Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
File: 3Feh-cEhycK2-U04p1-_3MVN8Fs.mft (raw, json)
Hash identifier: 7umgaWyuQssZ17ZUA44C8FA2QU2FcZzQ54Lr3NytpS4=
Subject key identifier: A4:F5:15:B9:94:EB:F7:FE:4A:04:F1:95:EB:64:08:32:9C:0E:7D:A7
Authority key identifier: DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
Certificate issuer: /CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Certificate serial: 0196B634FBD16CB36AAF3F5A3DE9F662D3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
Manifest number: 09A6
Signing time: Fri 09 May 2025 18:00:47 +0000
Manifest this update: Fri 09 May 2025 18:00:47 +0000
Manifest next update: Sat 10 May 2025 18:00:47 +0000
Files and hashes: 1: 3Feh-cEhycK2-U04p1-_3MVN8Fs.crl (hash: u24ZHdlnN2uh6YLV973iO15mnUVXwwatrKoaxiswWFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:34:fb:d1:6c:b3:6a:af:3f:5a:3d:e9:f6:62:d3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Validity
Not Before: May 9 18:00:47 2025 GMT
Not After : May 10 18:00:47 2025 GMT
Subject: CN=a4f515b994ebf7fe4a04f195eb6408329c0e7da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:69:fa:4b:4b:16:c9:cc:22:24:01:42:51:07:
ba:0a:29:b2:83:34:d4:d8:78:a9:60:af:ee:ca:c8:
3d:3d:d5:87:ff:e6:9a:3a:10:92:e1:6d:e6:7b:5f:
5a:86:80:23:16:c4:14:4b:f1:24:a2:cf:cc:81:d9:
a8:93:4e:17:29:17:98:1a:68:03:02:af:57:ee:1c:
e8:14:60:7e:18:7b:18:43:7a:77:51:d5:22:0a:05:
4a:46:3c:c2:51:00:de:56:66:f6:1f:04:aa:34:48:
16:fe:a7:8b:8c:c2:27:94:86:66:ad:93:77:e8:18:
e1:86:e0:b4:5f:83:04:34:cd:4a:8b:13:6e:dc:8e:
03:1f:80:83:ef:21:74:36:30:22:f2:08:86:ba:12:
91:ed:43:72:0d:c9:a3:48:c9:52:37:d4:fb:38:fd:
0a:ac:4e:08:0f:84:90:b7:c8:3f:5b:74:c4:29:61:
f2:fa:8b:22:05:21:1c:94:48:40:59:25:19:77:d3:
6c:8c:b2:f2:47:6a:1f:d0:00:37:9d:b3:55:99:e3:
51:5e:e9:51:00:d9:f3:3c:4c:9d:59:aa:b5:0e:f6:
bb:10:33:69:0b:9b:ab:ed:15:e5:4c:b9:fd:12:a6:
6b:eb:b4:75:62:ad:65:55:3a:64:96:b6:cc:da:7d:
3b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F5:15:B9:94:EB:F7:FE:4A:04:F1:95:EB:64:08:32:9C:0E:7D:A7
X509v3 Authority Key Identifier:
keyid:DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0d:33:54:40:88:68:2d:a5:d9:6e:a4:1d:64:af:a6:f5:a6:
1c:e4:3e:51:e6:ed:d6:b1:db:71:c6:1c:01:c5:7c:e2:52:e0:
dc:b0:32:3b:6c:8c:5c:17:37:21:1a:d0:24:fb:2a:1b:2d:9b:
ac:c3:78:8a:b9:1e:28:b4:d0:d4:f5:17:da:e7:5d:fc:83:01:
b9:d7:1d:43:58:be:18:f3:06:5a:7a:14:39:3c:e7:08:43:01:
b3:55:9d:6a:d3:7e:78:73:04:4d:98:75:8c:27:67:ed:e8:44:
08:1f:c7:2c:fc:33:6b:43:01:30:8f:81:56:75:81:11:1e:c6:
95:0d:2f:57:32:83:da:15:fd:1d:43:b7:b7:90:6f:64:2b:60:
03:7f:4d:6a:49:28:1c:c4:0b:21:c0:d0:3b:c6:6a:ed:32:02:
7f:7e:c8:78:98:9d:32:44:21:a3:eb:6c:a9:f2:6f:11:68:bb:
c8:1e:60:c8:10:1f:28:ed:93:39:4a:dd:83:a5:e9:8f:f3:70:
8b:c7:51:62:31:d6:b4:f2:e9:b1:bf:b4:8c:56:95:b3:dd:62:
3a:d5:75:21:3f:0a:9f:71:fd:12:16:d5:d1:7c:68:3e:c0:93:
08:8b:fb:bd:9b:8d:2e:1b:8f:10:b7:bb:ed:12:dd:c6:fa:f5:
93:3b:d4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:29:05 2025 by rpki-client