Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
File: l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft (raw, json)
Hash identifier: sHGQcyUyUIH29XRGXgbPsb2vXBgQ8QqJpG2BgNFjuyw=
Subject key identifier: E2:DB:40:9B:8A:9E:28:49:3B:65:0B:6C:22:48:A7:33:B8:9D:AE:77
Authority key identifier: 97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E
Certificate issuer: /CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
Certificate serial: 0196789F38606C6F5B045B711689BB100A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
Manifest number: 03FF
Signing time: Sun 27 Apr 2025 19:00:22 +0000
Manifest this update: Sun 27 Apr 2025 19:00:22 +0000
Manifest next update: Mon 28 Apr 2025 19:00:22 +0000
Files and hashes: 1: l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl (hash: IjumiHICGdoxiLi3x+58i0ZJatmpz8lD4dlkHioELdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:38:60:6c:6f:5b:04:5b:71:16:89:bb:10:0a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
Validity
Not Before: Apr 27 19:00:22 2025 GMT
Not After : Apr 28 19:00:22 2025 GMT
Subject: CN=e2db409b8a9e28493b650b6c2248a733b89dae77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:a9:cc:e6:a6:b9:0f:bd:0e:21:d6:de:dd:
aa:0d:d1:17:4e:7c:36:ba:b7:ef:5a:6b:2e:bd:af:
ae:c4:bc:fd:b2:2d:4b:61:99:f2:dd:99:6a:4b:33:
6a:d9:fa:15:9b:2d:20:7c:b0:13:cb:bc:d7:a4:e3:
61:97:8a:4b:2b:20:3b:3f:5c:aa:d7:9d:df:7d:09:
58:6e:ea:9e:e9:44:05:3d:78:95:f1:4a:54:6e:4b:
ac:27:4d:2b:f0:9b:b0:de:ce:b7:cb:21:18:b0:3b:
a2:44:d3:3c:e5:5d:9c:c3:46:b1:df:d0:af:20:92:
09:c5:0b:1c:48:29:49:57:c1:85:75:d8:10:9d:11:
77:d4:c1:f2:df:c0:27:01:f2:b6:f2:f5:87:b1:55:
4d:39:2a:1e:23:9c:20:bc:88:75:cf:a9:49:48:95:
23:1e:ad:11:f3:5f:e9:d5:0b:26:8c:f3:db:fe:19:
79:e9:73:4a:b7:e1:ce:e0:70:21:6a:0b:40:ed:11:
d6:7f:a3:04:3f:33:a8:9c:ef:8d:14:c3:54:fb:b8:
41:46:46:5f:68:c9:1c:62:77:c6:cb:9b:e7:e6:7e:
f1:bb:41:49:38:65:75:82:01:11:a0:f1:b4:5f:21:
22:28:10:f5:99:e5:b7:c6:a0:fe:a6:a6:f9:42:01:
42:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DB:40:9B:8A:9E:28:49:3B:65:0B:6C:22:48:A7:33:B8:9D:AE:77
X509v3 Authority Key Identifier:
keyid:97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5a:af:59:ae:fe:47:c4:96:bc:2a:ef:79:d9:19:6b:2c:a3:
e1:93:00:b0:59:e2:99:38:a3:99:48:81:d0:3e:c2:83:c2:c2:
91:f1:2a:c6:bd:90:91:e2:34:df:19:fe:73:46:67:f5:6f:2c:
37:6e:1b:a3:6d:0d:de:be:10:9f:db:0e:90:fd:ac:0c:c4:83:
69:e9:4a:68:16:ae:cd:8c:a6:d1:24:53:50:99:6e:42:c9:90:
c2:dd:e6:18:c7:98:66:73:09:e6:fe:14:52:78:b3:a9:6d:f0:
cd:c3:c3:11:e0:c3:bd:16:ef:6f:96:76:cf:0a:5f:7a:00:96:
29:14:2c:ee:81:6c:1e:ca:58:68:1a:0f:ba:51:69:46:f4:cd:
c5:fa:ca:0f:6f:3d:b7:68:47:8e:3f:8d:4f:3f:64:29:3b:80:
78:46:61:1c:9c:5e:8f:0b:13:85:91:48:5b:f1:2c:3d:b8:23:
27:a9:05:ed:6a:3e:ad:82:a2:e9:6b:01:31:63:69:2a:19:27:
06:8a:71:e9:7a:86:fb:69:a7:3b:a9:3a:ad:ec:3f:66:bb:cd:
4e:05:81:bc:48:a3:de:ff:3a:1e:66:6f:e4:30:d5:02:a4:4c:
c9:22:ce:a8:59:8c:5b:5a:fd:be:0c:3a:d1:77:2d:02:a8:e3:
11:aa:db:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:41:10 2025 by rpki-client