Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
File: 3C8IdW9U7NcoDR6sz4eK6z8orE8.mft (raw, json)
Hash identifier: vGZtBJ5FrRYBT1fE3naWCPF2/sXD/M9EidZyYydbiac=
Subject key identifier: 01:E1:C5:2F:7D:FE:DB:73:FD:B7:59:07:51:D1:CF:89:DF:E4:0B:93
Authority key identifier: DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
Certificate issuer: /CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Certificate serial: 01969183A853F7585E54D58325BA71B29A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
Manifest number: 122B
Signing time: Fri 02 May 2025 15:00:46 +0000
Manifest this update: Fri 02 May 2025 15:00:46 +0000
Manifest next update: Sat 03 May 2025 15:00:46 +0000
Files and hashes: 1: 3C8IdW9U7NcoDR6sz4eK6z8orE8.crl (hash: CezDbScR45dfYKRzNUJQT+CG07z+CzSU0ioC/mt4NLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:83:a8:53:f7:58:5e:54:d5:83:25:ba:71:b2:9a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Validity
Not Before: May 2 15:00:46 2025 GMT
Not After : May 3 15:00:46 2025 GMT
Subject: CN=01e1c52f7dfedb73fdb7590751d1cf89dfe40b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:54:2a:7b:ae:20:50:65:68:47:2a:57:5f:
14:f9:c6:14:c5:20:c8:42:58:fb:2a:a4:d3:b3:03:
fa:0d:86:b2:dd:cd:ab:c5:f6:d4:3c:a4:b8:47:af:
8c:2e:11:28:52:c6:bd:fd:0c:98:d6:40:69:24:e9:
d6:bb:1c:ce:5d:b9:a7:ef:2d:37:14:f6:bc:05:1e:
85:bf:34:1b:27:d8:f6:f1:9a:de:13:65:26:fc:3f:
e8:f6:20:11:99:39:40:c2:3f:5d:95:e9:b0:1f:7c:
dc:ff:e8:74:18:48:fe:e1:e6:15:56:00:73:ac:ae:
0d:53:a3:7f:9d:2c:ea:d3:01:36:b4:90:a0:39:21:
ba:de:12:a9:43:5b:d7:e4:62:57:15:aa:05:23:2c:
ec:21:6b:dc:25:83:f4:2f:59:d6:5c:61:92:d6:2f:
c4:3a:a5:cd:df:d4:a1:d6:3b:7b:b2:b2:4f:4a:ff:
3c:60:c5:04:5b:e2:ae:d2:8b:b7:b5:47:4c:cd:45:
d3:f1:0f:70:a7:5d:38:f1:3a:9c:79:c3:fa:b7:c5:
54:75:fe:32:2a:d2:e8:7c:ba:01:9a:0c:04:45:45:
12:7f:81:d8:ac:13:3e:bf:47:ee:7f:6a:e6:b3:e1:
bd:73:de:0e:56:d0:c6:d6:33:a5:25:09:c9:08:72:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E1:C5:2F:7D:FE:DB:73:FD:B7:59:07:51:D1:CF:89:DF:E4:0B:93
X509v3 Authority Key Identifier:
keyid:DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0c:83:66:7a:7e:b5:36:21:f0:12:0b:cb:f2:73:d4:f8:7b:
f1:97:05:20:51:8d:92:23:d8:74:ac:c4:c5:1c:c7:18:5e:e1:
15:dc:6b:31:8f:35:52:44:e9:4b:94:63:7c:59:9c:71:de:b9:
b6:e1:d0:16:19:4d:3e:01:c3:07:f4:f9:a0:4f:b3:89:f8:58:
30:98:8b:47:74:22:21:ad:0b:54:14:f7:c1:02:71:91:92:b6:
38:06:44:93:e3:5d:54:af:c1:1b:37:d5:25:08:73:45:57:1f:
83:41:62:20:2f:f1:fd:2d:6f:4a:d0:62:18:ad:05:9b:da:27:
61:e7:af:4c:bd:21:41:c7:1a:29:a4:07:08:77:24:e4:37:12:
61:e6:a9:c9:63:b8:6a:a4:5a:b1:03:96:dc:43:34:08:ba:93:
20:91:4a:74:72:e3:fa:4a:34:b1:bb:5a:bd:1c:a8:85:a8:a1:
91:d2:75:d1:5f:ce:e3:e6:2d:c6:d9:6d:02:07:d8:2e:e5:3d:
cf:dc:42:12:60:dd:23:7e:ef:9d:61:3e:12:0c:ba:3c:fe:f2:
2d:a4:2d:9b:70:e3:76:28:ef:eb:d6:09:d3:55:a1:8d:f0:ef:
5f:1a:7b:7a:e1:31:bf:d4:1e:01:5a:38:1a:5c:a2:62:54:a3:
a3:54:3a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:58:09 2025 by rpki-client