Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File: 35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier: /twP3P2guRo53j8C9YahDWNAO6i5Pe2q5d5Jlm4R6kY=
Subject key identifier: 81:5C:12:11:47:3E:C2:15:AF:51:90:39:CD:7B:98:50:F0:31:B5:EA
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer: /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial: 0196C803C182FCDB1C97EC42042384730376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number: 0C43
Signing time: Tue 13 May 2025 05:00:11 +0000
Manifest this update: Tue 13 May 2025 05:00:11 +0000
Manifest next update: Wed 14 May 2025 05:00:11 +0000
Files and hashes: 1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: EPinFF8SvbIZaV6E6Q2yG8/WK69YZwHHIrbnHx0uqKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:03:c1:82:fc:db:1c:97:ec:42:04:23:84:73:03:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Validity
Not Before: May 13 05:00:11 2025 GMT
Not After : May 14 05:00:11 2025 GMT
Subject: CN=815c1211473ec215af519039cd7b9850f031b5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:f1:37:d4:b4:d1:04:44:34:ba:98:2f:c7:
a4:fc:9b:eb:24:4b:9b:12:de:d0:5d:4d:6c:9c:77:
f7:cb:e9:92:6a:e1:df:1f:47:c3:bb:db:b1:4a:37:
23:0f:e0:1e:62:90:ce:94:57:4b:49:20:98:dc:4f:
1a:96:03:61:98:ac:7a:bd:1d:28:b4:de:7c:1b:5a:
9b:a3:35:de:37:62:be:83:11:9b:50:b4:5e:12:71:
d2:1d:41:51:5e:e3:5c:98:f4:33:06:0f:d1:47:a8:
e9:b9:a9:54:d3:3a:ab:2e:ab:16:93:d0:86:0e:eb:
dc:6b:59:f3:22:d4:f2:12:32:dc:31:f1:85:4b:7a:
04:c7:27:15:77:3a:3f:03:8c:3d:8e:e9:d0:17:ef:
25:0b:2a:7a:c6:ab:25:60:18:fa:40:a9:de:c5:67:
f8:cd:fe:b8:77:ba:a2:61:f1:cf:b7:42:49:7b:59:
da:64:88:aa:a0:2d:e5:2d:dc:1e:b7:6c:26:d3:14:
b3:ff:c7:b8:33:64:f8:02:06:0a:5e:36:75:68:8e:
96:23:3e:55:fe:49:3c:fa:ec:59:25:18:df:f3:68:
c5:1e:94:6e:af:fe:9b:47:12:65:81:72:0d:6a:da:
8b:ba:87:ea:a9:64:44:a2:57:21:d0:bf:7f:45:51:
bd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5C:12:11:47:3E:C2:15:AF:51:90:39:CD:7B:98:50:F0:31:B5:EA
X509v3 Authority Key Identifier:
keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:87:7c:65:ca:11:da:58:44:14:ee:9f:f8:6d:14:9f:74:3b:
57:50:e5:53:0d:06:6a:02:81:46:1a:fd:5c:83:5c:a8:f0:0b:
fd:6f:1d:13:46:30:c6:b9:d9:0b:86:55:39:7f:92:e6:6b:7d:
97:86:cd:30:17:7a:4e:4e:a6:4d:83:81:96:2a:4d:08:c3:f8:
b9:ca:50:13:9b:20:da:3f:85:c1:87:27:7c:02:f3:f4:4a:69:
42:2c:98:bc:bb:45:48:00:86:24:ba:7f:2e:08:b9:64:87:69:
f5:85:86:05:e3:5b:fd:22:04:2f:f7:19:e9:75:01:3c:9a:15:
f2:15:07:ef:b6:46:4f:2f:fc:9f:49:0d:a5:59:99:d4:5d:cc:
37:76:81:50:c2:3e:1d:b9:0d:38:78:8d:46:8d:5c:a6:5a:c6:
66:a5:3c:99:83:ea:56:e8:2d:bc:2f:09:04:4b:7a:04:91:b5:
89:d0:4b:b5:9a:f2:a7:56:3b:c2:c2:6c:d9:c3:2f:bd:45:50:
ca:7b:c4:ff:a1:1a:e7:f1:f9:51:c3:40:b0:6c:eb:87:cc:97:
cf:d2:8f:0e:5c:a6:01:f7:c5:bb:8a:c8:a2:e2:d7:c2:9d:0a:
af:a4:a7:0d:29:c4:f4:2b:e0:8a:84:34:86:e4:d8:e6:83:ac:
bc:45:3c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:20:35 2025 by rpki-client