Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
File: rV3Hd3t3orNHfGernSbMeqAvOIk.mft (raw, json)
Hash identifier: x6odPViWUvu2HHhOn1TwkleUc3AiUIYvv7Plm5CQed0=
Subject key identifier: 9B:14:9C:75:38:8B:02:94:71:D4:07:5B:24:B0:66:9E:6C:24:FA:29
Authority key identifier: AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89
Certificate issuer: /CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889
Certificate serial: 019685B614B9D0978B308FAAAC77212CD89A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
Manifest number: 1492
Signing time: Wed 30 Apr 2025 08:00:24 +0000
Manifest this update: Wed 30 Apr 2025 08:00:24 +0000
Manifest next update: Thu 01 May 2025 08:00:24 +0000
Files and hashes: 1: rV3Hd3t3orNHfGernSbMeqAvOIk.crl (hash: JANWvPQCSyZ106oRjqUIsGWUmQZ3H5aqIcvTV4ls7LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b6:14:b9:d0:97:8b:30:8f:aa:ac:77:21:2c:d8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889
Validity
Not Before: Apr 30 08:00:24 2025 GMT
Not After : May 1 08:00:24 2025 GMT
Subject: CN=9b149c75388b029471d4075b24b0669e6c24fa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:39:a3:0b:c6:28:13:85:c4:2d:31:ae:89:
dd:af:e6:67:29:44:77:4a:53:a7:59:cf:54:6c:a8:
3f:c0:68:d7:0f:4a:c3:14:d7:7c:5d:21:ce:d6:96:
b2:7e:99:f9:82:6a:4a:4e:55:77:8c:17:b8:18:b9:
a9:98:d4:11:4a:e5:4b:66:e3:76:90:66:8a:6d:b5:
11:33:4c:85:f0:66:d0:b1:3a:73:4f:bc:d8:8a:3f:
3a:d6:5c:35:1c:7f:de:aa:56:3b:9f:5d:a5:11:18:
0c:bc:c4:52:16:11:71:9b:41:4f:22:1c:91:f1:28:
62:26:8f:d3:9f:a3:83:5c:c6:0f:60:2e:78:62:fc:
57:cb:77:83:ab:de:f4:b7:47:eb:5c:00:e3:3f:82:
83:53:6a:99:b2:d6:ef:b1:a0:18:dd:35:77:41:f3:
b3:5e:b5:f7:53:f2:1c:de:07:0d:96:f4:6b:4c:19:
0f:ef:03:e6:6f:99:e4:60:d5:b0:59:39:6f:b6:52:
e9:b8:cd:e6:b7:db:74:b4:74:b7:9f:18:53:5d:cf:
89:0b:4a:ac:9f:c0:eb:10:ca:ea:1c:66:ba:7a:13:
0f:c0:14:ed:42:13:9e:88:fd:2c:55:bc:0a:7e:ca:
9d:5e:4e:6b:c5:87:dd:52:7b:36:03:80:cf:97:4b:
d7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:14:9C:75:38:8B:02:94:71:D4:07:5B:24:B0:66:9E:6C:24:FA:29
X509v3 Authority Key Identifier:
keyid:AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c2:57:9d:0b:b8:59:68:18:5e:aa:59:ee:c6:f8:a4:78:17:
a1:21:39:52:56:9a:32:4b:db:ea:c0:a7:c9:1e:9d:af:66:32:
f7:2b:31:32:02:de:b8:d7:79:c9:71:2b:69:c1:f6:b7:b3:02:
e3:d5:0a:75:32:c6:35:9d:1f:94:2c:26:a3:f1:7a:d2:d2:ea:
fa:67:7b:e2:42:6f:47:1f:5b:e0:a8:a8:02:dd:10:03:37:e4:
81:cd:7c:a7:39:35:2c:4e:f5:03:a8:43:55:f5:11:14:b4:bf:
cf:33:19:4c:93:9b:79:1b:7c:40:2b:cd:77:1b:89:00:38:85:
5a:0f:64:e9:6c:15:7e:dd:ed:a8:3f:06:d3:dd:56:45:5f:7a:
6f:88:b2:36:f9:9e:13:26:8c:3c:ee:8a:c2:bf:1a:30:c9:94:
0e:2a:54:9a:57:cd:4b:71:9a:26:2c:3b:d7:17:f9:48:01:74:
48:85:20:09:fc:38:70:0a:8b:3e:8a:11:30:1a:91:dd:fd:8f:
d3:cb:e8:25:09:2b:51:68:a5:b8:f6:b0:b0:9a:e0:f3:cf:bb:
5f:8a:ac:84:94:18:d5:63:5a:58:cf:15:e1:9b:79:1c:48:48:
93:42:b5:ad:84:5a:c4:fb:b1:2c:81:94:25:06:b4:23:85:f6:
40:08:01:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:15:34 2025 by rpki-client