Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
File: R37BXKT5JNlmlnVFEk9lUxDSyXM.mft (raw, json)
Hash identifier: ErE70IqPgKTuzvdXU0oo8q55NyQhsgBL6nXt5PCDbOg=
Subject key identifier: D8:2F:89:F0:44:08:C3:4E:91:BA:A3:34:B0:23:08:3D:D1:4F:36:82
Authority key identifier: 47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
Certificate issuer: /CN=477ec15ca4f924d966967545124f655310d2c973
Certificate serial: 01967567B8F1E427F088F6C6263FE118F386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
Manifest number: 046E
Signing time: Sun 27 Apr 2025 04:00:53 +0000
Manifest this update: Sun 27 Apr 2025 04:00:53 +0000
Manifest next update: Mon 28 Apr 2025 04:00:53 +0000
Files and hashes: 1: R37BXKT5JNlmlnVFEk9lUxDSyXM.crl (hash: Ss5hNjg0NRONkmy6tEuKjP/WSEpxIYerxPagSBhavvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:b8:f1:e4:27:f0:88:f6:c6:26:3f:e1:18:f3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477ec15ca4f924d966967545124f655310d2c973
Validity
Not Before: Apr 27 04:00:53 2025 GMT
Not After : Apr 28 04:00:53 2025 GMT
Subject: CN=d82f89f04408c34e91baa334b023083dd14f3682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2f:c5:67:62:e3:1f:78:52:a5:7c:5b:df:b5:
55:ef:a5:f9:f8:80:5d:73:69:c9:f7:53:8b:e1:71:
9a:d9:ab:b1:7d:0d:f6:7c:48:af:16:d7:8a:c1:0c:
8e:30:57:bc:88:08:3e:06:5f:f2:ab:42:c6:3b:71:
0f:c3:d1:85:6a:e7:13:9b:f3:81:2f:09:13:7d:1e:
ce:d9:2d:b5:86:e5:ed:a7:c7:5f:03:26:72:af:99:
ed:cf:7d:69:9f:7f:41:97:1e:8a:86:05:41:7e:49:
94:41:83:0d:52:04:5d:52:7c:2a:b2:b1:4d:48:f1:
de:c1:ba:33:5b:1d:d1:a5:b9:96:fd:c7:1b:05:fa:
3e:69:a4:6f:c4:12:16:53:fe:e9:dc:df:81:98:81:
cf:02:11:54:43:61:b8:2a:d3:f8:a4:be:19:a4:55:
cb:91:81:fa:3a:59:0a:9b:01:ff:5d:9e:7e:53:8b:
48:88:85:f1:25:5a:d7:bf:04:74:9a:66:b9:ed:65:
94:d8:55:87:7e:84:29:a7:48:d6:1a:16:72:36:61:
8a:28:9a:d1:16:d8:18:a5:ac:65:9b:aa:9a:86:56:
3d:77:62:c0:e3:10:01:35:fb:ee:ad:41:70:34:75:
7f:f8:36:6a:47:aa:7c:b5:d0:6a:f4:20:03:1d:c5:
2d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2F:89:F0:44:08:C3:4E:91:BA:A3:34:B0:23:08:3D:D1:4F:36:82
X509v3 Authority Key Identifier:
keyid:47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b6:b3:8d:4a:59:eb:e5:d7:0c:f3:97:78:8f:86:8c:a7:fc:
6c:f8:16:0d:3a:4d:84:62:00:df:a9:6b:81:44:7f:a3:64:f6:
50:bc:20:24:9e:89:2c:10:42:df:ce:16:54:26:a7:cb:85:bb:
7d:0b:a0:24:c5:9d:f0:fe:43:58:be:ae:ab:c5:db:c5:fd:1c:
2e:62:5d:5a:9f:6e:75:9e:49:1c:a4:ab:43:8d:c5:c4:8b:7f:
40:cb:e2:0f:6d:1d:34:9c:2d:6b:06:e7:35:8d:08:2c:5b:be:
13:6e:cb:e0:b0:50:ca:08:a0:d8:0c:b5:d8:b7:96:e6:8a:59:
38:ee:ea:8e:46:86:bd:50:18:ae:ed:81:ef:fd:9e:30:57:c3:
88:5f:bd:d5:c5:70:c0:93:7f:fe:78:41:7c:99:c8:94:50:e5:
a2:58:41:80:20:dc:70:c6:6a:c7:fb:e1:2e:a2:07:9e:a3:00:
92:20:55:f7:79:78:57:4a:4b:d1:5f:f8:9c:b0:8b:43:a5:30:
8d:ab:64:f8:60:05:a0:57:0a:7f:7f:90:3a:e1:39:5d:fb:56:
ee:57:34:16:73:43:6a:8f:4b:66:35:38:e7:a9:1e:d8:b8:2e:
26:55:ef:cc:15:c0:71:37:af:06:48:5d:41:c3:c9:43:4a:84:
da:a1:0a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:57:05 2025 by rpki-client