Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
File: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft (raw, json)
Hash identifier: DnoudCHjAwsJFeGRkiliqyRDwGwI76Wz4i3W7877oyk=
Subject key identifier: 02:B4:56:C9:86:46:BE:5D:0F:18:B0:4B:10:8F:C5:FB:60:DF:FC:3D
Authority key identifier: DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
Certificate issuer: /CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Certificate serial: 0196DA77E83203B2CA887FA020E2D8B5EE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
Manifest number: 14BA
Signing time: Fri 16 May 2025 19:00:13 +0000
Manifest this update: Fri 16 May 2025 19:00:13 +0000
Manifest next update: Sat 17 May 2025 19:00:13 +0000
Files and hashes: 1: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl (hash: pYg16MKYtHels1MrNzOg4drsmkQQJPkXXVW1X2gnBt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:77:e8:32:03:b2:ca:88:7f:a0:20:e2:d8:b5:ee:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Validity
Not Before: May 16 19:00:13 2025 GMT
Not After : May 17 19:00:13 2025 GMT
Subject: CN=02b456c98646be5d0f18b04b108fc5fb60dffc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:b3:cf:f0:e1:c7:fb:4d:d7:3c:a8:4b:41:
d7:35:d0:a9:d7:24:ce:c6:e5:64:39:07:e7:e3:37:
be:22:1f:24:fc:08:eb:7e:f3:d3:1f:ce:09:a2:da:
37:0a:e4:af:b3:33:ed:9f:e7:c0:16:6e:7f:dd:6f:
95:45:77:f1:02:54:1d:86:76:67:60:60:3d:8b:3c:
3e:6f:6f:c8:a2:88:ec:f9:e3:4a:f5:4a:b7:9f:35:
02:9d:f2:40:fb:f5:c9:9b:62:ad:f6:78:64:ab:bb:
69:76:60:97:22:33:8e:6a:4d:53:c5:10:7c:09:c1:
15:f2:48:d5:a2:b6:5a:f8:5c:cf:4e:4b:d2:98:9e:
ca:2f:18:3f:83:ce:d9:64:9f:05:eb:5a:ef:a1:bb:
52:ec:53:b1:ab:6f:94:43:5e:93:da:00:df:b5:10:
db:fc:2e:e6:25:6b:ab:75:a7:f9:66:db:7f:82:33:
6c:b7:e5:d2:8d:85:c2:c9:bb:c1:55:a4:b6:6c:83:
08:53:c3:50:3f:78:26:72:fc:ca:15:f8:d7:b0:16:
9b:37:64:6c:4e:04:2c:ce:fa:5e:8d:ed:c6:c0:43:
df:10:a0:f1:02:f9:66:fc:ae:97:3a:ad:74:24:ac:
25:5a:c5:87:1e:5b:df:a6:a7:92:26:65:54:5c:b5:
88:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B4:56:C9:86:46:BE:5D:0F:18:B0:4B:10:8F:C5:FB:60:DF:FC:3D
X509v3 Authority Key Identifier:
keyid:DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4a:97:8c:7f:1d:61:e9:6a:d3:e4:6e:e8:e2:63:9e:63:0c:
cb:2b:46:74:dd:f1:a9:c3:5f:86:cb:59:77:99:c5:ef:30:8d:
21:4c:55:6d:c2:43:98:49:9a:df:3f:56:90:8a:c0:59:85:b8:
4d:a5:7c:52:3e:2b:ff:35:bb:d2:0f:2e:c3:81:9f:e5:66:b9:
94:fd:a0:e8:8b:60:ba:05:b6:21:f8:9c:3a:52:98:07:f8:2b:
7f:89:f2:e8:7f:fd:14:b2:20:16:26:b9:f0:cd:9c:40:62:17:
60:21:2e:1e:1a:39:46:54:6d:8e:1f:81:b8:ff:0e:5a:dc:99:
82:78:92:f1:52:7e:25:cb:70:69:20:31:12:dc:53:66:32:ed:
18:33:5e:dc:d6:cd:e5:a3:5e:4b:67:11:c5:c7:45:96:4c:b8:
af:1d:7b:06:37:1d:f5:c6:0d:1d:4d:37:22:ec:2d:57:2a:78:
56:21:03:e8:ad:09:d4:03:85:7b:5f:7a:f7:de:78:bf:26:07:
cd:6b:28:d8:eb:67:e9:af:69:a3:50:42:5e:b0:7b:b0:7d:e5:
d8:5c:ea:93:f6:db:96:0d:c7:71:db:cd:43:9e:d7:fc:80:bc:
e5:7b:96:74:66:7e:b8:d0:cc:78:f5:94:09:79:96:3d:10:58:
a1:6d:ba:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:29:12 2025 by rpki-client