Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
File: 3rwtwyLztJZucDtdjIi3FvDZsOk.mft (raw, json)
Hash identifier: Tzx5zl+6bmmzje78lLv7HfhKDdy7oEMV1LpPLPZreOY=
Subject key identifier: 7F:CF:EB:D8:61:E4:26:DA:34:BE:9F:E1:64:80:5B:16:05:AE:5D:EE
Authority key identifier: DE:BC:2D:C3:22:F3:B4:96:6E:70:3B:5D:8C:88:B7:16:F0:D9:B0:E9
Certificate issuer: /CN=debc2dc322f3b4966e703b5d8c88b716f0d9b0e9
Certificate serial: 01969ABDC8330AC4352463F5C2985AF2E337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
Manifest number: 12E0
Signing time: Sun 04 May 2025 10:00:50 +0000
Manifest this update: Sun 04 May 2025 10:00:50 +0000
Manifest next update: Mon 05 May 2025 10:00:50 +0000
Files and hashes: 1: 3rwtwyLztJZucDtdjIi3FvDZsOk.crl (hash: sH5dlu90QF0p/W8gvmZEoy/G6SXygYxOMcYcPcp7CGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:bd:c8:33:0a:c4:35:24:63:f5:c2:98:5a:f2:e3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debc2dc322f3b4966e703b5d8c88b716f0d9b0e9
Validity
Not Before: May 4 10:00:50 2025 GMT
Not After : May 5 10:00:50 2025 GMT
Subject: CN=7fcfebd861e426da34be9fe164805b1605ae5dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:bb:d5:ae:07:ca:fb:46:61:14:c1:15:df:
89:05:cc:63:38:bf:3d:7e:34:ab:25:bb:2b:2b:e7:
e4:4e:7e:23:25:65:74:59:2e:cf:93:50:9f:ed:21:
c3:9a:31:97:91:33:86:93:77:62:0c:e2:44:54:ee:
2b:69:42:be:cc:57:d9:f3:64:6a:4e:62:af:fc:25:
76:e3:03:6f:52:68:c6:21:b2:f8:00:f8:a7:d6:7b:
f5:0a:cd:b2:1c:88:e3:cb:52:9a:92:37:da:07:9c:
f9:fb:ee:98:73:0f:2d:c9:5e:32:e0:1b:c5:29:3d:
e5:54:02:8c:e3:2c:a8:df:41:cc:6e:a8:4c:bf:d2:
c5:02:5c:8d:de:97:76:40:7a:cf:db:30:6a:b0:e6:
5f:18:97:d2:2f:30:de:27:93:ef:02:1a:f1:7c:37:
22:a8:16:58:c4:40:ce:c6:78:24:19:e9:f3:ea:b4:
cd:f2:08:26:d2:95:00:62:5d:88:cf:12:c1:bb:1d:
25:a3:d1:92:ca:ac:af:2c:89:eb:5d:bc:a5:c6:c1:
40:28:5b:e0:cb:ec:d1:fd:9e:57:a3:1f:d1:4e:55:
2d:24:93:b6:83:11:1c:9f:c0:1e:7a:7d:77:1d:f3:
80:90:d5:10:b9:4a:88:eb:c1:a2:16:49:0c:c1:d1:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CF:EB:D8:61:E4:26:DA:34:BE:9F:E1:64:80:5B:16:05:AE:5D:EE
X509v3 Authority Key Identifier:
keyid:DE:BC:2D:C3:22:F3:B4:96:6E:70:3B:5D:8C:88:B7:16:F0:D9:B0:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c3:ca:9c:c2:bb:ea:16:39:5a:e2:8b:89:2b:c3:2d:8c:35:
b4:95:b4:92:d8:6d:d0:0f:a3:b7:f3:07:ad:18:68:5c:9a:69:
7b:d9:ed:97:5e:38:1f:e3:1b:ed:ae:af:6f:c6:c9:8c:00:0a:
b6:58:3b:d2:46:3b:f7:89:fd:60:37:81:6a:69:fd:77:0a:c8:
15:7d:e1:f1:33:03:24:81:a6:9d:e7:0d:2b:af:08:e3:bd:c7:
30:0f:75:cc:5d:29:58:e9:41:58:db:d2:7b:4b:01:6b:b6:49:
fa:13:2a:28:37:6e:07:79:87:49:55:e2:ff:14:a3:47:c7:bc:
4a:b0:63:d9:8a:86:92:49:b9:ec:63:00:d0:56:66:a7:f2:98:
e0:42:fb:d1:33:56:fe:1e:f8:31:e6:4d:23:0f:9f:9b:77:93:
ef:0a:a4:22:40:d7:fc:2d:e0:ff:9e:32:3c:db:f6:ec:f0:21:
d0:f5:8a:0c:0f:4c:64:da:47:32:14:88:7b:36:e7:ab:4b:a2:
a7:36:33:c5:08:54:5d:b9:37:7e:f0:a8:75:93:32:5c:82:dc:
c3:8f:e5:5c:d6:aa:8b:8d:a5:0b:7e:5c:15:c7:e8:1d:ca:72:
80:7c:ec:a0:75:f6:82:17:8c:ba:0f:96:e6:a6:f4:92:7e:c7:
c6:fe:e7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:33:24 2025 by rpki-client