Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
File: 3pj4NjKYKX-6uupodyArXEQOWpA.mft (raw, json)
Hash identifier: 9S5Rlt10dftHjIa/YAN1YXWL+GYm1hbkOpJCB2T1tZ8=
Subject key identifier: D4:38:71:85:45:C9:00:79:4B:88:97:70:9F:78:66:A4:DB:1C:AB:46
Authority key identifier: DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
Certificate issuer: /CN=de98f8363298297fbabaea6877202b5c440e5a90
Certificate serial: 019683919E789FF0A2C3A2DF909032A9F0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
Manifest number: 0BA5
Signing time: Tue 29 Apr 2025 22:01:20 +0000
Manifest this update: Tue 29 Apr 2025 22:01:20 +0000
Manifest next update: Wed 30 Apr 2025 22:01:20 +0000
Files and hashes: 1: 3pj4NjKYKX-6uupodyArXEQOWpA.crl (hash: SHUdZRDUOeCApcbPzYIPi9hnuCGsiwPEsG1SFtAkVg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:9e:78:9f:f0:a2:c3:a2:df:90:90:32:a9:f0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de98f8363298297fbabaea6877202b5c440e5a90
Validity
Not Before: Apr 29 22:01:20 2025 GMT
Not After : Apr 30 22:01:20 2025 GMT
Subject: CN=d438718545c900794b8897709f7866a4db1cab46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:93:32:40:dd:6d:f1:89:0c:50:1a:fc:1c:
a7:cb:97:7f:31:d1:60:24:76:22:9a:f3:5e:be:c1:
ac:42:d2:d7:c5:eb:90:0a:c6:81:c8:77:c4:b9:4a:
60:02:ed:86:0b:13:ce:0a:84:c3:f5:79:cf:63:77:
23:15:7d:bc:2c:e6:17:a5:9f:6a:47:a8:39:ff:c4:
b9:e9:43:f7:34:48:c0:e4:71:52:60:1f:b7:0c:84:
f7:c1:ef:0f:0b:9a:c6:83:7b:55:48:00:64:b1:44:
c7:4c:55:1d:69:a6:94:f2:55:b3:3a:04:68:d1:7f:
dc:60:86:6b:63:03:20:46:ab:90:9a:b8:cf:fa:69:
8d:b4:16:9a:7e:5e:33:2e:c1:42:1c:83:0f:e9:03:
78:92:78:f5:63:d2:94:6a:48:a6:1f:f0:4a:02:19:
fb:10:8b:d5:90:26:c3:58:b4:ab:94:4f:19:a6:4f:
d7:74:c7:02:2e:20:52:58:2d:e6:b6:b7:27:02:6a:
64:ac:61:da:50:09:09:7c:c0:bb:87:b3:7f:5b:99:
4d:88:cd:cb:fd:c0:29:6d:66:3b:39:da:c9:29:e6:
96:64:04:5e:a2:84:cf:f3:3b:14:da:68:9f:27:90:
9a:a8:62:c6:bd:92:aa:f9:54:02:64:46:ac:48:07:
d1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:38:71:85:45:C9:00:79:4B:88:97:70:9F:78:66:A4:DB:1C:AB:46
X509v3 Authority Key Identifier:
keyid:DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b8:cd:8d:70:75:1b:c5:e0:ee:44:12:e5:c0:65:a4:48:3b:
76:15:b1:5c:bd:1b:4f:e6:ef:0c:fe:3f:65:f8:cb:ef:e3:84:
49:6d:6f:be:78:14:4c:a0:6c:15:fb:76:69:22:7c:04:58:74:
58:51:95:ab:f3:58:41:9f:9f:e8:4c:44:8d:c1:ef:1c:a8:3e:
40:ad:70:48:ec:c1:58:ed:39:bb:d8:f5:18:0e:50:b1:e9:24:
46:6a:48:81:85:b6:11:bc:cb:7d:47:08:f0:21:37:eb:00:38:
a1:06:bb:52:2b:3b:6a:69:00:ba:9f:68:8d:98:e8:c6:2a:b8:
8f:63:51:35:a2:71:bc:24:8f:01:8b:5e:23:96:bd:19:03:c6:
a1:6a:d0:61:22:68:c6:86:6b:63:12:b4:5f:71:64:c9:bc:5c:
2d:2d:9d:0c:93:f9:7a:e3:db:ad:97:9c:db:74:74:74:87:18:
ed:03:8a:83:e3:bd:86:2d:77:bc:17:f1:1d:74:f7:14:2e:e1:
14:ad:81:79:9e:65:4e:59:a4:83:b5:a6:92:91:81:3c:e4:cc:
e1:9d:f0:f1:4f:bc:21:fd:21:06:e8:74:19:f4:f3:1a:b3:9c:
0d:ef:39:54:c5:6a:15:43:bb:09:ec:58:07:54:75:a3:76:72:
93:79:83:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:19:50 2025 by rpki-client