Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
File: t3RSzSU14-k1ff-IGIXq2RSQpGM.mft (raw, json)
Hash identifier: 2YmRRP5fosoqBWjzxbKYRGGsDW0ZmBxv1v4HT9T7VG4=
Subject key identifier: BA:A8:49:52:E6:D1:AD:4A:EF:61:AE:37:4F:3B:92:B3:35:1A:DC:7B
Authority key identifier: B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63
Certificate issuer: /CN=b77452cd2535e3e9357dff881885ead91490a463
Certificate serial: 01967FEB29AB9EED0B220EFB935605DC8404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
Manifest number: 04C9
Signing time: Tue 29 Apr 2025 05:00:40 +0000
Manifest this update: Tue 29 Apr 2025 05:00:40 +0000
Manifest next update: Wed 30 Apr 2025 05:00:40 +0000
Files and hashes: 1: t3RSzSU14-k1ff-IGIXq2RSQpGM.crl (hash: xj3++AIdEau3ubNwSkmHziRg95tDmluSbCx8LxCwfgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:29:ab:9e:ed:0b:22:0e:fb:93:56:05:dc:84:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77452cd2535e3e9357dff881885ead91490a463
Validity
Not Before: Apr 29 05:00:40 2025 GMT
Not After : Apr 30 05:00:40 2025 GMT
Subject: CN=baa84952e6d1ad4aef61ae374f3b92b3351adc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:f8:0e:dc:67:71:ed:7c:a9:f2:69:48:0e:
66:e2:1b:4d:fa:ac:a7:51:f6:6c:d8:78:52:d9:b1:
46:27:3a:5d:98:ff:f1:6f:9f:25:c5:f8:0f:ba:96:
65:9c:51:4d:5e:11:63:cd:b0:df:11:91:a9:6e:83:
7a:00:f6:ea:d7:a6:6b:7e:64:d1:7a:db:2b:e5:2d:
28:ab:0e:4e:ac:db:e4:ca:8f:44:0c:16:f5:4c:2b:
8b:30:24:30:0d:bc:93:99:52:7d:db:42:7b:f3:ac:
a4:be:bf:85:cf:dc:6d:24:46:dd:6b:17:94:21:cd:
be:6a:e6:f0:27:2a:f7:ed:f8:d3:3f:ba:a6:d8:b7:
25:da:2d:59:fa:ad:d7:f7:81:63:ae:77:2e:4d:fd:
4a:c3:80:9e:73:1a:dd:63:1e:0f:4a:15:ad:e8:f0:
47:73:dc:59:5a:53:0f:68:5f:c5:be:f1:44:20:c1:
d0:aa:28:d8:b5:be:a7:76:8b:90:60:a8:88:0c:97:
89:cc:26:9c:96:b4:8d:01:82:2c:09:58:48:4b:1c:
7b:22:b6:db:6b:cb:2c:c2:ca:05:e2:f2:cc:33:ec:
ce:28:d6:62:ec:5e:76:f5:cd:3f:37:8f:19:57:4b:
a0:93:9a:07:de:00:c3:dd:21:e1:34:89:a2:b6:a4:
58:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A8:49:52:E6:D1:AD:4A:EF:61:AE:37:4F:3B:92:B3:35:1A:DC:7B
X509v3 Authority Key Identifier:
keyid:B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cf:39:fd:af:8d:86:18:ce:f7:76:d9:b7:d4:6d:c2:dc:4e:
6f:32:b0:bb:e6:71:f0:19:cf:96:c5:de:62:98:8b:14:8d:96:
09:d0:99:df:af:e6:83:4f:d2:e4:11:13:1b:cf:45:f3:e5:08:
9b:3b:b4:b5:d4:10:70:51:9a:5f:c3:ee:38:47:82:31:50:5b:
84:4f:97:06:22:34:6b:4b:34:ce:36:06:bf:38:c7:10:82:a3:
4f:b3:37:44:9f:e0:9c:da:45:20:b0:2a:f0:ec:74:ed:eb:9f:
ca:69:ab:1e:d6:23:27:37:44:98:1f:a8:19:2d:b7:a8:8a:d0:
2e:6f:aa:21:c0:83:d6:5a:02:f9:42:14:7c:a7:ad:4a:fa:e7:
5a:11:5a:14:b8:18:4c:30:a8:49:b7:02:e8:97:dc:86:1d:43:
3e:23:b2:70:d4:6f:12:c2:06:3a:96:c9:d4:08:44:18:3a:b5:
28:ba:e7:8d:97:b7:af:da:76:96:9b:1f:4b:2a:fe:81:c0:88:
de:66:1b:8b:74:32:e5:b5:a9:c3:bd:75:06:f0:49:51:16:b9:
4f:64:98:a9:f0:b1:cd:79:87:64:70:17:4d:ef:de:27:3c:9b:
b0:88:22:18:ba:16:d8:2d:1d:d6:a1:8b:54:16:76:f8:cd:94:
3f:ec:9c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:03:14 2025 by rpki-client