Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
File: x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json)
Hash identifier: rPMbsrw3LcoLZLqmbMx6St/iyDDaIyJU4f28OlJ9Giw=
Subject key identifier: 69:9A:6C:11:ED:A9:62:9E:24:E5:8B:2D:2D:03:5A:FF:66:5B:24:82
Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
Certificate issuer: /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Certificate serial: 0196767A6007C6721382D55B7106455E164E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
Manifest number: 0547
Signing time: Sun 27 Apr 2025 09:00:53 +0000
Manifest this update: Sun 27 Apr 2025 09:00:53 +0000
Manifest next update: Mon 28 Apr 2025 09:00:53 +0000
Files and hashes: 1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: 68wqgCG6fmkhkBULI66Lj/tilxmJwl3957UjNNNKV5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:60:07:c6:72:13:82:d5:5b:71:06:45:5e:16:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Validity
Not Before: Apr 27 09:00:53 2025 GMT
Not After : Apr 28 09:00:53 2025 GMT
Subject: CN=699a6c11eda9629e24e58b2d2d035aff665b2482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1d:de:55:d9:8c:91:79:8e:1d:5e:8e:bc:14:
81:2e:f4:ca:6f:6c:46:db:62:6b:c2:c7:bf:40:d3:
75:43:f8:14:2f:a4:08:7b:c4:81:67:b0:92:08:63:
da:dc:b7:6a:bf:8a:f7:8e:77:42:15:a0:4c:de:bf:
b0:aa:10:b0:8a:f0:f6:d6:31:28:5a:ec:65:8e:e1:
43:34:9e:3b:c2:b6:b8:99:78:fb:ef:c0:77:6a:57:
be:f8:33:78:4e:67:33:37:aa:d7:85:5c:91:e4:07:
c9:ee:43:15:4e:14:34:14:9f:28:39:48:49:1f:7f:
99:b8:fe:77:5c:8a:11:ce:a9:3d:5e:aa:94:1c:76:
28:5e:5f:8a:35:98:91:16:be:87:5c:2a:24:ab:3b:
9d:b6:08:1e:86:5f:c5:94:19:55:cf:37:df:a2:05:
0b:9c:10:17:ef:9e:a9:4d:3b:e5:38:d3:dd:d4:0b:
e3:88:68:da:5c:95:e1:a8:b9:94:2f:bd:7d:aa:89:
94:05:fb:31:50:05:51:3e:64:f7:d7:ea:0c:a3:f5:
fb:12:9b:6c:3a:0c:a2:f7:1e:a0:a6:59:cb:02:db:
9b:39:9e:f5:2b:d1:8d:e0:66:43:e0:6d:c4:69:a7:
69:9e:e8:90:38:ed:6c:a1:43:b7:41:62:ab:5f:f6:
38:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9A:6C:11:ED:A9:62:9E:24:E5:8B:2D:2D:03:5A:FF:66:5B:24:82
X509v3 Authority Key Identifier:
keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:26:34:dd:71:e2:1f:19:cc:22:57:5d:e6:a2:e4:a0:b4:0b:
67:57:2c:ea:29:62:5f:45:d2:98:a0:eb:72:b3:e2:83:65:44:
5d:27:e6:22:58:ee:5f:ac:54:52:66:4a:3d:cc:b9:80:cd:bf:
89:df:74:83:86:12:5f:99:38:c1:9a:d6:8e:be:aa:6c:fc:2e:
1d:a0:33:a0:aa:4d:d2:bc:38:a7:3b:97:4f:ce:5f:41:71:45:
c9:e9:70:17:4b:33:51:49:8e:f1:98:d9:25:9f:fa:63:e1:70:
c0:82:f6:4f:16:79:aa:21:ae:2d:a7:d8:73:d2:00:78:48:00:
d0:86:36:c5:77:80:d1:fe:1c:95:ff:29:12:12:0d:cf:81:ef:
41:41:44:f9:6e:41:c5:dc:ce:c9:19:f4:e1:d9:88:b6:e0:35:
7a:76:7e:48:eb:fd:45:90:2e:0d:f5:e4:e6:59:d6:d8:52:71:
21:0b:32:8f:24:42:9e:00:c4:5e:e4:db:ce:70:10:d2:46:2b:
28:6b:9a:ea:88:db:a6:a2:eb:c3:78:5e:e4:ad:02:c0:2e:81:
a4:de:da:43:d5:bf:ce:10:1b:b0:f9:c2:82:81:20:10:78:ec:
34:22:31:f1:a6:17:6e:ca:c0:df:dc:7b:90:16:6e:27:62:52:
9f:0c:c3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:49:34 2025 by rpki-client