Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
File: J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft (raw, json)
Hash identifier: tL4KbsmBvpi5tS3j0hBk3NzMyd8OWGFWxF8mdR2gZFk=
Subject key identifier: B3:05:5A:45:D6:BD:CD:DF:5E:00:A2:1A:F6:22:A0:CA:EB:50:40:B7
Authority key identifier: 27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4
Certificate issuer: /CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
Certificate serial: 0196888002474E10DB550359FB88E572948D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
Manifest number: E3
Signing time: Wed 30 Apr 2025 21:00:12 +0000
Manifest this update: Wed 30 Apr 2025 21:00:12 +0000
Manifest next update: Thu 01 May 2025 21:00:12 +0000
Files and hashes: 1: J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl (hash: omlbzau6vS1mbgbxUkBSVJ1N5lk8sTxD6Dz16MuTpoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:80:02:47:4e:10:db:55:03:59:fb:88:e5:72:94:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
Validity
Not Before: Apr 30 21:00:12 2025 GMT
Not After : May 1 21:00:12 2025 GMT
Subject: CN=b3055a45d6bdcddf5e00a21af622a0caeb5040b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d2:12:9e:ef:73:87:fd:2e:aa:4b:3b:ca:dc:
37:29:32:ed:60:b5:c9:aa:f1:fb:1c:ee:58:29:a9:
38:6a:27:c8:61:10:21:92:4e:46:ae:76:26:47:80:
6f:ff:ba:eb:32:ee:83:18:59:89:af:d0:a1:06:ad:
42:b3:3c:a7:f6:b3:ac:cf:ec:92:cc:ff:17:bd:9a:
0f:0b:78:cc:68:e6:e1:1b:02:a6:2f:9b:f3:df:40:
65:38:03:d0:9a:75:5f:53:0e:a5:99:79:15:94:7a:
5a:de:1f:13:9c:96:25:a4:f8:e5:62:ca:80:33:7e:
cb:36:5e:26:5f:20:85:64:2b:c2:7c:26:3e:c4:2f:
ce:de:52:1a:65:c3:9e:41:5e:35:17:b4:5e:17:51:
c5:32:47:c6:95:a6:8c:0b:01:0d:40:cf:6a:42:c5:
7a:0a:02:e8:86:cf:55:2e:e4:f4:15:10:d8:c9:d7:
94:f8:80:e1:35:4d:57:d9:a1:06:da:20:d6:1d:4c:
37:4d:bc:34:89:49:c8:29:07:4a:94:6e:bc:36:e6:
67:bf:62:ef:8d:65:d0:6c:f8:c0:6c:b9:ee:43:17:
52:90:ba:d5:55:08:99:37:e8:a7:50:cf:56:12:c3:
01:53:10:e5:c5:71:97:1c:15:da:98:21:fd:1b:44:
54:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:05:5A:45:D6:BD:CD:DF:5E:00:A2:1A:F6:22:A0:CA:EB:50:40:B7
X509v3 Authority Key Identifier:
keyid:27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:62:2f:35:73:a4:20:da:cb:f5:a6:34:7a:b4:de:66:99:a1:
08:c1:36:eb:ac:91:f5:6a:4d:1a:0a:ef:47:8a:f8:cb:b5:31:
e2:da:a6:2a:8f:47:b0:54:f4:ac:70:af:03:b1:d3:16:55:b9:
b5:3d:60:3f:9b:74:60:17:4a:98:10:3a:fc:15:54:91:e4:49:
14:3e:1b:a7:24:6d:d6:3c:f9:42:db:f1:1e:96:ff:33:45:44:
27:2a:93:ea:6e:44:45:5c:0b:dc:bf:ec:6a:e5:04:3f:e8:11:
3b:2d:8b:39:6a:55:d5:9f:12:45:3e:de:92:99:eb:df:8c:0d:
67:9d:fb:8d:3e:65:e4:99:8e:e9:6f:c8:67:e9:5a:8f:0a:93:
f6:e4:b4:12:d7:b7:e8:9d:b9:20:1d:44:b3:f7:39:43:9f:1e:
3a:5c:b4:e7:e6:05:49:04:bf:5d:a2:9f:52:5f:7b:20:4a:81:
60:51:77:94:ed:92:1e:09:f5:4b:85:36:8e:3a:d4:32:af:08:
81:cc:73:02:be:3d:c8:76:9f:40:b1:85:51:28:65:01:ef:64:
94:6c:b4:f9:4f:0b:da:e2:4b:3b:d1:dd:ee:4b:b4:6d:da:2a:
e6:64:9c:3b:e6:67:a2:a7:f1:af:42:66:58:05:54:c0:6e:fe:
43:6a:f9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:01:30 2025 by rpki-client