Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
File: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft (raw, json)
Hash identifier: EatX5TXRyQlR+GC3j0V73nYJ6qgaMjOhNr6Yt51Bu+A=
Subject key identifier: 42:47:16:CF:8B:48:6D:03:4C:55:8C:4A:FC:CB:03:25:9F:BE:51:C0
Authority key identifier: DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
Certificate issuer: /CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Certificate serial: 0196786888DD9B9F1298400C25D6BFCAADAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
Manifest number: 0447
Signing time: Sun 27 Apr 2025 18:00:38 +0000
Manifest this update: Sun 27 Apr 2025 18:00:38 +0000
Manifest next update: Mon 28 Apr 2025 18:00:38 +0000
Files and hashes: 1: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl (hash: fMZV51dGMBV7mjex51RlG+NfgFArgF1W58XNRBsL0lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:88:dd:9b:9f:12:98:40:0c:25:d6:bf:ca:ad:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Validity
Not Before: Apr 27 18:00:38 2025 GMT
Not After : Apr 28 18:00:38 2025 GMT
Subject: CN=424716cf8b486d034c558c4afccb03259fbe51c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:54:d9:4f:79:50:f7:29:43:7e:25:88:76:95:
2b:65:4b:56:b5:e2:30:73:e0:c3:ec:6c:31:36:c2:
17:47:cc:ab:93:68:62:e4:d4:6d:3c:52:bd:c1:d0:
8d:de:90:55:4e:9e:d2:d5:2c:7d:19:ca:3b:8a:8f:
15:41:63:b1:ad:08:cd:56:2c:33:a1:e1:aa:4b:b8:
65:e6:af:d4:70:fe:49:98:36:32:70:29:5b:a2:13:
87:96:ff:4c:9f:d1:5f:ac:ad:b5:5e:b5:14:4b:fd:
eb:21:44:a8:7d:8a:e2:e6:04:02:88:ff:b6:9f:b6:
2a:25:79:08:9f:c9:00:ed:55:06:73:28:67:bb:4f:
1d:ae:f7:8d:27:d2:b9:7f:5c:2d:81:c7:b0:ae:b4:
17:58:b5:7f:12:e3:79:4f:dc:ab:a4:32:20:fc:c7:
5d:ce:67:d0:74:53:51:fd:d4:80:eb:10:a9:92:d1:
80:63:f1:54:ec:f0:55:2f:8b:f9:00:13:b7:bd:60:
3f:14:81:47:f7:03:eb:7b:8a:ad:67:be:04:ea:70:
b2:00:8e:2e:39:03:b6:28:35:46:3f:dc:3a:38:00:
68:49:8f:6d:6e:32:fc:d5:d0:eb:c0:42:fc:64:7c:
dc:c8:b8:08:f5:ee:2e:6f:b4:87:07:59:23:7c:0f:
60:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:47:16:CF:8B:48:6D:03:4C:55:8C:4A:FC:CB:03:25:9F:BE:51:C0
X509v3 Authority Key Identifier:
keyid:DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a4:f3:6c:cd:53:9d:e2:37:42:43:c3:ca:69:da:ec:3f:d5:
83:11:c6:7f:cf:2d:08:c1:7b:52:9b:77:55:8d:9b:7c:c0:70:
1c:aa:26:1d:0a:28:81:bb:64:7b:92:d4:43:dc:88:ae:e5:16:
0b:41:6d:82:de:7a:08:a7:49:4e:06:c1:9b:27:74:e2:3f:02:
5f:eb:26:45:f6:42:b0:eb:db:dc:d7:2f:84:c1:b3:e2:02:42:
d1:17:a0:29:f3:1f:3c:f2:a4:b3:fb:de:a6:b1:ac:0f:91:28:
8d:47:16:0a:c8:9f:07:96:7d:25:bf:f9:d1:45:12:8a:c5:b3:
35:cf:f1:19:25:cf:c5:ad:e2:73:d1:5f:99:36:35:ff:a1:9a:
0a:38:e8:b8:05:5d:18:c8:a7:b8:8a:4b:8b:ed:3c:65:bc:04:
53:55:db:77:19:d1:8c:86:8b:09:f6:63:22:ab:63:b9:e0:21:
b8:c2:2a:ab:29:0c:90:49:56:37:98:fa:ea:03:5a:ae:38:58:
1c:bc:ff:3c:a3:56:3d:7b:a2:44:38:0f:02:12:20:ba:af:5b:
d2:cb:d8:d4:d0:92:5d:db:fd:8c:47:40:fd:f8:21:8f:b0:2c:
a4:ab:ae:1c:a1:6f:a7:5e:55:4e:06:2b:4f:d3:93:3c:da:45:
15:24:c7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:51:30 2025 by rpki-client