Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
File: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft (raw, json)
Hash identifier: GPRlOrt2TzGD4RoflRkegsSHIsvZPF2HhF0dPxeOhxM=
Subject key identifier: 26:4C:BA:21:A9:48:D6:D3:C7:BE:E8:31:D3:D1:D8:50:11:48:25:96
Authority key identifier: DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
Certificate issuer: /CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Certificate serial: 01969F3F782361AFDE4DDA5E55A391E08FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
Manifest number: 0C8C
Signing time: Mon 05 May 2025 07:00:58 +0000
Manifest this update: Mon 05 May 2025 07:00:58 +0000
Manifest next update: Tue 06 May 2025 07:00:58 +0000
Files and hashes: 1: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl (hash: DxYt3mOOkQI5f6tTNgDVIjwFzku+KZm9DoHBwNyPJDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:78:23:61:af:de:4d:da:5e:55:a3:91:e0:8f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Validity
Not Before: May 5 07:00:58 2025 GMT
Not After : May 6 07:00:58 2025 GMT
Subject: CN=264cba21a948d6d3c7bee831d3d1d85011482596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:88:0d:91:9f:c0:f8:b8:43:43:f9:8b:77:
9d:f5:b1:a7:7c:30:b9:c0:ac:cf:f2:c1:08:b1:e8:
68:8f:70:0d:9b:b3:45:74:4b:d9:f5:f3:08:34:2d:
ea:5d:94:7f:a0:ea:9d:54:66:78:93:cb:c9:d5:38:
bf:d8:16:95:22:b9:a9:bd:70:2d:e2:8b:56:13:c0:
56:c2:bd:22:a9:8c:42:8c:02:ef:5c:dc:72:c0:0f:
3a:a8:0a:18:2d:b1:df:24:7b:9d:4f:a5:cd:ff:4f:
1f:eb:8e:b3:82:1a:eb:2e:93:e1:71:6b:06:9d:76:
61:98:7c:f1:7d:16:51:6f:a4:bf:65:1b:66:3a:5b:
86:70:3f:d0:37:a1:18:b6:37:3a:16:32:8b:7f:8b:
f4:f5:f8:f6:48:0e:a7:fe:b2:a6:9a:cb:6a:93:74:
48:2d:ff:9e:74:de:2d:fe:57:db:55:e8:40:7c:0e:
e2:4f:64:d8:c0:93:3a:1f:66:5d:d1:6a:89:96:c9:
d6:76:71:d0:0a:b1:9a:58:bd:3e:72:55:83:f9:81:
57:bf:c6:ec:d0:ee:fc:89:c6:87:8e:b1:44:03:55:
42:b4:ec:12:f9:3d:9c:83:5d:87:b1:39:a1:af:be:
ef:ad:70:a2:9c:2a:b7:71:d4:6a:49:50:6c:2e:8c:
a0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4C:BA:21:A9:48:D6:D3:C7:BE:E8:31:D3:D1:D8:50:11:48:25:96
X509v3 Authority Key Identifier:
keyid:DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:39:a3:27:58:02:4c:bb:6f:79:b6:54:df:30:d9:e9:24:e2:
f7:19:ab:3d:f7:20:12:5a:91:76:6d:e2:32:f4:20:45:70:62:
dc:f2:61:e1:9b:01:2a:51:e7:76:96:bf:31:3d:9e:db:c9:32:
de:36:b7:f7:77:c6:60:d8:ad:de:90:01:1d:60:17:e5:42:0a:
91:19:1e:b2:a4:1f:87:4f:89:ea:af:98:82:44:54:b4:20:2d:
66:6d:8f:a5:0f:c4:55:91:b5:aa:40:eb:26:2a:54:33:e9:3a:
1e:fc:f1:6d:bd:76:2f:10:32:17:bc:ff:b5:e5:76:8a:85:b1:
d8:73:05:0c:4e:9f:4a:ff:56:04:0e:7b:14:47:88:e8:e7:ae:
a3:64:5e:64:11:8b:93:84:26:98:ef:87:ba:69:8d:fd:fa:36:
51:41:0e:77:2b:18:53:dc:ac:e0:ed:8d:44:94:82:1b:f1:41:
ce:db:5f:32:b8:47:19:cf:86:dc:0d:1e:ea:a3:39:10:8a:dc:
1f:12:3f:2a:99:af:90:18:5b:43:28:24:83:7f:25:a9:5d:f4:
b7:e2:45:05:da:c9:de:01:1c:c5:80:97:35:c3:67:3d:f5:69:
5c:db:9f:f8:8c:d8:83:76:98:a7:2d:f8:d0:cd:4e:cb:5c:24:
3f:17:ca:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:11:28 2025 by rpki-client