Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: 3bt3o8qz3fRTUyMtky2Wp3JwPEjs8YiMgh9K9LfFjyM=
Subject key identifier: DF:AF:43:A1:08:95:2F:A5:D3:ED:3D:D2:64:C4:7A:FC:26:82:E5:94
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 0196760C2185496D067FFA1FB2E7E3538D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 0DE2
Signing time: Sun 27 Apr 2025 07:00:28 +0000
Manifest this update: Sun 27 Apr 2025 07:00:28 +0000
Manifest next update: Mon 28 Apr 2025 07:00:28 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: YqqBrR6DLggv3t+gWScLVwagRIMc1oVmCfTZ6XVmIc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:21:85:49:6d:06:7f:fa:1f:b2:e7:e3:53:8d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Apr 27 07:00:28 2025 GMT
Not After : Apr 28 07:00:28 2025 GMT
Subject: CN=dfaf43a108952fa5d3ed3dd264c47afc2682e594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:47:6c:62:4c:f4:be:f0:58:55:bf:34:6b:
6f:a6:6b:16:79:69:cf:b3:cf:ab:d7:aa:a8:0a:f0:
cc:05:c6:28:38:3c:94:3e:f1:ac:07:da:51:a3:4a:
2e:49:72:be:cb:26:2a:27:9e:1e:b8:0e:4c:b1:59:
b9:f5:3b:c4:9f:5b:d3:09:e2:6b:47:e7:00:eb:c8:
49:20:fa:08:6d:b4:a5:e2:00:49:30:42:d5:50:e0:
df:ad:71:58:45:3d:0e:80:41:3f:41:bc:ea:ea:98:
9a:68:b5:16:d8:b2:63:f3:b1:ff:93:03:0a:80:83:
d1:cf:08:c4:5f:17:c1:15:bd:a7:55:30:97:9b:ad:
48:17:0b:06:3c:b8:3d:3b:05:be:db:e9:4f:be:4a:
f5:ae:bb:b2:88:bd:39:c5:3c:c8:9d:e3:53:f7:aa:
05:63:1c:46:7e:e8:44:b5:84:a8:15:a6:02:97:bc:
62:74:f4:25:17:62:d1:a5:3d:a1:01:a8:59:41:c2:
57:e6:d8:ac:e4:60:96:40:1c:d0:38:ec:2e:62:97:
50:bc:f9:5d:4e:1b:55:25:77:76:37:82:65:a6:8f:
e9:c3:65:8a:35:41:49:ec:38:eb:ad:9d:21:41:4d:
ff:e4:00:0b:a7:a5:6f:87:21:33:93:90:7a:91:5b:
19:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AF:43:A1:08:95:2F:A5:D3:ED:3D:D2:64:C4:7A:FC:26:82:E5:94
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bf:d4:d1:b1:7b:6f:b1:43:30:b5:ce:b4:72:58:d6:65:98:
27:f3:45:e3:fa:ab:f6:1c:34:59:10:85:e1:da:3e:ce:d8:fc:
23:c3:9c:26:f3:67:78:89:72:cf:b9:b7:d8:1c:47:97:ec:20:
1b:de:61:89:2f:77:b9:da:50:de:20:2d:07:ab:60:28:d3:4f:
91:a0:b2:69:f5:c7:a9:0e:3d:3e:b3:be:98:b0:b5:71:b5:f1:
e7:a9:9a:1d:e5:27:e8:32:0f:5a:a4:9d:dc:93:09:c8:54:86:
b3:67:fc:f4:d0:e8:36:28:40:36:28:c0:45:fb:0b:fb:6e:1c:
85:e6:2b:5f:ed:ca:83:53:28:3e:eb:bf:6c:80:7e:18:8c:78:
40:38:21:5c:c2:6f:89:9b:79:74:51:dc:a5:d7:d6:2f:00:c9:
14:8a:8a:34:89:71:32:49:41:94:60:e1:0d:0b:c2:e9:41:35:
ed:1b:e9:30:fd:f5:a3:c8:fa:78:7a:1a:49:51:0a:35:e2:56:
07:08:4e:57:68:ca:67:94:b4:58:4c:97:ef:ed:1d:27:ab:10:
f1:60:2a:bd:f9:97:bb:f6:33:32:27:1e:c1:a9:84:36:a3:ab:
93:d3:77:c1:ad:36:83:3d:f6:c3:86:ee:8f:35:e7:6c:4d:73:
1c:c2:04:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:42 2025 by rpki-client