Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
File: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft (raw, json)
Hash identifier: aYmWXHaCfE7zZhxQnc/RkHHvVo/dBizriK/fopkOQNk=
Subject key identifier: 55:A7:58:B6:2D:28:F3:AB:AE:E6:0D:02:4F:5F:87:29:E2:9B:D7:FA
Authority key identifier: DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
Certificate issuer: /CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Certificate serial: 019681A323516626C66A75F7BC97F2FE8D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
Manifest number: 1512
Signing time: Tue 29 Apr 2025 13:01:14 +0000
Manifest this update: Tue 29 Apr 2025 13:01:14 +0000
Manifest next update: Wed 30 Apr 2025 13:01:14 +0000
Files and hashes: 1: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl (hash: hm1FTJtlnKouqJhfPqLs9kg628K828qfTPyf87wfz3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a3:23:51:66:26:c6:6a:75:f7:bc:97:f2:fe:8d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Validity
Not Before: Apr 29 13:01:14 2025 GMT
Not After : Apr 30 13:01:14 2025 GMT
Subject: CN=55a758b62d28f3abaee60d024f5f8729e29bd7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:06:6e:4b:c8:25:f7:35:fb:c3:25:69:65:
7e:c0:10:90:18:9f:fd:92:ed:17:73:b5:fa:f2:a5:
91:3c:1f:87:aa:2f:ed:d3:89:8a:d2:cc:6e:2d:f2:
a8:89:51:de:7d:8e:f3:b4:2a:18:c3:0d:66:22:3a:
5a:bd:b7:a4:9a:a6:a1:49:38:2c:54:c9:e3:d3:2f:
10:97:68:30:aa:c1:e3:c3:81:53:94:ae:c8:3d:c5:
92:cc:8b:ee:bc:34:c6:18:40:0d:19:72:31:87:fa:
88:79:8f:9c:d3:f0:98:14:1d:6f:42:91:a0:a6:66:
14:18:e4:db:52:d3:46:bd:7a:f3:cd:ff:a8:ac:6a:
46:5c:63:77:5d:c7:10:08:87:05:44:f5:69:20:51:
da:21:a2:62:3a:22:79:0e:c9:7d:dd:90:11:5f:12:
c5:b0:0f:28:f8:7d:5a:83:1e:bb:a3:6b:f4:d1:40:
ff:86:75:8c:49:16:b4:b4:fb:c9:73:2b:ef:80:1e:
e4:da:97:76:af:32:0c:71:96:6b:16:f5:09:b1:80:
52:58:c3:a2:47:16:6f:17:17:73:a8:87:be:70:6f:
4a:d6:b7:a4:dc:41:03:3c:ec:5f:ed:45:f9:8b:7d:
5b:e5:64:b7:94:ec:2b:f3:c7:b6:b8:59:12:89:32:
8a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A7:58:B6:2D:28:F3:AB:AE:E6:0D:02:4F:5F:87:29:E2:9B:D7:FA
X509v3 Authority Key Identifier:
keyid:DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9f:03:86:71:93:12:7d:fe:bc:77:01:a5:e0:1b:18:5b:89:
28:20:c9:e0:18:f7:28:bd:a3:51:52:2c:65:5d:73:b5:0c:da:
99:1b:f9:b2:44:bc:1a:b8:fa:cd:96:75:db:91:30:9d:cd:f5:
5a:1e:f1:40:d7:78:a8:b6:95:3e:94:10:82:18:8a:b2:dc:a8:
ae:4b:f5:c0:a1:23:7c:27:f6:6c:da:84:fc:79:1e:ce:5e:0a:
65:ce:be:b8:50:7e:f3:64:4a:b7:eb:45:42:fd:8c:4a:b6:e9:
73:f2:c3:a1:37:56:46:43:d1:37:a5:60:15:8b:6e:79:5a:ad:
b3:c5:fb:af:8d:2c:f5:49:d7:bf:a5:71:07:40:f1:c1:d4:c6:
cc:a3:98:32:b5:57:0b:b5:de:34:7d:db:25:b2:fb:f0:0d:c1:
35:bf:ed:01:fb:28:94:f0:77:b2:8a:27:5d:ab:ae:6b:42:c5:
16:2b:5f:8f:ad:03:7a:80:7c:f6:e2:89:bf:b0:6c:ea:8c:88:
d6:5c:b8:fe:ee:cb:27:80:d9:8e:ed:51:49:1a:29:53:a1:94:
e1:85:86:da:7e:9d:7d:d4:ae:b9:fb:af:0e:67:c7:cf:a2:50:
52:0c:62:71:ce:3a:71:a7:18:f3:6f:6b:56:33:0e:b7:b0:49:
25:2a:01:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:55:33 2025 by rpki-client