Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
File: 3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft (raw, json)
Hash identifier: lD+N+06qUZcnxcj20R07oNCgnh931/JAxGqOigbqSvQ=
Subject key identifier: 03:3C:80:4C:32:63:30:52:A9:0B:B9:4E:F0:4B:55:DA:67:F2:90:62
Authority key identifier: DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64
Certificate issuer: /CN=dcc50a2b974349948b04ee389b2a99d1754fb464
Certificate serial: 01967755EEE19F2B82897D9497F0D10294E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
Manifest number: 10EC
Signing time: Sun 27 Apr 2025 13:00:42 +0000
Manifest this update: Sun 27 Apr 2025 13:00:42 +0000
Manifest next update: Mon 28 Apr 2025 13:00:42 +0000
Files and hashes: 1: 3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl (hash: UcosTOS8NNErD3uiZ8QkVsjuVU/abpgbrphlGY8VFEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:ee:e1:9f:2b:82:89:7d:94:97:f0:d1:02:94:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc50a2b974349948b04ee389b2a99d1754fb464
Validity
Not Before: Apr 27 13:00:42 2025 GMT
Not After : Apr 28 13:00:42 2025 GMT
Subject: CN=033c804c32633052a90bb94ef04b55da67f29062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:e3:8f:0d:f6:7c:c9:55:b1:c2:34:1a:ae:
60:b8:17:fc:9d:01:dc:b9:51:f9:10:e8:b3:56:41:
fa:e5:14:47:56:82:a1:57:bb:1d:f7:ee:fe:fb:ae:
4e:5a:6d:f6:7f:f9:39:05:04:80:d2:3f:df:96:d2:
24:0e:78:95:81:18:d1:f5:69:20:98:f1:9a:bf:db:
42:b8:5d:66:47:66:7f:6c:32:45:0c:82:c3:d2:74:
2f:54:a9:9d:63:cd:82:61:62:e6:62:02:f0:e8:45:
af:50:6b:76:8f:0d:5a:51:f4:76:37:e5:a5:6c:53:
d7:c5:b2:c7:99:18:66:76:58:09:c8:6f:76:2d:05:
29:64:80:5b:af:95:be:ff:5b:a3:5c:e2:5b:0e:67:
ed:9b:d1:8a:21:33:4f:70:89:6c:7c:b5:db:13:59:
2a:9f:1d:aa:d5:19:7e:c3:0d:71:81:68:62:64:b5:
31:31:f5:98:a2:28:b3:c3:93:be:78:00:38:c1:c5:
29:30:15:6a:d0:11:1f:d1:e0:2f:f4:d2:d9:4b:19:
aa:f1:c3:6b:e2:ed:9e:39:65:be:9a:8c:7c:ad:ee:
a7:48:dd:3b:50:bb:5a:0e:8a:53:ff:01:f0:6f:4b:
09:29:e6:7d:9d:e9:ec:a3:5c:ba:96:ec:3c:03:e3:
6a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3C:80:4C:32:63:30:52:A9:0B:B9:4E:F0:4B:55:DA:67:F2:90:62
X509v3 Authority Key Identifier:
keyid:DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ae:38:2e:0d:07:68:cd:41:63:d5:80:aa:f9:2b:9e:87:2d:
7c:51:5e:1d:7b:2c:c8:ba:96:79:d1:f5:88:05:14:eb:53:44:
db:e2:e9:f7:d0:ef:81:67:d2:b3:49:48:6d:f8:08:74:c2:fd:
fa:01:1a:db:51:5d:2a:d2:26:44:24:c6:ad:84:e5:e6:0a:4b:
fc:4f:4f:09:4b:71:ed:64:bf:17:c6:e0:f8:a8:a6:42:e4:d4:
f0:7d:1c:f1:d7:c9:bb:ef:6c:d8:78:57:c6:85:3d:75:16:7b:
3b:bc:50:16:1f:59:1b:40:ae:6e:25:c8:ef:16:2b:fa:61:8d:
b4:a5:54:e9:f7:4a:b9:23:b0:e8:46:0c:72:f1:8b:3d:b2:d6:
02:46:da:12:59:3f:5d:41:59:ce:b1:18:df:c9:8e:ff:3d:72:
e7:ac:a9:2c:82:c1:b6:f7:09:2a:ab:f6:5a:3b:cd:ce:63:7e:
59:ab:33:54:bf:37:a4:06:c4:be:0c:c2:d7:e4:d5:2f:91:22:
29:90:86:ee:9d:f9:b8:c8:8f:4d:8c:ce:87:9f:ca:c2:03:30:
8c:e5:9c:75:ae:9a:c5:a5:fc:09:e5:94:16:12:b9:ad:39:5c:
e9:c2:c2:67:b5:a6:e5:92:07:2b:28:c2:fb:74:ff:ae:96:1d:
29:41:83:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:57:46 2025 by rpki-client