Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
File: 40Y1lMN3zViH3pB4tLLozcTTrls.mft (raw, json)
Hash identifier: TBkzGtn29K45dAXYNMhsCl98jNw/du5t4mXzFEtCbqU=
Subject key identifier: D9:3E:83:3F:DC:08:B2:3A:35:10:14:4F:78:68:F5:9F:18:08:69:08
Authority key identifier: E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B
Certificate issuer: /CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
Certificate serial: 0196BFDD49A89BA43626295360AD671232DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
Manifest number: 0379
Signing time: Sun 11 May 2025 15:01:12 +0000
Manifest this update: Sun 11 May 2025 15:01:12 +0000
Manifest next update: Mon 12 May 2025 15:01:12 +0000
Files and hashes: 1: 40Y1lMN3zViH3pB4tLLozcTTrls.crl (hash: c5S6GrRPfPfNZJcgfxYQy49rY7+Oxy7IYBAgIWLDOyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dd:49:a8:9b:a4:36:26:29:53:60:ad:67:12:32:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
Validity
Not Before: May 11 15:01:12 2025 GMT
Not After : May 12 15:01:12 2025 GMT
Subject: CN=d93e833fdc08b23a3510144f7868f59f18086908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:b3:c0:49:ca:ce:0a:f9:a7:f2:42:ce:49:
77:5c:ac:1b:c8:ca:05:69:bf:d1:2b:73:d0:5f:74:
46:37:20:22:5f:33:26:3f:e3:74:7c:a8:91:9a:d9:
29:ff:81:b5:fc:13:f3:32:b8:67:d1:4b:99:67:86:
a7:f4:18:bc:86:6e:9f:95:e9:5f:ee:87:b0:68:19:
2e:30:c5:07:c8:43:d7:28:3a:d5:aa:ba:fe:e8:0f:
41:9d:37:3c:4f:4d:12:43:cc:01:b0:33:67:34:17:
b8:a8:01:bf:6d:4f:bb:68:7e:4b:52:9e:67:33:14:
0c:df:72:a8:f4:1a:53:ee:6c:08:2d:2b:b9:1c:a6:
68:4b:bb:72:6c:71:c0:ad:10:b1:f1:e3:26:db:62:
7c:10:5f:70:08:c4:19:1c:4d:cc:ca:58:d9:e4:1c:
ca:f5:0c:a9:ed:70:2d:c5:69:21:9a:60:e5:da:ab:
d6:50:74:13:66:38:3a:aa:4b:6c:2a:6e:b8:a7:7b:
a2:c8:27:01:3e:69:c5:41:02:57:05:43:79:08:53:
39:9b:76:af:67:e1:1f:9d:07:88:8b:40:ad:a1:dd:
cb:38:53:c8:29:c6:bb:fc:db:ca:5e:0f:bb:b6:d6:
ce:9f:11:19:cb:e8:42:1c:fa:1b:d1:6c:ff:70:29:
8c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3E:83:3F:DC:08:B2:3A:35:10:14:4F:78:68:F5:9F:18:08:69:08
X509v3 Authority Key Identifier:
keyid:E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a0:9e:7d:39:29:66:c8:87:52:1f:d1:a9:7f:69:f5:14:79:
2f:63:58:09:36:ed:4b:3d:1b:26:39:32:16:3f:13:d7:70:f1:
d2:a7:af:15:06:0d:db:69:a7:c1:b1:06:da:52:6e:48:42:fe:
2f:d3:19:9c:e3:df:af:bd:93:b4:1c:71:c8:f7:94:35:44:a5:
68:57:e8:0f:b9:cb:21:b9:07:4b:aa:06:49:25:6f:07:8c:03:
bc:d6:d9:65:8b:3e:c7:68:5a:6e:84:c6:4a:c4:33:6a:5d:0c:
35:89:e1:77:91:38:10:e8:e0:c3:96:b0:f5:30:c8:22:01:d6:
de:f9:dd:c8:5f:0a:bd:e7:39:f8:7d:e5:46:c0:25:6d:4c:6f:
e6:65:20:99:f5:5e:27:12:f5:87:61:de:ad:86:c7:e6:0c:7e:
74:e1:8a:44:99:72:90:44:c5:9d:4a:e1:df:9f:f4:90:dd:28:
78:45:7f:d4:19:18:13:af:55:ff:c1:94:43:59:ef:80:1e:f5:
99:28:12:bc:64:a6:94:98:f7:b8:f7:89:d6:02:b5:2e:c6:db:
05:eb:27:a7:47:5d:a0:0b:cc:c1:27:a6:27:ab:6a:5c:da:81:
2c:39:4b:77:64:e4:87:8e:b0:cd:24:64:da:f0:3d:04:de:b6:
8e:d8:18:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:10:22 2025 by rpki-client