg=
Subject key identifier: 7C:B7:25:D2:ED:B2:4F:BD:85:80:FD:F7:BA:5E:74:68:80:D9:5E:A7
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer: /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial: 0196BF6EE7A59E68BBB576805194DA95CE3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number: 0C1A
Signing time: Sun 11 May 2025 13:00:38 +0000
Manifest this update: Sun 11 May 2025 13:00:38 +0000
Manifest next update: Mon 12 May 2025 13:00:38 +0000
Files and hashes: 1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: cF+q/8F6dRwkhhRRHLpf512poIIGgkHFQO8jY2XrpBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:e7:a5:9e:68:bb:b5:76:80:51:94:da:95:ce:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Validity
Not Before: May 11 13:00:38 2025 GMT
Not After : May 12 13:00:38 2025 GMT
Subject: CN=7cb725d2edb24fbd8580fdf7ba5e746880d95ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:30:23:ef:29:8c:66:57:eb:3b:f1:05:ed:
7e:96:92:4f:9a:34:52:f6:1b:37:e5:cb:9a:fa:c6:
21:61:17:39:74:04:94:c0:7c:4d:f1:6f:35:c4:60:
38:33:be:4c:29:0d:4f:89:d3:e5:3a:df:87:f9:85:
22:96:db:ca:b2:38:5e:d2:e7:b8:73:5d:e1:e7:53:
41:ba:85:0d:63:07:f5:e9:e2:e9:62:00:8f:b8:09:
bb:8a:a9:f8:0c:99:e3:51:b3:a6:04:8d:e1:fb:75:
19:7c:29:ba:a9:6f:63:a1:72:9b:7d:4e:ac:12:63:
b1:00:39:eb:b0:a1:3f:c5:46:03:36:87:4f:93:cc:
cb:11:56:30:2e:ad:aa:86:50:1a:3f:c0:41:75:02:
24:76:5f:ba:30:30:0b:63:ef:72:c7:35:7f:4e:e6:
6a:6b:f1:0d:23:92:26:e3:81:2d:1c:d2:53:99:82:
88:92:ab:40:1b:c4:86:43:cf:4c:8f:3d:ae:a1:2b:
f7:a1:83:a8:f2:55:bf:ca:87:d3:ca:47:c8:e6:88:
d1:d6:bf:66:b6:1e:25:4c:fb:7d:cd:6a:8f:4c:6c:
e3:ce:79:71:f9:75:fb:62:d7:d8:3f:dd:a1:6a:6d:
e5:00:c6:ce:d3:63:bf:60:ba:4b:32:3d:0d:8d:ec:
4e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B7:25:D2:ED:B2:4F:BD:85:80:FD:F7:BA:5E:74:68:80:D9:5E:A7
X509v3 Authority Key Identifier:
keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:50:22:ff:32:78:dd:92:ed:ca:7c:f8:18:16:41:4a:73:67:
0c:24:ba:0c:40:7e:d7:08:25:53:d9:86:ed:f5:ca:88:fc:9f:
0a:dd:c8:64:42:1e:ad:eb:e6:2f:e0:1e:3d:9e:31:cc:1c:d3:
6b:93:27:92:5f:6a:55:0d:ef:41:6a:41:9d:a5:8d:f7:ed:18:
27:36:8c:1b:24:1c:4d:68:96:4f:a0:05:7d:e3:6e:6b:68:f5:
57:c2:09:c7:3c:a9:fa:54:d9:3d:fb:ba:e0:39:af:2f:a3:3a:
04:b6:84:ad:e7:e6:1c:d4:ed:65:6d:9e:d5:1b:21:9d:2e:e9:
94:48:55:c0:ba:21:4a:f3:b1:02:8c:e8:55:46:8d:2c:ab:d7:
c5:58:26:78:d6:a6:a3:97:5f:9f:c2:97:82:16:e1:bf:52:37:
6e:9c:cd:c4:12:a6:85:27:ab:7d:e1:ca:94:42:01:e0:eb:5a:
e1:8a:91:6d:d2:7a:2b:d1:00:ee:09:99:ee:a8:0c:db:58:34:
52:1d:95:de:2f:2c:3a:5f:8a:66:c4:30:91:30:43:2e:d4:63:
cb:53:aa:2b:25:19:52:2a:bc:f6:61:17:66:cd:6b:15:f9:51:
4c:ed:1c:69:04:bf:6c:31:0a:68:82:48:fd:a5:27:e0:35:b7:
fb:ad:89:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:12:37 2025 by rpki-client