Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
File: 3k_14NZGWzwsc6LG4Q5WovpzFic.mft (raw, json)
Hash identifier: TwEQouDF/nA7mbftQ1/KpP7tokOmO0Os2r3qB01l7TA=
Subject key identifier: 33:81:84:70:D1:E1:59:46:FB:FC:09:5F:BD:6D:66:C3:70:EE:AD:BC
Authority key identifier: DE:4F:F5:E0:D6:46:5B:3C:2C:73:A2:C6:E1:0E:56:A2:FA:73:16:27
Certificate issuer: /CN=de4ff5e0d6465b3c2c73a2c6e10e56a2fa731627
Certificate serial: 01968E82E66692E9BBDB27BD8F91933DC73A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3k_14NZGWzwsc6LG4Q5WovpzFic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
Manifest number: 0CB4
Signing time: Fri 02 May 2025 01:01:05 +0000
Manifest this update: Fri 02 May 2025 01:01:05 +0000
Manifest next update: Sat 03 May 2025 01:01:05 +0000
Files and hashes: 1: 3k_14NZGWzwsc6LG4Q5WovpzFic.crl (hash: z2zK6zZbC98uqGMwjGIWr6PKPYeoT7unGERrrdXHICU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
rsync://rpki.ripe.net/repository/DEFAULT/3k_14NZGWzwsc6LG4Q5WovpzFic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:e6:66:92:e9:bb:db:27:bd:8f:91:93:3d:c7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4ff5e0d6465b3c2c73a2c6e10e56a2fa731627
Validity
Not Before: May 2 01:01:05 2025 GMT
Not After : May 3 01:01:05 2025 GMT
Subject: CN=33818470d1e15946fbfc095fbd6d66c370eeadbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d6:ce:74:80:be:99:81:07:7d:30:a0:16:66:
a3:09:53:a7:b4:fa:f4:02:a0:da:b1:15:9a:f2:15:
36:d5:4b:bf:c8:57:11:84:bc:61:7f:9e:19:ac:f1:
5e:6c:86:1a:fb:c9:41:f8:a7:40:68:f5:0f:27:45:
b3:1c:4d:7c:b3:25:9c:12:74:f6:19:ff:1e:29:09:
b4:8c:bc:6f:4c:39:15:a0:dd:04:dc:d0:ad:10:03:
ff:f8:b1:b7:1b:c3:59:0f:ae:a8:da:86:ac:c9:f3:
1b:32:47:ee:2b:7a:9d:dc:f6:e7:ff:20:0f:7a:9b:
43:5d:b3:bc:f8:48:47:d9:5a:ac:57:6f:99:f9:8a:
57:e6:58:ea:f4:6d:0c:70:7f:24:5e:31:4d:1c:a8:
1a:6c:94:69:e8:44:ec:5a:01:1d:05:c6:2b:f7:3a:
dc:7b:32:e9:b9:95:35:25:c6:11:ca:c3:9d:95:76:
c3:50:aa:0a:9c:c1:92:90:0c:bd:c9:fc:e9:a2:a7:
f9:ed:11:46:3d:07:db:c6:69:94:9e:69:42:42:a4:
c1:b2:bc:9d:1e:36:68:d7:52:8a:03:c5:12:cf:dd:
19:5d:86:d2:d1:1c:98:c9:05:dc:a6:9d:94:6b:6d:
f9:4f:ec:b6:69:67:82:ab:c5:58:c3:24:83:df:d3:
ce:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:81:84:70:D1:E1:59:46:FB:FC:09:5F:BD:6D:66:C3:70:EE:AD:BC
X509v3 Authority Key Identifier:
keyid:DE:4F:F5:E0:D6:46:5B:3C:2C:73:A2:C6:E1:0E:56:A2:FA:73:16:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3k_14NZGWzwsc6LG4Q5WovpzFic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:44:49:9e:6b:4a:b4:55:ef:3c:77:d6:9d:43:b5:2a:38:1b:
8f:14:9a:6a:5c:1b:fd:18:66:54:d6:2e:4b:91:8d:d3:b9:1b:
1d:06:f9:1a:39:ec:c1:e3:96:a8:41:b4:f4:f3:c2:ad:52:fe:
42:60:fe:08:f0:a0:c8:f6:ce:19:2a:9f:a7:92:e5:da:45:a5:
73:93:0a:56:6c:7d:06:20:6b:ab:25:15:26:34:b5:ea:e6:b8:
64:60:78:6e:87:d1:ec:16:6b:0e:d0:bf:89:0f:08:77:7d:ce:
bf:ba:34:10:58:9b:6a:91:85:4b:53:65:73:34:2c:17:d1:6c:
50:68:68:2f:3a:d3:65:c1:75:9e:a7:73:96:62:20:7e:2a:be:
57:fb:66:3c:7a:ea:6e:d3:c0:0e:b7:fd:c3:59:54:f0:94:51:
46:33:95:a6:b1:2c:8c:87:f9:9e:e1:a8:8a:0f:9b:8c:ae:83:
56:75:5a:05:1b:bc:05:18:f2:77:9b:9f:dc:0c:a1:c6:8e:ce:
0d:5a:d7:67:ab:44:a6:30:a8:e7:87:1a:94:7a:4c:29:9d:2a:
35:68:4d:67:a1:86:d6:ff:e6:6e:5d:0d:86:c6:68:70:be:1f:
a5:a3:d2:2c:34:a4:c5:57:1d:79:f9:08:6a:b7:40:f7:a0:00:
5c:cf:e1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:03:03 2025 by rpki-client