Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
File: 0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft (raw, json)
Hash identifier: Csz5C9vgd6gUdABt+4vLVUmbtTrVzBbrH7aPgEDBBT0=
Subject key identifier: D3:B9:13:4E:ED:32:15:49:A3:90:E3:B1:05:03:D0:FC:63:F1:BE:17
Authority key identifier: D1:49:7B:32:47:76:7D:34:99:91:E9:96:CA:B8:AF:7D:49:94:2A:F4
Certificate issuer: /CN=d1497b3247767d349991e996cab8af7d49942af4
Certificate serial: 01967D20C18C4EC130E6302CF46F5A2C34CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
Manifest number: 14A3
Signing time: Mon 28 Apr 2025 16:00:20 +0000
Manifest this update: Mon 28 Apr 2025 16:00:20 +0000
Manifest next update: Tue 29 Apr 2025 16:00:20 +0000
Files and hashes: 1: 0Ul7Mkd2fTSZkemWyrivfUmUKvQ.crl (hash: 3mqVoXkNoxXc39ysH6HIlBwbYTYT+TKh5uR20KECiYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:c1:8c:4e:c1:30:e6:30:2c:f4:6f:5a:2c:34:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1497b3247767d349991e996cab8af7d49942af4
Validity
Not Before: Apr 28 16:00:20 2025 GMT
Not After : Apr 29 16:00:20 2025 GMT
Subject: CN=d3b9134eed321549a390e3b10503d0fc63f1be17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:32:b5:65:0e:35:d8:c2:55:77:68:29:fa:
55:f1:dc:2f:55:f8:82:9d:5c:a2:d0:a4:cb:9c:cc:
3d:08:96:63:e4:eb:3e:b9:7e:7a:77:15:63:27:8b:
63:0b:16:d8:26:31:35:84:d1:af:9a:7b:81:e8:2b:
b7:87:b9:6b:f2:ad:3f:54:b9:22:49:27:67:37:fb:
b8:f2:80:19:57:d2:06:d0:95:2b:a7:a4:53:37:be:
72:31:60:7a:f7:bf:0c:7a:bc:5b:5e:b1:78:e4:fc:
64:98:4c:96:2c:8f:b4:79:8a:55:3e:da:b1:a0:15:
fc:3d:7c:21:ca:e5:95:c6:80:57:d7:3c:ab:a1:f7:
d7:ea:8f:56:23:93:05:a8:4c:0f:ae:9a:e9:22:6d:
b4:b5:af:76:84:dd:0c:65:2e:80:93:38:9b:f7:8b:
b1:7e:2e:ac:2e:ba:93:fc:8a:02:b7:52:ba:cf:dc:
7e:38:31:0e:d5:6f:1b:7f:16:ec:cd:7a:7e:97:3e:
97:93:d9:96:0b:39:2f:57:09:86:ef:23:fd:be:60:
77:9c:65:4f:7c:9d:ba:53:7a:42:1a:08:91:31:e0:
95:aa:57:d5:c2:37:3c:2d:39:81:68:aa:f9:0c:dc:
53:60:8e:70:65:22:12:4c:56:2e:a2:49:19:b3:3c:
8b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B9:13:4E:ED:32:15:49:A3:90:E3:B1:05:03:D0:FC:63:F1:BE:17
X509v3 Authority Key Identifier:
keyid:D1:49:7B:32:47:76:7D:34:99:91:E9:96:CA:B8:AF:7D:49:94:2A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:20:ab:d3:2b:b8:1d:6a:71:3a:17:0c:33:af:82:a6:63:81:
bb:ab:a5:99:7b:83:0a:53:11:15:41:1a:28:6d:3d:06:02:e7:
90:7c:8a:97:96:c6:3b:ef:da:a0:77:6b:0b:d0:f2:8b:eb:ed:
8e:79:58:6b:b1:d6:7d:41:c9:c1:8a:fd:e4:9c:31:93:eb:2e:
a3:46:e7:9f:15:a6:1f:62:ea:85:da:0c:ce:81:a0:12:69:e0:
c9:02:24:a5:a3:ea:87:49:b9:59:4a:4d:1c:e8:92:75:64:dd:
3b:af:9b:27:b1:52:ca:09:b8:f6:86:dc:c5:e2:b1:4c:68:b0:
6f:e2:55:52:d3:82:13:be:0d:82:96:1e:82:36:0c:10:5c:0d:
52:d2:60:98:7a:76:be:f9:f0:8a:5c:a0:b2:7b:7b:87:47:2c:
90:6c:5c:58:51:8e:d7:b6:1b:4c:95:e1:79:27:ee:47:3b:80:
28:56:a9:66:b4:f8:01:ba:46:59:45:0a:38:75:d3:bf:68:c8:
3b:a3:b2:7c:ee:9e:3f:f4:39:a5:ed:53:2b:c5:b3:d9:ae:15:
59:eb:2d:c5:b6:03:36:36:bc:e2:9a:27:70:8a:d4:9f:d1:29:
19:6b:d6:ac:97:a3:18:e2:cb:76:cd:df:a9:2c:78:74:6a:fb:
5f:ee:26:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:02:50 2025 by rpki-client