Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
File: t3RSzSU14-k1ff-IGIXq2RSQpGM.mft (raw, json)
Hash identifier: nxYW2lcMpNQhlbloR5O+Plu8Sjx5jf77RRbmOMheiVE=
Subject key identifier: 61:66:A1:40:A0:A3:F9:3D:3C:B0:8C:52:AA:1B:5C:27:1E:A1:8D:38
Authority key identifier: B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63
Certificate issuer: /CN=b77452cd2535e3e9357dff881885ead91490a463
Certificate serial: 019683C7C267FF3542DF20D57F61F1833EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
Manifest number: 04CB
Signing time: Tue 29 Apr 2025 23:00:28 +0000
Manifest this update: Tue 29 Apr 2025 23:00:28 +0000
Manifest next update: Wed 30 Apr 2025 23:00:28 +0000
Files and hashes: 1: t3RSzSU14-k1ff-IGIXq2RSQpGM.crl (hash: KLW5BUT3Dl1yHTi3AZZkIeQb+eDLy/zo7s+hq3yQs/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:c2:67:ff:35:42:df:20:d5:7f:61:f1:83:3e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77452cd2535e3e9357dff881885ead91490a463
Validity
Not Before: Apr 29 23:00:28 2025 GMT
Not After : Apr 30 23:00:28 2025 GMT
Subject: CN=6166a140a0a3f93d3cb08c52aa1b5c271ea18d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:08:89:2d:05:d1:06:7a:0e:6f:88:67:d5:
27:eb:fe:90:54:03:1d:ec:aa:53:c5:01:ad:70:c0:
cf:6d:c3:03:dd:ca:44:f9:1a:e6:86:95:10:b9:b7:
2a:a6:b9:64:9f:bf:11:47:07:d5:2d:ea:90:57:4e:
23:23:d1:81:7b:76:ef:ac:c0:4c:ea:3d:c2:e2:5b:
f9:50:a5:06:68:40:27:06:20:4a:8b:ed:fc:45:83:
16:38:d8:a5:67:dd:49:7c:f4:27:16:89:d9:e6:f0:
3b:ad:ba:90:69:e8:bf:6c:47:e7:8a:43:c6:4b:12:
29:5d:a7:12:e7:67:6b:b4:f9:a4:93:bc:3c:c7:76:
9f:0a:d1:6e:c7:52:f8:58:9d:2c:1a:a9:01:09:f4:
6c:ec:6e:7b:79:0d:35:6a:d1:5c:e9:22:cb:64:b3:
9f:f6:dc:4a:5f:7e:e6:94:e1:94:6c:ac:97:a2:b4:
dc:c4:8d:fb:72:52:26:10:29:18:56:13:96:5f:cc:
2d:79:94:1a:e1:19:b7:a5:d9:f6:4a:7d:8e:a3:b0:
50:5f:a0:48:35:25:f2:4c:8e:c2:04:37:ec:fd:b4:
4c:83:47:70:5f:77:94:c7:9b:b3:d4:39:75:0b:73:
5a:5d:f1:14:f1:86:49:7e:a3:22:7d:96:72:73:25:
74:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:66:A1:40:A0:A3:F9:3D:3C:B0:8C:52:AA:1B:5C:27:1E:A1:8D:38
X509v3 Authority Key Identifier:
keyid:B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ac:cf:3d:a7:f1:43:67:42:10:ff:79:a1:56:46:8f:dc:d9:
4c:e7:c7:06:80:bf:3c:75:34:56:35:6f:a2:c1:89:45:56:f3:
3e:ce:ab:ed:35:3b:03:04:7a:01:bc:09:1a:e4:92:11:4d:6f:
b8:44:d9:a8:03:16:7b:7c:25:54:1b:fd:80:85:de:78:20:c8:
15:a2:1d:46:f3:60:14:30:d9:d9:39:32:d2:2f:e9:09:41:3a:
b8:3d:c2:a7:ff:eb:bc:55:58:d5:8a:5e:70:5d:4a:b7:f7:1e:
26:d9:c7:e3:d2:f5:8d:1a:67:0e:36:5f:ee:5e:58:98:c0:90:
d5:05:c4:34:48:62:0c:ba:5f:35:94:65:f2:a7:54:68:2d:da:
c8:8e:95:a9:a1:a3:57:da:79:3c:07:67:11:37:b0:d3:95:38:
f8:b4:a1:b7:76:bd:2b:85:3a:16:8e:0d:68:f4:9d:d5:67:bc:
15:2b:cf:36:9f:f4:af:b5:87:33:69:c2:87:f5:e8:a2:ef:c0:
3d:ed:a1:45:b1:51:32:2c:3d:54:68:26:11:92:24:aa:ce:56:
cd:8f:b3:08:96:0b:fe:14:da:7f:9e:42:4b:3f:7b:b8:af:88:
2f:1f:d7:5b:28:66:0f:ee:59:39:9d:51:19:9c:87:3d:58:a0:
71:a2:31:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:27:13 2025 by rpki-client