Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier: hh665PUa2oZPjVnAmqOXAhHdkx4ZJmzlil9pKTCAfX4=
Subject key identifier: E9:3A:B9:BD:10:2D:A8:F6:84:C1:C7:5D:74:91:2A:0F:86:BA:EF:07
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial: 01968EF055EB3DCA6B484DF57B687F370FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number: 0D37
Signing time: Fri 02 May 2025 03:00:37 +0000
Manifest this update: Fri 02 May 2025 03:00:37 +0000
Manifest next update: Sat 03 May 2025 03:00:37 +0000
Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: 6Bc9XcUxXsevCkcUcLcZ0ABX1pf5fpI6lkmYRbyVK6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:f0:55:eb:3d:ca:6b:48:4d:f5:7b:68:7f:37:0f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Validity
Not Before: May 2 03:00:37 2025 GMT
Not After : May 3 03:00:37 2025 GMT
Subject: CN=e93ab9bd102da8f684c1c75d74912a0f86baef07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:8b:d1:e2:23:a0:64:e5:e8:34:e1:d7:4a:
b4:95:fd:b0:9e:ff:dd:a4:ad:7c:1f:ca:36:9d:e5:
fb:bb:46:51:81:40:0c:55:49:98:fd:87:b7:a7:a3:
e9:6d:64:03:79:4f:a5:e5:65:e9:0a:09:8b:fc:a1:
6e:d1:5e:f8:34:41:79:cb:d7:2d:96:8d:a1:5b:ea:
c1:f5:ae:c9:eb:1c:94:41:f2:d9:b0:8a:18:23:89:
44:23:2b:4e:89:a2:32:b4:af:9b:a1:6c:2c:52:95:
7b:84:c6:5b:ea:5a:50:8d:42:10:dd:fe:5b:4d:14:
da:1b:b7:c9:19:d1:fe:2c:08:b3:c1:40:1f:18:c1:
fd:99:1f:45:6d:3e:ec:0d:44:2e:5c:79:29:c6:e2:
bb:a7:87:2a:47:93:ab:e4:1f:5c:ea:bf:75:30:27:
3c:c8:9b:99:d1:61:93:84:d9:d2:4b:c5:74:94:ca:
8d:a6:15:43:a5:8b:cb:67:9d:28:52:8a:5c:39:b1:
69:53:8a:e2:ff:c1:b5:e9:7e:a2:4f:24:cc:d1:eb:
c1:eb:c1:5d:1f:ad:ec:2f:a7:22:27:fe:28:8f:bd:
0a:2e:2e:e4:5a:fd:06:55:f7:45:28:78:e0:72:c3:
03:d0:44:f6:94:e5:2d:f9:0f:42:f4:e2:a9:68:58:
84:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3A:B9:BD:10:2D:A8:F6:84:C1:C7:5D:74:91:2A:0F:86:BA:EF:07
X509v3 Authority Key Identifier:
keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a2:9f:04:95:ec:27:d2:ca:d9:b6:ab:c9:c6:d1:11:cb:92:
08:10:ac:7c:3d:36:38:9d:d9:3f:a7:2c:97:23:0f:75:99:e5:
48:76:08:b5:f8:94:9a:f8:4f:63:f8:a1:3a:a8:f2:57:81:db:
01:41:e7:71:9e:84:a7:c8:ae:b8:e7:44:b8:b6:f7:b5:8e:2f:
09:b9:11:e5:2a:de:a3:20:1b:88:f0:93:e8:be:f9:89:16:c2:
63:b8:8b:df:5a:02:e8:3f:5d:78:5b:91:6b:b1:08:bb:3f:f3:
13:ea:24:a4:71:ff:c9:ff:1a:ad:fd:d9:06:e5:81:9b:ca:50:
69:1c:4c:3d:d1:9b:51:a3:65:49:84:5a:75:a0:5c:c1:63:74:
6b:13:64:83:1f:fd:f8:9d:16:1b:0b:4b:33:dd:65:57:44:07:
a2:59:f0:7d:db:fd:d6:a7:44:37:b9:67:c2:5a:be:d2:45:9d:
8d:0b:45:20:7c:7d:da:5b:d4:0b:c1:ab:8c:a2:8e:0a:03:42:
03:ce:b8:97:dd:b4:7f:cb:08:77:a4:5e:5e:d1:fe:b7:89:e6:
df:c5:89:35:01:94:db:a3:9b:d4:b0:b7:b1:0d:e6:32:6d:c4:
54:b4:0c:52:37:57:1b:d7:fe:d7:06:b1:ac:5b:d5:ba:8e:c9:
82:11:44:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:59:04 2025 by rpki-client