Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
File: 3q91C1wrlTnZblZJdyr34Q7-D-o.mft (raw, json)
Hash identifier: 1acQjnG8Cpn6odTq1NsaWr6f+mE4Bnij871D4HDz9XM=
Subject key identifier: DD:14:A4:BC:9C:48:E3:32:5F:A4:95:72:18:2A:5D:49:85:6F:28:66
Authority key identifier: DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA
Certificate issuer: /CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
Certificate serial: 019685EDAA431974FD8F7367D31E10680C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
Manifest number: 0BA8
Signing time: Wed 30 Apr 2025 09:01:07 +0000
Manifest this update: Wed 30 Apr 2025 09:01:07 +0000
Manifest next update: Thu 01 May 2025 09:01:07 +0000
Files and hashes: 1: 3q91C1wrlTnZblZJdyr34Q7-D-o.crl (hash: yCoQMOPptW+w1ufNXKGiW8Jo8WGko0HA2F1hmqDADQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:aa:43:19:74:fd:8f:73:67:d3:1e:10:68:0c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
Validity
Not Before: Apr 30 09:01:07 2025 GMT
Not After : May 1 09:01:07 2025 GMT
Subject: CN=dd14a4bc9c48e3325fa49572182a5d49856f2866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:96:37:ee:48:fd:6f:c3:4e:c8:84:c1:96:98:
38:d9:6a:c3:e2:06:c0:32:8d:f4:77:d8:44:35:6f:
d6:d8:34:a3:6b:03:37:7e:e3:08:6a:e5:b0:d3:17:
39:76:71:55:95:6b:4e:8c:a4:19:d0:a0:13:0c:4b:
53:ea:df:ca:33:b9:3a:b0:d2:16:ce:81:90:89:e7:
d3:f2:41:79:fd:cc:b3:fb:62:4a:47:32:cb:b5:09:
46:0d:02:8f:90:e6:15:e6:60:89:cd:de:64:8e:d2:
31:3c:74:55:4e:7e:a4:6e:5e:3b:8e:00:4a:c1:5c:
52:35:9b:b5:2a:ef:7e:33:d3:69:d8:27:c9:d7:42:
64:b3:a4:07:08:80:41:a9:29:5e:0d:98:c1:d3:3c:
31:33:0a:e8:66:6a:80:e3:ff:fa:70:84:a4:49:c4:
6d:73:06:ba:0c:af:68:0d:5c:65:75:4f:25:33:d9:
b4:29:ef:53:9c:01:60:ea:7b:4e:53:fc:71:cb:c6:
57:7e:2f:9b:7c:e9:fe:16:c2:ac:4a:0d:5b:0b:80:
96:5d:62:21:1a:90:3b:8e:7c:4c:d1:c5:26:14:4e:
9f:65:2f:16:1f:51:ca:99:56:1d:64:d2:5e:c1:d5:
9e:68:8f:1d:fb:1c:a1:6d:c3:82:70:f4:11:1c:96:
67:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:14:A4:BC:9C:48:E3:32:5F:A4:95:72:18:2A:5D:49:85:6F:28:66
X509v3 Authority Key Identifier:
keyid:DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d0:57:49:17:ce:6a:06:9b:d7:5d:bf:7c:ff:0e:cb:4d:f1:
8a:ea:8d:2e:95:2b:dc:3b:63:55:d5:19:36:e8:08:0c:6b:6b:
1c:36:6e:d4:6c:91:16:47:e0:db:9e:e0:25:f9:47:09:b2:5f:
e9:56:34:99:cb:b7:f5:c2:2f:52:0a:e5:35:d3:79:3c:39:fe:
c5:ec:a2:db:9f:3c:a8:f8:b8:d9:2b:3b:f7:ae:02:76:1a:a3:
7b:92:43:54:8c:7f:1e:02:46:4f:5c:1f:83:9a:13:23:5c:5f:
7d:0a:79:d6:cc:66:7a:19:be:f7:e1:b3:e9:25:c3:42:b9:ad:
e5:95:31:8e:67:90:47:1a:a7:28:96:9c:c0:1c:65:25:37:19:
50:97:13:0b:7d:53:ab:cb:1a:d5:00:68:36:4f:db:3e:7f:d2:
41:d6:dd:00:2f:66:24:88:54:bf:64:c3:4b:99:1e:f3:7d:6c:
55:d9:6c:90:83:94:a1:cb:93:7b:c8:da:b0:ac:ab:3e:a6:83:
a6:a4:04:1b:52:fc:51:e9:95:50:43:fd:9d:eb:b0:c1:27:06:
33:7c:77:5d:4d:56:87:e3:b8:b7:84:f5:5f:b1:4c:96:8d:a1:
78:e8:bc:44:f5:ce:8a:8d:03:77:9b:07:1b:a4:34:35:f9:d0:
1e:c2:78:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:01:12 2025 by rpki-client