Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
File: x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json)
Hash identifier: 9+VLNvzsIIwN3C22SnmQ5htkIg4L4W0rz/YEAKrHrp0=
Subject key identifier: 7D:BC:B7:2F:C8:9D:51:C2:BD:8F:29:24:1B:DF:1A:32:0F:F9:B6:86
Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
Certificate issuer: /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Certificate serial: 0196C3B9E5217A658BD885382899AF178FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
Manifest number: 056F
Signing time: Mon 12 May 2025 09:01:02 +0000
Manifest this update: Mon 12 May 2025 09:01:02 +0000
Manifest next update: Tue 13 May 2025 09:01:02 +0000
Files and hashes: 1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: siH597RNczQPizIa3YF+CaXnepMg21svXqQwgUtxF3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:e5:21:7a:65:8b:d8:85:38:28:99:af:17:8f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Validity
Not Before: May 12 09:01:02 2025 GMT
Not After : May 13 09:01:02 2025 GMT
Subject: CN=7dbcb72fc89d51c2bd8f29241bdf1a320ff9b686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:24:bf:9b:be:b6:a3:25:cd:21:b2:0d:ed:
25:8a:bc:18:26:28:28:3b:0f:f3:da:eb:6e:69:6c:
1d:00:31:04:d2:ea:d0:05:b9:f2:36:0e:80:d3:de:
6d:56:a4:a4:3e:58:25:c7:9f:c6:91:60:11:a9:5f:
aa:72:35:27:69:7f:3a:5b:b8:c4:ba:69:8e:ba:a2:
b1:ec:77:b0:f9:0d:e8:2e:4b:37:c6:4d:82:bf:2c:
6d:ef:b0:c9:02:16:e6:11:1f:ec:3b:a7:53:55:68:
dc:08:c6:2a:07:ae:d9:40:05:3a:2c:c4:2a:f3:85:
a9:75:be:35:f4:c2:4d:8c:48:f1:90:e2:98:28:0d:
b3:31:b8:88:94:fb:0c:9b:ef:73:5d:91:bb:c7:02:
77:82:be:5d:3c:81:de:fc:72:ce:75:41:83:e2:84:
b7:7d:98:a2:67:4c:bd:03:7b:66:49:c4:58:79:64:
72:c6:3d:11:84:a6:84:f7:2b:42:03:17:9a:5e:96:
f0:98:61:25:3e:32:38:56:1a:38:fb:51:48:ac:b7:
5b:7f:e6:5c:17:9e:d5:85:da:dc:df:43:a6:0c:78:
b9:31:ee:9a:f3:19:e8:18:2c:4d:f3:f4:06:a2:3a:
8b:90:94:54:c1:27:9f:0a:48:f4:8a:28:c7:dd:f2:
9f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:B7:2F:C8:9D:51:C2:BD:8F:29:24:1B:DF:1A:32:0F:F9:B6:86
X509v3 Authority Key Identifier:
keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0e:84:ff:84:d0:e2:ba:a9:04:1a:4d:e2:6f:2a:ff:fa:c5:
9c:5d:1f:12:65:cb:8a:0f:fe:8e:f9:52:c8:ac:dd:93:28:70:
06:01:ac:4f:17:cd:dd:80:4a:af:fe:c3:68:68:42:fc:11:ae:
bc:89:f5:56:85:1d:6d:57:4b:99:3f:3e:79:39:fe:17:b0:15:
dd:94:8e:3e:fd:fb:6b:3d:a1:c7:b6:ec:40:27:cd:65:64:7c:
8f:4f:c3:87:5b:83:fe:7c:17:50:ae:c7:bc:fc:89:a1:63:b9:
d5:b2:84:9c:9e:00:86:32:36:b1:a9:0c:26:de:cd:54:7e:2a:
3d:8a:ff:1d:38:17:c3:99:9c:a0:fd:d9:36:99:21:e5:e7:c2:
3e:7e:27:6f:79:6d:61:f1:e3:05:2f:8a:2e:8f:0f:e8:b7:5e:
df:43:0c:43:f5:9a:2b:bc:43:65:71:62:b0:82:91:e7:22:b7:
a9:32:1a:a9:05:f4:2c:ff:be:13:19:e5:0e:34:e3:94:19:9d:
c1:26:9a:37:e5:f9:9b:46:48:e1:c2:da:5a:1b:bf:da:3a:4e:
12:99:79:76:66:23:fb:b4:6d:7d:67:ac:4a:6d:62:e6:9e:e7:
38:bc:7f:2b:31:52:ad:ba:28:2b:24:d4:eb:00:a8:02:b5:12:
90:ad:31:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:57:45 2025 by rpki-client