Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.mft
File: r3P0pUFxjY8uAl4GGQalvyfOPJE.mft (raw, json)
Hash identifier: tKLkF+VBAcMHn8XnE/3o+O3hujL1WKQyFzQpmX7/Baw=
Subject key identifier: 97:82:13:A1:FB:0F:16:88:44:71:3E:96:1E:21:ED:E2:9F:97:93:3F
Authority key identifier: AF:73:F4:A5:41:71:8D:8F:2E:02:5E:06:19:06:A5:BF:27:CE:3C:91
Certificate issuer: /CN=af73f4a541718d8f2e025e061906a5bf27ce3c91
Certificate serial: 01967F4603D0E8E2F7974FF628A520E00489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P0pUFxjY8uAl4GGQalvyfOPJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.mft
Manifest number: 1D
Signing time: Tue 29 Apr 2025 02:00:17 +0000
Manifest this update: Tue 29 Apr 2025 02:00:17 +0000
Manifest next update: Wed 30 Apr 2025 02:00:17 +0000
Files and hashes: 1: r3P0pUFxjY8uAl4GGQalvyfOPJE.crl (hash: chkEVLuPrZ5LletbhaYcDTs/ecvCGP4nTVSmSMQmYLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3P0pUFxjY8uAl4GGQalvyfOPJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:03:d0:e8:e2:f7:97:4f:f6:28:a5:20:e0:04:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73f4a541718d8f2e025e061906a5bf27ce3c91
Validity
Not Before: Apr 29 02:00:17 2025 GMT
Not After : Apr 30 02:00:17 2025 GMT
Subject: CN=978213a1fb0f168844713e961e21ede29f97933f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:69:ef:2c:7d:0c:76:33:bf:1f:59:d3:54:ea:
77:5d:b2:80:54:eb:d2:1d:a4:1f:f1:85:af:7c:1d:
46:62:65:14:05:58:62:2f:56:c1:33:66:03:b5:45:
f9:d6:46:9e:80:a9:e1:36:c7:90:42:83:1b:30:65:
b9:7c:34:be:c3:4c:69:76:bf:75:1d:e7:ef:68:dc:
7b:8f:df:10:34:ba:e1:27:2d:b0:11:d6:5a:d8:1b:
0f:87:5f:f6:54:ba:43:67:45:41:2b:95:58:6b:11:
e0:6e:cd:33:05:08:bf:e8:29:7b:c0:06:40:89:7c:
91:1e:50:58:80:40:a2:b5:d5:2f:8d:c2:98:03:98:
b0:65:ba:ae:f2:9a:a6:54:dd:c6:98:4a:c2:ac:c9:
e5:66:e0:c7:c5:d2:08:21:ed:44:e1:31:81:61:90:
a3:9b:00:48:ac:52:ad:de:82:da:c2:5d:59:34:35:
9f:14:b2:51:1c:98:c1:69:1e:41:c7:ff:ab:19:14:
17:c9:6c:5c:0a:b0:74:55:de:bb:41:c0:26:d3:59:
04:50:43:92:99:b1:c4:d9:c8:10:d0:a2:33:d4:6a:
b8:da:97:4d:c5:e7:9c:bf:41:7f:ba:5f:0d:9a:70:
18:4a:ea:04:29:90:07:4a:62:6d:5f:d4:1f:f5:b7:
7f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:82:13:A1:FB:0F:16:88:44:71:3E:96:1E:21:ED:E2:9F:97:93:3F
X509v3 Authority Key Identifier:
keyid:AF:73:F4:A5:41:71:8D:8F:2E:02:5E:06:19:06:A5:BF:27:CE:3C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P0pUFxjY8uAl4GGQalvyfOPJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a6:b5:0f:e1:25:c0:b6:18:c7:36:48:da:ed:d6:1b:59:08:
7d:9b:f3:1b:64:19:6e:e3:cb:38:42:39:12:a7:ef:f5:a2:6a:
fd:dd:f8:27:0b:5b:82:7f:e4:98:57:fb:5a:21:ab:98:ef:5a:
ab:a7:be:30:dd:87:1a:fc:77:ef:1c:4a:88:c2:d3:ed:41:b6:
b7:2f:81:6f:b2:63:c5:d2:46:8d:17:ea:2a:d7:bc:b7:b8:ee:
25:88:ea:6f:8e:5e:1b:6a:65:69:bf:df:d0:8c:46:44:b2:e8:
6a:7b:84:ba:5d:04:4a:d5:5b:d6:34:e9:f5:7a:8d:e4:94:a6:
9b:3b:72:ad:65:ad:e4:d4:e0:d5:91:cd:34:0f:8d:2c:d3:83:
18:3b:d3:ce:7b:86:50:da:87:5c:64:b4:b7:ef:44:51:e7:90:
72:55:b0:70:89:b9:b5:c4:1c:4d:ed:f7:19:1c:ef:ee:dd:10:
b4:cc:f5:b1:65:a3:4f:1c:39:21:7f:27:cd:df:3f:73:bd:92:
22:55:6c:78:87:3d:92:ad:e6:ec:1d:87:59:f0:4b:a8:95:ea:
2d:71:92:a3:c7:cb:e1:03:e1:58:04:31:44:e5:20:7f:3c:00:
d7:1b:e8:b2:c6:91:41:91:b5:24:ea:46:7d:29:e8:fa:10:3b:
12:8d:d0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:26:54 2025 by rpki-client