Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier: UF1l8w968V2AOuH683W1amwtfWIoj/saOvQXkrBFyuE=
Subject key identifier: A3:2F:AD:49:87:3F:E1:98:EF:E1:C4:EE:BD:F6:9E:48:0B:98:68:60
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer: /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial: 019679E92AE2D846FF34AC38AF149CE0C7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number: 0BF6
Signing time: Mon 28 Apr 2025 01:00:46 +0000
Manifest this update: Mon 28 Apr 2025 01:00:46 +0000
Manifest next update: Tue 29 Apr 2025 01:00:46 +0000
Files and hashes: 1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: Bt5B1skF8HTNe3P+BSgzgFIdnpktxuzDQClf7/i4S5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:2a:e2:d8:46:ff:34:ac:38:af:14:9c:e0:c7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Validity
Not Before: Apr 28 01:00:46 2025 GMT
Not After : Apr 29 01:00:46 2025 GMT
Subject: CN=a32fad49873fe198efe1c4eebdf69e480b986860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:7a:d1:03:8d:ce:fa:e7:7e:44:cb:6e:9b:
d3:2a:05:38:79:ac:17:65:76:1f:1c:6f:36:e1:b6:
24:46:12:08:c0:3f:fe:84:46:b7:1f:10:8c:01:60:
8b:4d:29:be:c7:c2:fe:69:ef:d4:ab:d4:21:b4:bd:
5f:04:f3:7b:4e:d1:ed:63:c4:60:be:a3:4e:9c:d6:
57:0b:f9:c4:5f:76:f9:6c:63:26:c1:8d:9a:5f:79:
05:81:47:51:b4:2e:53:8e:60:33:fa:c5:8a:fd:00:
cb:75:c4:64:fa:1b:e2:5f:63:05:12:42:04:c9:81:
79:51:b1:9c:6e:38:d3:11:bd:19:43:34:83:b6:8f:
13:c1:64:55:91:75:f6:a8:0a:f3:08:f8:bd:44:fe:
04:4e:f7:4b:f5:bb:13:50:7b:f4:a5:28:f2:5a:c7:
d5:42:04:92:30:ad:e5:9a:ee:fe:64:ca:35:0e:1e:
2c:ad:c5:5e:52:e1:24:ee:35:49:b8:87:5b:b4:20:
f5:fa:db:6d:dc:76:3d:27:f7:33:cd:36:ef:90:1f:
da:04:36:08:a9:a2:e4:a9:7c:bb:b8:57:bb:a0:d0:
64:f6:a8:5b:e5:30:50:d7:3d:7b:b5:9d:88:1e:15:
46:77:18:82:41:fc:2a:b2:88:4e:74:5f:98:49:13:
17:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2F:AD:49:87:3F:E1:98:EF:E1:C4:EE:BD:F6:9E:48:0B:98:68:60
X509v3 Authority Key Identifier:
keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:22:01:00:b6:a0:89:66:3e:12:6f:15:2e:2c:35:b6:d4:15:
87:f1:06:59:45:3f:14:a7:c4:e0:b4:99:aa:93:77:85:45:10:
a0:44:6e:7a:7c:b3:58:19:a7:50:dd:43:e7:d4:6f:b0:76:e8:
98:0e:55:3d:69:73:80:af:97:78:6f:ea:a9:8d:c0:76:b3:1e:
f2:5e:be:17:85:37:49:c9:f7:45:aa:05:7f:8c:d0:8f:f8:81:
dc:79:63:ba:7e:10:1b:86:64:87:50:31:b4:fa:4d:5a:e7:e1:
9b:86:9b:43:24:cd:b4:61:e4:b4:00:0b:e2:b3:9f:4f:99:84:
b0:ea:a8:15:39:32:ee:1a:18:23:99:40:ec:54:e6:d2:aa:ff:
0d:6c:e2:3e:7f:79:94:1c:10:ab:1b:f1:5b:ed:e1:49:91:a3:
0f:f9:ec:45:5b:82:19:d3:c5:23:d8:35:27:bf:4d:f5:a1:f7:
ee:4f:86:c0:85:bb:08:b2:e7:b9:9f:33:b3:07:71:ea:06:8b:
43:1d:e7:ec:38:42:3c:82:4f:9a:a7:72:9a:92:36:1d:b6:82:
67:42:e8:43:c3:58:5e:32:00:8a:c6:5a:b1:3c:17:ef:21:c7:
4c:b9:00:b5:79:7b:a0:1b:12:2a:67:51:2d:f4:bd:45:2c:b7:
97:66:8b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:54:14 2025 by rpki-client