Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier: 5YKohlTJ8kAzKI7Qb2sUUv9RVtkz0QlzuvXUW/oMfJk=
Subject key identifier: 5F:1A:68:12:FD:1C:E0:9F:86:F3:B4:35:4C:12:34:12:A0:5A:52:B1
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer: /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial: 0196AA30851A9A73B7DD6BBCD5721A348468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number: 1526
Signing time: Wed 07 May 2025 10:00:28 +0000
Manifest this update: Wed 07 May 2025 10:00:28 +0000
Manifest next update: Thu 08 May 2025 10:00:28 +0000
Files and hashes: 1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: 2omIfmeKGW37sX6jOqB9u3YhMkQms9nL1xaFGuh1lPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:85:1a:9a:73:b7:dd:6b:bc:d5:72:1a:34:84:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Validity
Not Before: May 7 10:00:28 2025 GMT
Not After : May 8 10:00:28 2025 GMT
Subject: CN=5f1a6812fd1ce09f86f3b4354c123412a05a52b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:93:40:b0:7f:eb:60:62:e0:36:8d:5f:42:
8c:c9:41:9e:64:1f:e8:42:1c:65:6a:e2:6d:4a:57:
b3:62:1c:f7:02:0f:4f:c1:08:e0:1c:c1:15:0d:1f:
a2:da:d6:ba:ab:ed:d0:c8:95:00:d4:64:08:6d:75:
16:fb:ce:5b:ee:36:6a:83:ba:0b:7f:d5:83:a1:cb:
75:cb:10:6b:cd:42:4b:1d:66:13:36:ad:a3:65:a6:
7e:c9:e4:9b:eb:dd:f6:a5:fb:d6:1b:78:30:5a:13:
76:81:b8:d5:71:81:91:bc:23:31:8b:04:a7:99:cf:
92:92:9b:b1:ae:38:5b:f6:f1:0c:23:8d:be:01:12:
33:af:a8:36:1a:64:86:90:f6:ea:ae:b2:e3:ca:f6:
00:08:7b:4d:46:71:cc:b3:59:af:1e:83:c2:4f:8b:
35:a1:90:e8:c9:ac:2e:67:44:77:0c:1b:e8:3e:38:
45:87:86:d9:44:68:03:b0:30:14:f6:33:2a:8f:71:
92:8e:cf:a3:5e:9a:bc:bf:dc:48:3e:05:23:a3:6d:
dd:75:a2:be:39:d1:53:0d:09:05:11:ac:45:b9:d9:
ec:24:30:93:ce:ff:74:81:20:12:2e:ea:1f:19:0c:
45:8f:5f:81:b1:e5:4c:47:98:2b:a9:6d:98:8b:8b:
68:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1A:68:12:FD:1C:E0:9F:86:F3:B4:35:4C:12:34:12:A0:5A:52:B1
X509v3 Authority Key Identifier:
keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:35:01:46:aa:9e:3d:3d:53:6d:f7:e4:2a:6f:ca:6e:73:99:
dd:cf:a9:54:ef:65:ba:90:6b:bc:f1:be:a7:69:85:be:af:48:
ba:45:2b:71:1d:2b:6c:7c:42:6b:52:0d:52:26:ea:99:5c:6f:
d0:0e:0e:a2:be:42:ca:d5:3e:cd:ae:eb:21:2f:5f:94:db:19:
f4:d7:1a:7b:ac:3f:15:a2:59:3b:2f:8e:b0:bb:50:c5:53:f4:
72:c3:e1:e1:66:a0:e7:25:43:2a:af:6e:f3:c9:07:88:54:6b:
8c:08:d0:c9:4d:50:1f:49:c4:0a:77:87:bf:4f:0e:c3:48:1e:
8a:d4:37:6c:04:32:1d:07:0c:d3:07:5e:37:82:99:ae:de:1c:
61:8f:14:47:3c:fa:f3:72:78:aa:80:b5:65:ca:6b:a5:5a:c7:
41:c8:8a:f7:57:b7:a6:7c:55:44:42:e7:15:fd:7d:4e:32:e3:
a4:02:a8:83:e2:7a:25:b2:34:16:c7:76:64:d5:88:d1:41:03:
0a:96:43:53:7b:3e:94:08:38:bb:a4:8b:46:5b:65:70:28:6d:
0d:a0:26:d0:e2:db:fe:ac:7b:41:0f:f6:2a:fb:e0:f1:0d:dd:
9c:41:c2:78:8c:78:94:2e:2b:7c:e0:94:9b:5d:41:c8:b8:c0:
60:7f:35:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:19:02 2025 by rpki-client