Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft
File: 3XzvizrZIDFjCqyiJqntebpgVYY.mft (raw, json)
Hash identifier: Jl6K1YjVwdGWg+jJtCi/AgUxP2Sz/EjYu3Sw3L2Ps+M=
Subject key identifier: 80:8E:75:55:9F:54:20:E9:53:F6:38:16:C9:73:5F:7D:08:B8:78:16
Authority key identifier: DD:7C:EF:8B:3A:D9:20:31:63:0A:AC:A2:26:A9:ED:79:BA:60:55:86
Certificate issuer: /CN=dd7cef8b3ad92031630aaca226a9ed79ba605586
Certificate serial: 0196771ED904F570167A2C851031D01765B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XzvizrZIDFjCqyiJqntebpgVYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft
Manifest number: 76
Signing time: Sun 27 Apr 2025 12:00:32 +0000
Manifest this update: Sun 27 Apr 2025 12:00:32 +0000
Manifest next update: Mon 28 Apr 2025 12:00:32 +0000
Files and hashes: 1: 3XzvizrZIDFjCqyiJqntebpgVYY.crl (hash: CoaBQp8ju3JdjMdAhzXobC3SLbamh+VJh/sjj4kQJQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XzvizrZIDFjCqyiJqntebpgVYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:d9:04:f5:70:16:7a:2c:85:10:31:d0:17:65:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd7cef8b3ad92031630aaca226a9ed79ba605586
Validity
Not Before: Apr 27 12:00:32 2025 GMT
Not After : Apr 28 12:00:32 2025 GMT
Subject: CN=808e75559f5420e953f63816c9735f7d08b87816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cb:f8:ee:52:11:28:c4:5b:ab:63:df:50:95:
02:90:7d:97:79:9f:3a:6f:6e:bd:27:f3:70:95:54:
6a:05:a1:69:e2:43:1a:13:38:71:10:8b:80:04:a2:
39:53:f3:4d:f3:34:a5:b4:95:bc:7c:49:d6:79:41:
a6:2f:17:19:67:c5:1b:e3:f2:ad:28:e8:df:12:29:
ef:52:ca:b9:7f:69:7b:99:26:dd:4c:cc:02:e0:eb:
2d:e4:ad:19:ea:c8:45:b2:1b:17:1f:52:e3:d3:bf:
f6:c7:cd:94:5f:98:f1:46:54:4e:b9:99:ea:a5:a2:
37:2f:a1:8c:dd:e4:e2:ce:18:e4:65:3b:c1:93:4e:
3f:78:6c:43:c3:ce:62:5c:81:10:46:73:42:96:a4:
ce:c5:cf:64:fc:b6:18:e4:76:db:fc:1f:ae:fb:58:
ff:74:3b:5a:2c:f6:21:d9:4d:49:a0:84:e1:f4:97:
18:3e:d7:6d:37:c4:b9:5e:43:ff:7e:e9:bc:73:8e:
d6:a2:7c:7f:88:3b:b0:4c:e1:9d:d3:58:4c:a8:ae:
32:9a:a1:c4:ac:2e:83:94:75:78:5d:4b:07:fd:04:
10:41:fa:5d:05:ed:27:10:16:46:fa:6d:e0:de:42:
5d:b8:1a:d1:8e:a9:06:d5:e9:9e:bb:e2:34:c2:a2:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8E:75:55:9F:54:20:E9:53:F6:38:16:C9:73:5F:7D:08:B8:78:16
X509v3 Authority Key Identifier:
keyid:DD:7C:EF:8B:3A:D9:20:31:63:0A:AC:A2:26:A9:ED:79:BA:60:55:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XzvizrZIDFjCqyiJqntebpgVYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8a:f9:f5:aa:ea:c0:03:12:cd:df:a1:28:17:74:62:12:33:
d6:7a:71:d2:c8:13:77:fe:a2:72:33:1d:24:37:ca:a4:b1:46:
41:ad:01:e6:e4:e1:57:c2:23:87:a2:6b:bc:bb:2d:2d:66:f7:
24:43:77:a6:eb:65:a9:9f:08:35:5d:08:4e:c0:07:c0:fb:b7:
74:3c:e7:35:6a:97:01:bc:5e:44:10:9e:03:cf:01:55:b6:1f:
16:67:69:69:de:77:0e:2f:cb:c5:01:b2:11:35:04:92:b7:c7:
78:16:90:b0:40:15:27:a4:4d:7a:65:ac:e0:a3:f3:2b:fd:87:
45:8d:a6:ef:b8:df:cb:6d:fb:b8:86:1b:43:4e:6b:25:d9:52:
0f:56:09:dc:61:74:a0:17:32:09:dd:b5:c4:8f:ca:58:18:91:
09:94:f2:b6:fe:60:e2:30:20:c8:5c:28:58:16:1f:41:ab:fc:
fb:6e:6a:95:8a:bf:34:cd:fc:35:57:7e:bb:d0:10:22:3a:84:
dd:06:09:80:34:7e:b4:e3:5f:2a:23:9a:3b:55:c4:83:01:93:
cb:b4:a9:7c:0d:04:2b:b0:cd:b6:fa:af:04:68:4b:41:f5:22:
30:15:f3:65:a5:a1:fb:66:be:39:bb:da:02:d7:c0:23:e2:3b:
d2:6a:dc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:19:34 2025 by rpki-client