Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
File: 3hItFywTsVKR5B-UVoFSWCb--JI.mft (raw, json)
Hash identifier: wojMNsb1nqFAPlCcMcnH9bf/XprW08tPrB7jUKDLS3Q=
Subject key identifier: D5:E9:A1:38:42:F6:B2:75:EC:62:F0:70:80:E7:D6:1F:00:F4:75:E9
Authority key identifier: DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
Certificate issuer: /CN=de122d172c13b15291e41f945681525826fef892
Certificate serial: 01968B1389EFEEB9D0C65B993BCA58DC2697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
Manifest number: 0E77
Signing time: Thu 01 May 2025 09:00:35 +0000
Manifest this update: Thu 01 May 2025 09:00:35 +0000
Manifest next update: Fri 02 May 2025 09:00:35 +0000
Files and hashes: 1: 3hItFywTsVKR5B-UVoFSWCb--JI.crl (hash: Uu47zD0oToy7H6BnUhySjdncf0WT2iPoXxK+/RH9SIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:89:ef:ee:b9:d0:c6:5b:99:3b:ca:58:dc:26:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de122d172c13b15291e41f945681525826fef892
Validity
Not Before: May 1 09:00:35 2025 GMT
Not After : May 2 09:00:35 2025 GMT
Subject: CN=d5e9a13842f6b275ec62f07080e7d61f00f475e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:7a:b7:4d:6d:a6:32:0f:9c:a6:27:65:3a:
c6:0e:5c:5d:ab:3c:78:45:8f:b1:1e:64:11:06:1d:
4b:d1:ff:9b:76:9a:7c:94:92:39:be:75:d1:44:0e:
bb:22:4d:ef:aa:09:0b:2e:de:f9:7f:0f:2d:f2:ce:
dd:9e:ad:02:03:15:08:5c:be:8a:1a:74:88:d5:16:
f6:74:98:09:35:c7:3c:13:0d:04:b2:0c:86:cf:80:
ab:75:9a:47:d9:eb:c6:39:b6:f4:5e:e8:01:df:ae:
ca:d2:b6:c7:1a:9b:2e:d6:ba:e1:3c:ea:95:0e:9c:
ce:bd:f7:78:a4:87:22:14:30:51:8e:12:14:5f:3e:
ab:76:74:ac:d3:03:b8:24:c4:88:5b:b2:a3:3b:88:
04:ac:ef:67:12:58:4e:80:e7:6e:74:4d:be:c3:8a:
ec:21:3e:59:ac:4d:08:f9:1b:31:0d:4f:04:cc:38:
91:30:cd:90:6b:cd:d6:e1:12:44:01:7a:5c:77:dd:
aa:0f:66:1f:af:56:46:b8:03:b3:22:c8:de:0d:ad:
75:5e:66:bc:8f:af:1a:39:64:92:65:e1:1c:2b:e7:
e3:86:ca:16:72:4e:d9:11:29:a3:11:db:f3:e2:a3:
0c:04:33:31:09:bf:ae:35:83:94:d9:40:25:78:97:
df:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E9:A1:38:42:F6:B2:75:EC:62:F0:70:80:E7:D6:1F:00:F4:75:E9
X509v3 Authority Key Identifier:
keyid:DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e8:06:dd:fc:09:c3:05:e5:89:cf:69:ad:ca:cc:4f:6e:a8:
9b:6c:12:58:4b:2b:6b:af:26:2f:3e:eb:25:d7:53:ff:97:d7:
c7:c8:0e:03:24:d8:56:f0:38:82:9e:1a:de:f5:80:c6:ae:5b:
85:c3:47:6a:50:89:54:67:f0:89:e1:1a:ca:bc:0b:65:a5:ec:
4d:cf:db:fa:8e:c2:a3:a6:40:8e:01:5f:89:f8:2f:e0:37:99:
e5:aa:00:40:f9:f9:7b:4c:8d:9f:9e:86:7d:38:d4:b1:36:a2:
da:15:d7:b7:30:ff:a2:c6:53:a2:d3:9f:c7:bd:84:1f:9d:78:
c0:3c:fe:0e:fa:04:53:ce:3b:c1:cc:2e:8c:c1:30:fe:e7:df:
23:41:e8:f5:8a:bf:e1:f7:71:10:dd:25:ad:9c:b8:57:62:97:
19:9e:97:1a:9d:fa:f9:53:d3:03:dc:ce:81:f6:ea:26:e0:18:
5a:ef:66:36:c0:b2:ad:fc:3d:3a:df:64:83:53:46:90:5b:15:
ef:75:05:6b:74:78:91:91:8a:5b:4f:bb:d3:8d:d1:e2:1b:9b:
82:f1:b6:8b:dd:eb:c4:4d:36:c6:ed:4c:e4:e2:b6:ac:35:93:
ae:d3:11:fd:e1:f4:a5:10:fc:4f:98:a1:59:23:e5:04:46:a7:
9a:cf:e8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:31:26 2025 by rpki-client