Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
File: t3CHf-B99JohaBSt5wHQh7EWk7Q.mft (raw, json)
Hash identifier: MWq2ZBBVNolWBk99W3R3y3Zm544ejvxTUdQ/k59RbFM=
Subject key identifier: 4D:A7:62:34:04:86:9D:12:65:78:27:DE:0E:C8:CB:EF:B5:43:89:E8
Authority key identifier: B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
Certificate issuer: /CN=b770877fe07df49a216814ade701d087b11693b4
Certificate serial: 019676B117E5A93757583B277CACF6C64B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
Manifest number: 0354
Signing time: Sun 27 Apr 2025 10:00:39 +0000
Manifest this update: Sun 27 Apr 2025 10:00:39 +0000
Manifest next update: Mon 28 Apr 2025 10:00:39 +0000
Files and hashes: 1: t3CHf-B99JohaBSt5wHQh7EWk7Q.crl (hash: Xl8Jn9aSWaBMqz7Ik0gE/YfbtLXkks2Bj1TzfwUY+pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:17:e5:a9:37:57:58:3b:27:7c:ac:f6:c6:4b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b770877fe07df49a216814ade701d087b11693b4
Validity
Not Before: Apr 27 10:00:39 2025 GMT
Not After : Apr 28 10:00:39 2025 GMT
Subject: CN=4da7623404869d12657827de0ec8cbefb54389e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:c3:8c:3b:6b:78:a0:a5:6e:b3:38:36:47:
64:39:c8:6f:a4:bd:3d:4e:01:3d:a7:a8:e2:84:e7:
36:58:75:d5:11:93:bc:6f:51:25:8b:d0:02:84:f8:
75:7d:16:71:fc:a8:f2:ef:e9:72:d3:38:35:bf:f0:
18:3b:40:5c:d2:4c:ee:ec:f2:55:a9:ab:a5:15:38:
7f:a9:5e:ba:de:a7:57:b0:36:2c:fb:9c:0b:3d:62:
17:04:b2:15:2c:a9:6f:f6:c8:ea:fa:62:5f:9f:df:
97:c3:e1:56:af:85:73:07:64:95:5f:ce:4b:0d:75:
e3:8c:4c:f5:c4:0e:b5:6b:0f:15:0c:e7:a4:0d:e2:
8b:ce:20:dd:57:12:33:e4:e7:f9:80:ce:46:c5:4c:
f3:ea:dc:66:aa:67:14:48:c5:5d:11:1c:83:f4:fc:
ec:91:d8:d4:69:c6:b6:aa:e7:22:b3:d2:8e:a4:e7:
e9:81:da:67:21:01:94:a5:ce:41:66:8a:28:fb:87:
4f:de:20:ff:6a:c0:22:f0:49:92:18:5b:20:45:d5:
87:02:b3:c4:0d:0c:63:26:bd:2e:ab:4a:a8:34:a9:
ea:33:da:e8:4a:bf:f6:40:25:2b:ac:0b:24:29:ae:
4c:ed:a3:82:b3:77:3f:cb:d2:8f:7c:b3:5f:58:42:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A7:62:34:04:86:9D:12:65:78:27:DE:0E:C8:CB:EF:B5:43:89:E8
X509v3 Authority Key Identifier:
keyid:B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:23:96:a8:e0:92:93:3c:cd:63:e3:0b:f1:fc:c5:b2:f9:63:
e5:1a:fa:e6:d7:4d:90:de:67:15:d9:7c:c9:6d:63:16:2a:48:
1a:7d:df:e8:28:be:11:92:ea:a9:be:d3:89:9e:31:5d:d6:ee:
ff:43:97:ba:c0:6e:e7:bb:0d:2e:fa:36:04:4e:5b:b6:04:ca:
bd:32:cf:3c:33:0e:4f:10:da:77:aa:a2:23:44:d2:9e:55:c4:
e8:7d:7c:b2:81:34:98:75:3c:74:6d:82:3f:ee:a9:b6:a1:54:
dd:64:52:4c:f4:50:6a:e1:c9:fc:b1:46:4a:3b:1e:9f:0d:56:
07:66:14:44:9f:3a:5a:41:16:99:01:bc:b5:74:7a:ff:7c:94:
a1:93:15:d8:25:a3:8f:0c:dc:06:91:ec:72:04:44:83:a1:3b:
f3:a7:d9:96:f6:1c:8d:00:a4:31:f9:dd:eb:71:b2:d2:6a:2c:
5c:2f:a0:56:59:25:6b:f6:61:aa:14:73:62:47:48:b0:0b:2e:
46:c8:90:fc:02:25:2a:61:ab:78:99:ec:41:1d:e5:b4:3c:bd:
ae:a9:b2:93:81:bb:4b:60:92:05:76:74:2d:6a:af:ef:6c:4e:
d7:16:4f:17:cb:a1:43:57:ee:82:a2:d7:4b:88:50:d4:4f:21:
18:e7:74:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:39:38 2025 by rpki-client