Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
File: s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft (raw, json)
Hash identifier: NZhnd/YyRXs15wL49h8TVi3ClmhtCV6X5VurO1WuS/g=
Subject key identifier: A3:2B:F7:13:D3:BB:87:4C:07:0A:3E:B5:B4:E7:7D:85:32:11:A5:DF
Authority key identifier: B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36
Certificate issuer: /CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036
Certificate serial: 0196805929F24A8F689E1FE246B74A974FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
Manifest number: 0B32
Signing time: Tue 29 Apr 2025 07:00:49 +0000
Manifest this update: Tue 29 Apr 2025 07:00:49 +0000
Manifest next update: Wed 30 Apr 2025 07:00:49 +0000
Files and hashes: 1: s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl (hash: RXUjMdpZVciTsAZNBw4QiRBDSPkzwtztB4fSiyik8MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:59:29:f2:4a:8f:68:9e:1f:e2:46:b7:4a:97:4f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036
Validity
Not Before: Apr 29 07:00:49 2025 GMT
Not After : Apr 30 07:00:49 2025 GMT
Subject: CN=a32bf713d3bb874c070a3eb5b4e77d853211a5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:ce:85:92:08:25:a3:88:f0:49:f9:66:35:
50:ae:13:ea:ad:bc:10:9c:7e:7d:db:3e:0e:0b:47:
03:07:0d:a6:a3:63:c6:64:9c:6e:3c:b7:66:b5:1d:
d4:d6:07:fd:79:3d:e1:63:81:d9:0c:57:54:3a:04:
00:d2:98:f8:20:99:e5:36:2e:19:5d:f2:3e:7e:06:
86:f9:b2:66:80:0f:90:10:0f:3b:da:7b:f2:7a:45:
5e:64:0d:4a:e2:62:c6:39:13:25:45:d8:4e:27:0a:
2a:a3:13:be:76:85:e3:f0:71:d2:fb:5c:1b:46:05:
4e:c8:63:3c:bf:81:94:3f:5a:b5:9c:3b:c8:b5:b4:
90:44:bb:16:1d:3a:77:04:2b:13:ca:90:e6:d6:c5:
a9:71:6d:b7:3a:9f:b2:ce:ca:d1:39:58:f8:4f:18:
b7:5e:9f:e7:6d:0a:7b:ea:b9:3c:e6:93:57:6e:39:
40:f2:0a:25:60:0d:b7:a1:5d:18:9c:af:0c:cc:f4:
6e:b7:12:02:a1:87:83:63:ad:70:05:0a:56:98:db:
d1:01:8e:c3:77:bd:f7:32:0a:d5:c1:83:a1:44:f9:
85:9e:21:af:f4:6d:4c:37:f1:08:74:cc:73:f0:5c:
e1:5c:0a:80:1e:b1:5f:12:de:41:36:f3:54:61:a1:
7f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2B:F7:13:D3:BB:87:4C:07:0A:3E:B5:B4:E7:7D:85:32:11:A5:DF
X509v3 Authority Key Identifier:
keyid:B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ae:12:01:ff:a0:44:80:44:f7:5a:50:40:d2:4c:fc:fa:7b:
a6:59:a4:11:43:73:8d:e1:24:ce:33:e2:d0:d0:c5:31:38:4e:
36:a1:a3:1a:b2:1b:83:0b:45:1f:55:2b:b2:9b:76:7c:03:09:
74:c9:7e:d5:53:e0:73:e7:8c:cb:d9:0b:ec:27:34:5e:49:1b:
ad:8a:0a:33:a6:32:f3:ef:ac:8d:61:08:4f:f0:61:a2:1d:7b:
5c:2e:2d:fc:ea:af:08:26:d6:8b:b8:1a:59:bd:ab:21:3c:6f:
be:d7:bc:ea:0a:c2:3c:1e:45:7a:80:d7:98:f0:e5:85:2b:54:
f4:53:2a:21:66:00:c4:86:fe:cf:31:f1:ac:0e:23:74:26:a3:
ae:2b:d9:33:f9:20:3e:3f:74:83:c2:08:65:05:5f:c1:33:39:
c8:38:e9:4e:af:2e:7e:68:71:9a:dc:a6:4a:c6:fc:79:ed:cb:
1e:df:cf:5c:ca:f9:a6:38:f8:49:c4:5e:62:f5:ec:37:db:0a:
f6:4e:66:17:c9:fd:fd:4c:b8:41:5e:47:30:44:51:21:02:43:
5c:e9:9b:32:d0:10:02:2c:96:07:5d:30:4d:70:01:b1:90:c3:
4c:e9:4c:74:cf:fc:ec:4b:d2:36:b9:cb:a4:a4:a5:32:8c:11:
14:27:77:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:50:08 2025 by rpki-client