Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
File: 3Mx29__HFoYLOtY56_kdxN1hMAA.mft (raw, json)
Hash identifier: kqjNDs3CcUXeNMjMqF+hsyh5DZKjmSdKlCfVsqoUtDI=
Subject key identifier: 04:F1:2F:81:B7:F7:D7:10:55:61:75:84:E9:51:D8:24:33:14:D8:F7
Authority key identifier: DC:CC:76:F7:FF:C7:16:86:0B:3A:D6:39:EB:F9:1D:C4:DD:61:30:00
Certificate issuer: /CN=dccc76f7ffc716860b3ad639ebf91dc4dd613000
Certificate serial: 01968B4A32F181216F4328BA49907DFF492B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
Manifest number: 08DD
Signing time: Thu 01 May 2025 10:00:17 +0000
Manifest this update: Thu 01 May 2025 10:00:17 +0000
Manifest next update: Fri 02 May 2025 10:00:17 +0000
Files and hashes: 1: 3Mx29__HFoYLOtY56_kdxN1hMAA.crl (hash: 8q8/oiDlIdSUQnnvY1sfvA3Jlq1PF0Vl0iYAaxnyBvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:32:f1:81:21:6f:43:28:ba:49:90:7d:ff:49:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccc76f7ffc716860b3ad639ebf91dc4dd613000
Validity
Not Before: May 1 10:00:17 2025 GMT
Not After : May 2 10:00:17 2025 GMT
Subject: CN=04f12f81b7f7d71055617584e951d8243314d8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:4f:2c:b7:5d:40:72:48:c9:98:1d:9b:19:
35:d6:c3:7f:96:8a:fd:05:41:21:13:b6:81:3e:7b:
2f:dc:64:f2:ab:39:32:52:b0:87:8c:ed:df:48:d2:
57:c1:08:90:93:74:81:42:9e:7c:02:73:c1:2f:a2:
76:93:d0:d4:b4:8c:11:09:72:cb:0b:36:c0:8d:c8:
ae:6e:6a:41:e1:2c:5f:bf:68:72:dc:70:d2:3d:b1:
b1:fa:3e:16:5c:4d:31:87:19:74:67:9d:37:88:0d:
43:47:15:72:85:0c:96:85:dd:e1:7b:88:27:00:df:
12:bb:7f:54:24:a2:73:b6:74:a4:87:8f:dd:71:f7:
18:f3:84:57:f2:c4:e6:25:7f:a9:25:4d:5f:37:0f:
48:c2:26:df:3c:2b:9d:a8:ae:2a:b4:f4:3d:b0:16:
67:6e:89:24:d1:8e:54:48:a4:a1:d5:60:a8:31:e8:
42:cf:3f:9b:11:bf:fe:02:83:53:98:ad:6a:5f:aa:
3e:6b:e3:f8:f9:98:2c:9b:33:52:1e:bf:12:c8:19:
4c:47:a7:a5:74:38:3c:76:1c:c3:71:10:ef:43:ad:
9e:20:54:58:c4:79:70:dc:98:47:d1:3a:9d:38:00:
fe:58:8c:6e:92:c3:5f:50:6c:ab:b8:32:93:65:ff:
af:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F1:2F:81:B7:F7:D7:10:55:61:75:84:E9:51:D8:24:33:14:D8:F7
X509v3 Authority Key Identifier:
keyid:DC:CC:76:F7:FF:C7:16:86:0B:3A:D6:39:EB:F9:1D:C4:DD:61:30:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ab:ad:0e:b3:b3:a3:9e:e3:ac:18:dc:c2:2f:0a:5a:8a:0e:
c1:29:44:8d:7a:84:f6:2a:96:d1:74:35:b1:00:35:5c:d8:c1:
3b:b8:8d:25:82:8e:e4:4f:ed:be:97:50:58:12:18:6f:ef:3b:
bf:84:b8:56:3f:9a:b6:6c:dd:28:0a:19:04:dd:4e:e9:22:04:
6d:89:2b:12:5a:88:e3:5b:80:50:c4:33:e5:a6:97:34:6d:90:
88:7a:e5:d8:1c:94:da:2a:cf:d9:2d:65:67:e3:01:4b:3d:cd:
f5:8e:e5:9d:51:c0:af:c4:04:8b:d4:d5:e3:50:d2:8c:49:d7:
99:c7:3e:b3:f9:c6:7f:eb:70:9c:0b:90:b6:b7:44:ee:0a:de:
0f:80:ec:64:3e:00:ce:3e:92:2f:82:9f:55:2c:61:33:a1:f3:
fc:b4:f8:c8:aa:cd:2e:49:4d:2f:75:25:81:fd:54:67:89:bb:
b1:5e:55:5e:8e:92:9f:c5:c9:32:f3:d0:f8:20:90:36:d2:a8:
39:a3:63:11:fe:43:4e:10:59:ec:36:66:e3:84:5f:4c:7b:4a:
df:ef:90:b0:f0:f7:15:76:e1:c0:f0:39:19:a0:78:ed:30:26:
db:d9:8b:09:be:1b:39:a1:03:35:43:93:93:c9:97:2f:3a:26:
cc:1b:8e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:04:22 2025 by rpki-client