Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
File: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft (raw, json)
Hash identifier: KgBd0TF9A/W4+OgDsguD9j5BIdsPdHOOGApIV6mG/50=
Subject key identifier: 9D:31:3E:AE:7D:A9:D8:59:1B:88:2B:88:CB:B8:2D:E1:38:C2:78:65
Authority key identifier: DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
Certificate issuer: /CN=df180e0543d471dcf0d83860d6be6395c2b88888
Certificate serial: 019679E9416E8D2D465AF7CDEDBDD4F4AAEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
Manifest number: 086D
Signing time: Mon 28 Apr 2025 01:00:51 +0000
Manifest this update: Mon 28 Apr 2025 01:00:51 +0000
Manifest next update: Tue 29 Apr 2025 01:00:51 +0000
Files and hashes: 1: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl (hash: GfHiLBBrw8goR0czRSnsFXMqpgzaDMOzomeC8s4FS2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:41:6e:8d:2d:46:5a:f7:cd:ed:bd:d4:f4:aa:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df180e0543d471dcf0d83860d6be6395c2b88888
Validity
Not Before: Apr 28 01:00:51 2025 GMT
Not After : Apr 29 01:00:51 2025 GMT
Subject: CN=9d313eae7da9d8591b882b88cbb82de138c27865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:1b:1b:db:f5:b0:2b:65:75:d2:4f:8d:26:
7b:01:39:eb:b2:4b:2b:2f:4f:9f:82:89:07:b6:10:
95:de:58:59:64:a0:cb:d1:95:d6:23:64:ea:96:d9:
37:df:52:0b:d2:17:3c:5f:4b:b3:64:f2:a6:0b:cb:
6f:2a:92:9e:ff:25:fd:4e:9c:96:cd:fa:04:e7:8c:
fd:b5:fd:7b:3b:8e:15:42:da:f3:c5:e6:e9:cc:5e:
66:11:c4:d6:4b:30:e6:66:c6:69:e7:07:df:2f:af:
fe:88:5f:a9:cc:19:ff:ac:cf:66:c4:28:7c:4d:05:
d6:eb:8b:c6:87:b1:1e:cd:d6:0b:ad:17:5f:44:ea:
a8:46:58:50:c4:95:41:2d:c0:d4:48:1f:52:b9:8f:
37:70:ee:d8:af:05:18:0d:90:9b:f6:e5:61:6b:18:
92:36:a6:2e:68:d1:99:22:a8:f0:32:27:fd:a8:c0:
74:47:8f:c8:b6:a5:b4:63:a2:cd:63:36:9f:cb:a2:
f2:34:ed:58:56:c1:68:06:3c:0b:97:5e:8e:a9:00:
03:ec:4c:48:ad:14:e3:dd:60:16:a1:64:95:0b:24:
f0:41:ea:12:2b:11:6e:db:de:e7:a5:b8:70:1a:25:
d7:56:92:46:60:5e:c4:33:fc:53:1f:56:bc:b5:2c:
c4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:31:3E:AE:7D:A9:D8:59:1B:88:2B:88:CB:B8:2D:E1:38:C2:78:65
X509v3 Authority Key Identifier:
keyid:DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:49:9b:d2:56:d6:04:d6:2a:28:6d:67:91:3b:75:19:d9:e5:
ed:2e:15:a8:94:02:fc:c3:ce:41:1d:87:49:f9:4e:9c:51:43:
9e:e1:b9:d3:e6:ce:16:fe:b6:67:dc:d6:55:15:78:dc:b9:b6:
f6:6c:60:d7:37:9a:3c:96:24:56:a1:da:8d:cc:b6:fc:d9:8b:
6a:30:0c:1b:7a:1b:eb:d9:46:fd:6a:fa:ec:1b:12:c8:33:a4:
5f:6b:0b:67:e1:ca:86:b2:44:5b:04:7e:33:cb:97:a5:71:0f:
c3:d4:a9:78:39:28:79:91:73:74:f3:cd:67:05:50:26:8e:30:
31:78:53:da:ef:52:8b:cc:da:d0:45:5d:4e:52:ef:8d:59:3d:
c7:7e:cf:3b:17:07:eb:21:16:c7:9d:34:96:1e:1a:33:fc:86:
47:4a:f8:29:c8:6f:b3:2f:d6:a0:17:c8:ad:e4:bf:8d:49:67:
6c:6d:2e:85:70:2a:32:79:2f:6b:7b:18:7f:ec:7f:53:87:32:
f9:4d:21:3b:93:42:f4:71:7d:ee:df:ba:cd:a5:ce:75:cd:6d:
90:84:38:c9:81:fb:62:1e:1b:6d:80:c4:a3:ce:fd:4d:94:23:
c8:15:56:f0:cf:aa:72:39:c8:b4:9f:74:4b:25:f2:cd:f1:ab:
07:7e:df:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:54:00 2025 by rpki-client