Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
File: DW3GbMOENrasMel-cS0hlAfIPPQ.mft (raw, json)
Hash identifier: hFeqGoCXCpFg8gpzR57Ee7vgmeW0sV0twp17CkV4jQE=
Subject key identifier: 92:19:43:A8:AA:16:E9:30:03:59:FA:D1:87:F1:9C:59:FD:6B:F4:DE
Authority key identifier: 0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4
Certificate issuer: /CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
Certificate serial: 019684DA93D7C51BB50984E5BE1467105A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
Manifest number: 039A
Signing time: Wed 30 Apr 2025 04:00:39 +0000
Manifest this update: Wed 30 Apr 2025 04:00:39 +0000
Manifest next update: Thu 01 May 2025 04:00:39 +0000
Files and hashes: 1: DW3GbMOENrasMel-cS0hlAfIPPQ.crl (hash: G9j6hbA4BS/ySbF4+VRO4Tbzd4FoZDEHh428kKfPxag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:93:d7:c5:1b:b5:09:84:e5:be:14:67:10:5a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
Validity
Not Before: Apr 30 04:00:39 2025 GMT
Not After : May 1 04:00:39 2025 GMT
Subject: CN=921943a8aa16e9300359fad187f19c59fd6bf4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8b:76:f8:70:4f:24:fa:d5:ed:00:3b:e5:0f:
b9:24:ff:3a:b6:ff:59:dd:67:e0:5f:e3:87:b0:9e:
66:68:e0:17:5e:8d:d9:d2:b7:64:9f:a1:93:58:7f:
bd:b0:12:9e:be:eb:c3:63:01:6a:27:fd:a5:82:79:
c0:21:3d:ea:33:4e:68:22:cc:62:b9:0a:7b:39:02:
3f:c4:a7:95:b9:84:fb:08:7d:11:65:4a:58:cc:4d:
b2:85:b7:2c:fd:b8:26:be:c3:b8:f1:d0:f8:b6:d7:
f6:1c:1f:74:63:35:9f:e4:db:10:71:f4:2c:d0:1b:
a7:fe:01:59:74:d5:61:30:2e:f6:ca:d9:b2:4f:99:
1e:9f:27:5e:63:34:2d:e6:97:ed:d2:d2:4c:f0:3a:
cf:af:12:34:a9:76:2b:92:b4:51:13:49:08:cd:b2:
06:b4:e3:4f:f5:74:26:81:5f:26:95:2a:a8:b7:29:
0a:09:d1:e3:50:39:fa:c7:c2:d1:71:ea:5b:0e:9b:
3e:19:7f:84:07:52:a1:4d:39:81:a5:fe:5c:e4:fd:
27:69:18:a0:2b:40:56:48:db:8a:87:8d:b7:8d:c8:
ff:8b:64:32:68:4f:4e:d8:1e:d6:3a:6e:00:0f:4b:
4e:ff:06:f8:78:29:b3:22:4d:ed:50:d3:b6:09:21:
f1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:19:43:A8:AA:16:E9:30:03:59:FA:D1:87:F1:9C:59:FD:6B:F4:DE
X509v3 Authority Key Identifier:
keyid:0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c4:a3:a2:b7:d3:15:c9:f1:4f:36:11:60:0c:8a:38:98:2d:
78:9e:97:5b:b6:bd:81:9d:02:d1:10:e6:eb:e7:0a:12:ee:34:
dd:93:27:ac:8d:f8:d8:2c:c7:7a:3e:50:21:20:24:a5:e0:dd:
fe:8b:9d:16:88:65:55:34:d4:03:f2:1b:74:02:c8:9f:81:4c:
0a:01:17:d7:b1:63:42:7d:18:79:ee:a7:20:70:b5:1f:18:6b:
c5:81:5f:c0:94:43:f6:cd:02:0e:28:84:49:c7:07:c1:7e:b5:
17:85:d5:78:3c:d4:7f:41:18:95:44:a3:59:29:94:d5:3b:59:
af:1f:bf:b8:3a:a5:ac:16:ba:0b:6e:16:fe:e5:08:28:b6:f7:
43:27:97:fd:ac:9c:00:65:de:b8:84:92:48:7d:53:e1:d7:18:
d5:29:13:fc:1f:28:86:d4:cd:a9:cd:f8:70:d5:c8:91:cd:8c:
dd:d8:a4:9c:a3:ec:9c:8b:a5:89:eb:aa:15:11:6e:86:81:30:
61:f2:9b:6f:72:d3:8b:52:d5:ef:47:f5:d6:25:75:47:45:cf:
6a:96:09:8b:74:3a:ba:3c:cc:e0:5c:b9:c6:af:b6:06:01:e7:
37:84:96:4e:85:22:88:3b:89:5a:80:73:04:26:7e:c2:f5:86:
29:80:a0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:51:02 2025 by rpki-client