Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
File: 3cwuYUgshl3CU8D6lD49os6X2gU.mft (raw, json)
Hash identifier: CrHK4fpiWtUirqSry0gAKC9IeHJ8EOVvOLjyKs/8ssE=
Subject key identifier: EF:B9:B8:06:74:BB:AF:8F:40:FC:0A:32:B1:F2:D8:B3:04:C4:41:14
Authority key identifier: DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
Certificate issuer: /CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
Certificate serial: 019684DA7FA59840DE533677E83CF00101EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
Manifest number: 049B
Signing time: Wed 30 Apr 2025 04:00:34 +0000
Manifest this update: Wed 30 Apr 2025 04:00:34 +0000
Manifest next update: Thu 01 May 2025 04:00:34 +0000
Files and hashes: 1: 3cwuYUgshl3CU8D6lD49os6X2gU.crl (hash: aGZ9vTJm9S6rf6HOxWjSj+KhCLRYneO40xbN8VVNZOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:7f:a5:98:40:de:53:36:77:e8:3c:f0:01:01:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
Validity
Not Before: Apr 30 04:00:34 2025 GMT
Not After : May 1 04:00:34 2025 GMT
Subject: CN=efb9b80674bbaf8f40fc0a32b1f2d8b304c44114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:a5:7d:35:82:0c:b1:a2:8c:5c:dc:ef:e7:
65:02:b6:cc:2a:94:ca:0e:cb:7d:5a:c5:61:28:33:
8d:87:d3:d8:ac:01:0b:a2:7a:2c:aa:10:94:d3:ef:
83:e0:d5:cc:d3:79:f7:3e:34:a2:b2:8d:e6:28:fa:
5d:c7:eb:28:45:0c:34:9d:cf:49:51:50:a5:91:f6:
96:cc:e8:98:7c:9a:21:75:63:f4:8a:e5:fb:a3:c8:
ef:a9:15:3c:13:80:3b:35:a1:c7:16:27:6c:1d:cb:
cb:e3:02:1d:6f:db:ff:b6:78:c6:88:9d:5b:49:79:
16:20:02:75:5e:99:71:f8:bc:d2:89:7b:68:4b:08:
1b:11:a6:b8:9e:4c:e6:d8:f8:c8:62:e1:c6:b4:5b:
87:73:42:ad:b3:88:b1:dd:9a:89:c8:9d:57:b6:6a:
ed:9c:4a:aa:75:5f:f6:bc:be:05:9b:5e:07:eb:0f:
30:fa:87:a5:c9:14:fa:03:62:18:6c:29:aa:8f:81:
88:ca:67:f4:09:45:67:a9:97:53:4a:1c:c7:c5:1a:
22:41:3e:39:86:5c:28:39:47:03:4f:26:4d:14:75:
7c:8a:6a:8f:10:6e:3c:a7:a1:86:33:5d:11:94:84:
b7:a6:bd:49:a8:11:bc:08:14:a3:56:72:16:0b:39:
94:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B9:B8:06:74:BB:AF:8F:40:FC:0A:32:B1:F2:D8:B3:04:C4:41:14
X509v3 Authority Key Identifier:
keyid:DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c2:0c:e9:b8:8b:78:4b:09:d1:08:f1:57:9c:24:c9:0b:a8:
af:c1:08:f6:ae:68:d2:47:f9:69:5c:6d:94:a2:11:b3:00:bb:
6f:fb:6e:58:1b:43:71:f8:ea:90:64:40:18:37:6c:2c:c5:51:
9c:33:b1:0d:01:09:58:c9:37:41:3c:5e:9c:7a:1e:6f:0a:e1:
56:ef:b3:0c:1f:74:48:fa:0b:4f:b0:5e:5d:79:94:54:49:7b:
a2:04:86:b9:7a:97:be:8c:4d:b9:8d:43:f4:67:16:f5:99:36:
47:3e:5f:36:a6:f5:55:ff:ec:5f:10:1b:3f:6c:0e:18:a3:cd:
28:63:ca:61:6a:a1:02:fc:ba:12:09:66:2c:2b:5f:18:ed:0b:
b6:67:e1:33:9c:0a:97:7e:26:ea:d8:6c:af:31:d5:4a:38:05:
33:b9:0a:df:ae:fe:e1:ba:c2:c9:91:0f:87:e9:e4:b5:e2:37:
c3:ac:db:cf:17:c5:97:36:bd:ed:2a:6a:50:83:4d:2b:62:85:
19:68:01:54:1f:a9:ce:5e:f4:f4:48:18:c2:22:a0:f0:c2:f8:
f0:66:7c:ac:2c:8f:35:3e:05:e0:4f:a7:20:99:b7:0b:aa:6b:
92:40:42:75:35:50:5f:76:03:b0:0e:a7:7a:00:77:66:0d:25:
e5:cd:4f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:18:24 2025 by rpki-client