Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
File: 3plxFn-T_DSzvEebsh_2LTvzyYQ.mft (raw, json)
Hash identifier: v0FP2YO7aQ176jXpdsdDn3DLzjeqNEXNyInOz+8m70s=
Subject key identifier: 62:16:79:E3:45:F3:4E:99:1C:22:51:CF:1D:E4:66:70:D6:7C:40:79
Authority key identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
Certificate issuer: /CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Certificate serial: 01967567763C512E92362DFFFE1DC52EA408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
Manifest number: 0110
Signing time: Sun 27 Apr 2025 04:00:36 +0000
Manifest this update: Sun 27 Apr 2025 04:00:36 +0000
Manifest next update: Mon 28 Apr 2025 04:00:36 +0000
Files and hashes: 1: 3plxFn-T_DSzvEebsh_2LTvzyYQ.crl (hash: Z41DdPImfa1yqwwceumJDP59h0t3dSELbDBDe6d7/qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:76:3c:51:2e:92:36:2d:ff:fe:1d:c5:2e:a4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Validity
Not Before: Apr 27 04:00:36 2025 GMT
Not After : Apr 28 04:00:36 2025 GMT
Subject: CN=621679e345f34e991c2251cf1de46670d67c4079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:71:b2:b9:5e:ab:08:3d:7e:0c:5b:13:4c:8e:
2e:e2:3c:43:f8:c1:61:ac:f9:38:f1:4f:bc:0f:29:
8c:25:db:c7:0e:7b:7b:bb:cd:86:c7:3e:13:fd:0f:
21:9d:a2:31:04:e0:75:c2:fb:af:c6:08:d2:21:af:
99:4b:42:1e:a4:c6:9f:49:7a:8e:61:01:d7:01:f9:
9b:0b:13:ff:c9:d8:3a:03:32:e4:8a:e5:e0:ff:04:
38:87:6c:f0:a1:9d:fd:84:37:f8:1c:2d:cf:be:b1:
17:ba:b6:81:06:c2:17:d7:37:97:d0:32:80:85:f0:
3b:4d:73:08:1f:4d:43:33:c8:da:05:93:4f:f5:c5:
95:0e:29:66:46:7a:2a:1e:82:5d:0c:24:76:de:8d:
11:4d:9b:35:36:07:6c:ca:11:be:2e:d0:ae:80:c2:
e3:91:29:23:09:8e:4b:b2:57:5d:a2:78:69:23:5a:
a1:bc:69:a0:d2:03:87:90:60:5c:07:f7:a2:99:24:
cf:8b:40:64:a4:05:bd:02:eb:1c:64:ef:46:c2:08:
be:88:99:ab:5e:32:54:fd:59:0a:07:95:be:d7:4e:
af:c2:2f:01:69:84:15:d0:b0:f8:77:d6:57:a3:3c:
0c:51:57:9f:2f:f8:d6:56:e4:54:2a:90:74:59:5b:
47:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:16:79:E3:45:F3:4E:99:1C:22:51:CF:1D:E4:66:70:D6:7C:40:79
X509v3 Authority Key Identifier:
keyid:DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e4:b6:75:2b:e6:87:b2:61:cc:84:61:ff:fc:b5:e6:9e:e8:
9f:2e:b3:92:87:b9:8c:8c:b3:f1:65:8c:02:01:34:fb:14:96:
f6:0b:89:51:f7:8c:31:5d:1d:64:a0:d4:dc:ec:d0:88:8a:4a:
c5:2f:ac:6c:21:3d:cc:a1:05:5f:31:48:17:bd:cf:1e:88:a0:
49:24:a8:5e:e7:e8:c3:81:af:9e:41:64:65:e0:1b:e6:64:a8:
79:52:5e:28:e4:fe:63:79:8d:89:46:12:c6:f7:5d:bf:4a:10:
fa:ea:ba:04:10:65:09:53:f1:12:ff:f2:51:bb:84:29:5c:73:
6b:38:ad:a8:a6:b5:3c:88:ab:93:44:49:d1:e0:ab:32:80:45:
4b:5d:83:7d:d8:4c:95:27:b7:0b:4c:fb:d1:90:df:b0:a2:9c:
fb:eb:b5:0f:c3:ac:58:9e:d0:82:88:7c:f3:18:2b:21:74:2b:
12:96:45:36:36:ce:77:3c:1b:21:f5:82:a1:2e:16:33:f3:15:
7b:f4:2e:07:0a:a5:9c:2e:2c:2b:de:d8:6c:7c:ab:14:56:f5:
0e:b0:49:4c:7d:c6:12:69:25:d9:97:be:c3:c7:38:a1:dc:8c:
ac:22:a7:b0:db:c7:0f:2e:34:b3:37:fe:ec:f5:c3:c1:83:e3:
47:61:14:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:12:22 2025 by rpki-client