Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
File: 3DU3KrVODfO_UU1fCMpS5De9kaQ.mft (raw, json)
Hash identifier: F4ElOE12A/JugWekJUq/Z6OKwPmH3twY6F17k6YEmrI=
Subject key identifier: 9E:4D:6C:7E:E3:29:82:40:5B:36:54:21:16:F3:D6:D7:07:71:AD:74
Authority key identifier: DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
Certificate issuer: /CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Certificate serial: 01967B699E5D6F2C4398A5A5FA1E7F016AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
Manifest number: 0463
Signing time: Mon 28 Apr 2025 08:00:41 +0000
Manifest this update: Mon 28 Apr 2025 08:00:41 +0000
Manifest next update: Tue 29 Apr 2025 08:00:41 +0000
Files and hashes: 1: 3DU3KrVODfO_UU1fCMpS5De9kaQ.crl (hash: q9NWSyolyBf6B7byB3UcrVtIm5v0XXXQIA9ODpy6udk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:9e:5d:6f:2c:43:98:a5:a5:fa:1e:7f:01:6a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Validity
Not Before: Apr 28 08:00:41 2025 GMT
Not After : Apr 29 08:00:41 2025 GMT
Subject: CN=9e4d6c7ee32982405b36542116f3d6d70771ad74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:05:fb:00:fe:8e:8c:28:94:3f:f4:4c:f4:ae:
d2:06:d6:90:a5:d5:59:37:91:5e:2e:b6:0c:de:12:
24:6f:b7:9e:0f:97:c0:0c:8e:bf:80:fc:7b:c4:02:
66:83:7a:c7:52:2b:ef:2b:e5:8e:27:22:94:7d:5c:
60:d1:bf:10:56:2e:91:cd:a4:28:3c:b7:04:cb:e9:
c8:71:8e:85:f5:60:01:85:3d:52:69:c6:3f:05:07:
85:f8:6f:42:ed:d7:30:b1:aa:23:71:32:57:19:b9:
1c:2d:a1:c1:50:39:d3:ac:a0:fd:85:c9:11:8f:f2:
1c:70:fd:d0:70:9e:68:98:1a:fd:5a:a3:2d:be:6d:
78:5f:3b:e0:d7:ca:9c:3a:03:5b:ff:36:32:ea:4f:
bc:0f:a1:4e:b9:7e:dc:81:11:e9:d1:8f:74:f4:44:
3f:6d:09:5f:1c:45:e2:fa:51:91:b2:d4:29:3f:54:
0f:ee:1e:85:b0:ab:43:42:fa:e5:4a:98:70:a1:c7:
8b:a6:67:65:b5:a4:fe:e4:46:e1:f8:99:4d:4a:a1:
6d:e6:57:c5:d4:29:50:72:ff:c0:a0:5a:1c:fa:80:
eb:43:a4:fb:c1:bb:31:fd:f1:c5:1f:e8:29:ab:e7:
1e:41:bd:ae:d7:b6:3e:6a:16:88:ac:e7:a3:d8:b0:
ec:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4D:6C:7E:E3:29:82:40:5B:36:54:21:16:F3:D6:D7:07:71:AD:74
X509v3 Authority Key Identifier:
keyid:DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6f:43:11:96:22:a4:47:ab:1c:43:f0:50:dd:de:e0:09:48:
43:40:9f:89:a7:8b:f7:e1:8c:63:06:2b:24:51:af:53:bd:dd:
46:69:cd:78:f5:96:cf:04:7b:fa:65:b9:cf:92:f9:1b:53:31:
6f:1f:68:0f:94:20:8b:cb:1e:8a:70:e9:55:b1:85:1c:0f:17:
30:ae:ea:e9:22:8a:27:21:c4:5c:52:22:ef:46:41:43:d2:5a:
52:d2:35:a9:36:a1:5c:30:09:9d:75:a7:94:ce:27:3f:b6:dc:
27:d3:9a:8e:ea:ab:27:0d:64:0b:6d:81:cd:69:d9:57:e6:9e:
31:8f:10:32:2c:3d:c3:0f:da:06:79:c6:b6:83:46:0f:63:87:
79:dd:b3:a4:1c:ec:9a:6a:51:fa:13:0d:82:82:53:8c:ea:ac:
37:8c:3d:6c:d6:30:50:9f:4b:ae:fe:5e:29:18:53:03:27:6a:
4a:91:03:9c:6c:39:50:81:9a:e6:d3:ba:14:38:b3:64:58:b7:
81:66:2c:38:35:dc:64:6d:e9:95:0a:d0:f7:e6:4f:1b:07:7b:
88:ed:bf:9a:19:c9:27:73:c3:85:13:1f:ae:fe:b8:e5:fb:b9:
50:3c:b1:8a:93:71:74:05:76:98:6b:3a:ed:51:84:0e:68:d2:
20:dd:86:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:02:41 2025 by rpki-client