Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
File: 3DU3KrVODfO_UU1fCMpS5De9kaQ.mft (raw, json)
Hash identifier: ieJrIVFxOp5ynjlQ7kC34BrWMHE9jogDOP/PAVXUlyc=
Subject key identifier: B7:4E:CE:4A:47:33:7B:56:66:BB:C6:92:25:D2:93:BD:32:23:0D:CC
Authority key identifier: DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
Certificate issuer: /CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Certificate serial: 0196C6BAD9776B8A2341C64C079C5E64FD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
Manifest number: 048A
Signing time: Mon 12 May 2025 23:00:56 +0000
Manifest this update: Mon 12 May 2025 23:00:56 +0000
Manifest next update: Tue 13 May 2025 23:00:56 +0000
Files and hashes: 1: 3DU3KrVODfO_UU1fCMpS5De9kaQ.crl (hash: 9Ziy+mA3uKEnXOf4riNQ1oIpaf1dYRKjr0eL/BGRMS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:ba:d9:77:6b:8a:23:41:c6:4c:07:9c:5e:64:fd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Validity
Not Before: May 12 23:00:56 2025 GMT
Not After : May 13 23:00:56 2025 GMT
Subject: CN=b74ece4a47337b5666bbc69225d293bd32230dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:69:35:b4:20:2b:59:e6:22:a2:66:e5:7f:
59:37:4f:5d:62:68:12:33:04:1b:78:68:a7:88:8a:
19:81:bf:b5:c6:e7:45:be:16:ea:40:de:01:61:dc:
93:bf:45:01:f7:25:98:ff:68:4c:97:9e:aa:7b:eb:
3c:f1:2f:d1:ca:50:51:e4:84:80:55:bb:26:64:90:
40:4c:4b:c0:4e:f5:73:f0:03:0a:a1:81:1c:e0:fd:
98:73:35:2c:5d:e2:0a:0e:81:f3:f1:5e:cf:7c:80:
49:d9:d4:7e:d5:e0:9e:18:70:ad:f0:0f:7e:3e:30:
11:8b:d8:90:e3:d8:ab:fa:89:59:74:ca:24:cc:cc:
87:b2:a0:80:cb:ee:7f:19:ea:85:63:d9:9a:68:c5:
6a:a4:fd:42:2b:dd:8b:f1:88:6c:ab:a5:9d:ea:80:
d6:78:37:fd:e5:16:5d:d3:60:40:af:78:29:34:cc:
1f:75:86:db:28:3b:be:d5:46:af:f2:eb:ca:bb:b1:
bd:7d:86:88:5f:51:2d:d9:58:cc:12:e4:af:c3:3f:
bd:d5:65:fe:32:1c:81:ae:9a:80:ac:f1:bf:00:98:
44:54:77:d2:f7:ed:76:42:ac:aa:fb:2d:d9:36:c6:
d9:a9:4d:8b:21:e9:0c:3c:59:c4:73:12:e1:ce:39:
79:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4E:CE:4A:47:33:7B:56:66:BB:C6:92:25:D2:93:BD:32:23:0D:CC
X509v3 Authority Key Identifier:
keyid:DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:57:9c:78:9a:e6:e8:3d:37:80:9e:7f:2d:97:2d:a5:1f:da:
9d:f3:b6:ba:2c:a8:3d:33:b0:26:4b:59:cd:09:ac:64:75:b2:
56:1b:c7:19:45:a5:60:7f:fc:94:31:c3:fb:74:11:d2:c3:26:
8b:48:dd:4b:66:ad:e7:a4:a5:17:ff:b1:77:c3:05:86:25:bb:
d8:af:31:ff:fb:a4:d0:47:47:30:df:11:2a:fa:05:87:41:70:
7d:2a:39:1c:27:0f:0b:ea:95:7c:a6:f3:01:e2:ca:eb:68:60:
b2:86:49:e5:0e:60:2b:f5:df:ba:e6:fc:16:cb:66:0f:5e:7a:
68:0e:56:1c:61:1b:b7:28:d3:e6:90:e1:41:74:d2:e1:3b:fb:
dd:3a:89:7f:23:7d:57:3b:a3:b0:7d:0b:2d:b0:6e:f1:ad:4c:
85:84:dd:39:6a:a6:77:cf:fa:54:6c:ee:55:6f:5b:f3:52:4b:
74:95:c6:3f:cb:69:37:9e:6b:4f:35:0a:ac:22:cf:9b:ef:6c:
5a:12:44:8d:4a:c5:35:fa:c4:a8:04:ea:03:62:6c:ba:6f:10:
e7:86:7d:bd:60:70:14:9e:25:0a:83:2f:80:da:04:99:d0:41:
da:90:eb:a4:8f:1c:0c:a8:a6:84:c9:cd:a1:17:bf:28:72:58:
2f:45:ee:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:13:47 2025 by rpki-client