Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/163122-73eb-4d62-a9c8-2549b5d33384/1/n3Tu3BCyoQKKbUvQHHTvAxshcZo.mft
File: n3Tu3BCyoQKKbUvQHHTvAxshcZo.mft (raw, json)
Hash identifier: K/+uQwTW2Y+E+jqd+GvekQlHmRTNYnEhoidVMGtNe04=
Subject key identifier: 15:3A:65:02:49:3D:CA:6B:8C:E5:A7:3E:6A:77:92:63:D9:85:67:F4
Authority key identifier: 9F:74:EE:DC:10:B2:A1:02:8A:6D:4B:D0:1C:74:EF:03:1B:21:71:9A
Certificate issuer: /CN=9f74eedc10b2a1028a6d4bd01c74ef031b21719a
Certificate serial: 01967C450734D6C5636C6924BC403BCE99AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Tu3BCyoQKKbUvQHHTvAxshcZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/163122-73eb-4d62-a9c8-2549b5d33384/1/n3Tu3BCyoQKKbUvQHHTvAxshcZo.mft
Manifest number: 0864
Signing time: Mon 28 Apr 2025 12:00:20 +0000
Manifest this update: Mon 28 Apr 2025 12:00:20 +0000
Manifest next update: Tue 29 Apr 2025 12:00:20 +0000
Files and hashes: 1: n3Tu3BCyoQKKbUvQHHTvAxshcZo.crl (hash: V4UsU7Hwa5LTg8qzI6/6XhUtr5/q4UEM8EG/peZ5vUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/163122-73eb-4d62-a9c8-2549b5d33384/1/n3Tu3BCyoQKKbUvQHHTvAxshcZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/163122-73eb-4d62-a9c8-2549b5d33384/1/n3Tu3BCyoQKKbUvQHHTvAxshcZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3Tu3BCyoQKKbUvQHHTvAxshcZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:07:34:d6:c5:63:6c:69:24:bc:40:3b:ce:99:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f74eedc10b2a1028a6d4bd01c74ef031b21719a
Validity
Not Before: Apr 28 12:00:20 2025 GMT
Not After : Apr 29 12:00:20 2025 GMT
Subject: CN=153a6502493dca6b8ce5a73e6a779263d98567f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:93:eb:86:9c:c3:66:45:42:e6:d8:46:fe:
88:eb:a0:cb:5c:1f:e8:31:b2:ef:f2:74:57:f2:89:
7b:cd:b0:f0:d7:84:49:d1:f0:f9:ce:69:fb:84:33:
88:6d:0b:a7:2e:b2:53:cf:13:ad:0d:64:bd:da:49:
07:98:7a:46:2e:65:6a:c7:a4:28:89:52:d2:10:d9:
fa:92:31:58:16:26:b5:b1:e1:52:d9:81:b2:81:8d:
39:1e:06:98:5e:bb:a5:f0:7c:72:80:f7:6b:8f:06:
e4:b2:dd:61:6f:25:40:a7:df:40:27:05:c8:fb:16:
4f:ff:86:67:4f:38:ba:ed:97:ed:27:be:90:87:c9:
80:de:df:e8:fc:d8:62:36:91:a7:51:26:52:52:2b:
be:c0:9f:58:4a:c9:af:54:60:ec:f1:56:57:cc:d3:
72:a6:f3:fb:00:ce:25:a4:54:13:a8:b2:39:04:6f:
b9:85:84:33:91:d4:73:06:a0:68:5e:51:5e:7b:38:
38:da:42:81:53:7f:3d:1f:fa:d6:99:1c:5f:e4:ba:
b0:d8:5d:42:a4:e4:04:f3:7b:2f:c4:4a:ff:41:32:
7b:ea:21:84:20:da:ea:05:c7:e7:61:e5:9d:a3:b7:
99:69:d6:97:98:1f:d9:7f:1f:0f:30:5e:a3:02:39:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3A:65:02:49:3D:CA:6B:8C:E5:A7:3E:6A:77:92:63:D9:85:67:F4
X509v3 Authority Key Identifier:
keyid:9F:74:EE:DC:10:B2:A1:02:8A:6D:4B:D0:1C:74:EF:03:1B:21:71:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Tu3BCyoQKKbUvQHHTvAxshcZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/163122-73eb-4d62-a9c8-2549b5d33384/1/n3Tu3BCyoQKKbUvQHHTvAxshcZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/163122-73eb-4d62-a9c8-2549b5d33384/1/n3Tu3BCyoQKKbUvQHHTvAxshcZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:81:b6:30:1c:d8:04:81:12:ee:99:51:9c:0e:5b:1e:a5:b9:
0d:14:17:d7:e1:d4:14:af:b2:4a:61:af:16:15:7c:93:5e:21:
67:4c:57:fb:1b:ff:8c:79:da:b1:49:a5:28:34:ee:ba:9e:91:
1b:74:8a:48:46:30:03:d1:b2:5e:63:c2:d8:8b:7c:23:06:cc:
3f:8f:69:ad:14:e2:36:c0:c4:19:0b:ff:f7:25:88:f4:d2:52:
3f:c7:e3:41:bc:5e:b0:38:e7:24:cb:77:a3:c9:92:3e:ea:30:
f6:a2:95:67:9c:60:48:23:df:bd:42:f9:07:04:07:a3:05:87:
22:ae:31:c5:63:62:e1:51:51:82:50:6c:ce:78:95:0a:74:06:
bc:fb:7a:79:5c:e7:e5:94:62:3f:c6:a5:b8:02:e7:da:24:a3:
b5:07:a8:c2:e1:62:37:c5:1d:d0:d3:0d:13:ee:29:52:07:33:
f1:ce:43:0d:c2:87:42:19:6c:c9:16:8a:ba:12:15:c4:92:74:
65:1d:d0:12:00:21:c3:9f:fa:f8:a1:22:85:5b:1b:c4:35:c1:
58:ff:a7:6b:f5:ac:99:1e:04:55:af:b1:19:48:89:18:6c:32:
dd:10:86:83:16:ca:00:53:1a:93:80:0a:cd:f5:81:fe:84:ca:
45:85:1f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:44:10 2025 by rpki-client