Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
File: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft (raw, json)
Hash identifier: hxHafSODFE7VgBcAlG822MSFzRA1KRpYaDmMqBAP6jA=
Subject key identifier: AD:5D:28:CE:8A:FB:C8:13:80:6F:21:5B:C4:C2:A8:5C:C4:A3:50:75
Authority key identifier: DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
Certificate issuer: /CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Certificate serial: 01969CAC9B3FCEC118232F434CA0F915F09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
Manifest number: 149A
Signing time: Sun 04 May 2025 19:01:19 +0000
Manifest this update: Sun 04 May 2025 19:01:19 +0000
Manifest next update: Mon 05 May 2025 19:01:19 +0000
Files and hashes: 1: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl (hash: AIPZTcK1+6PDkT0VIOn11T/vv5MMFVXUQlD+sN2va58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ac:9b:3f:ce:c1:18:23:2f:43:4c:a0:f9:15:f0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Validity
Not Before: May 4 19:01:19 2025 GMT
Not After : May 5 19:01:19 2025 GMT
Subject: CN=ad5d28ce8afbc813806f215bc4c2a85cc4a35075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:d2:7e:cd:22:a9:e0:9b:2e:d2:e1:2c:7a:
5a:2f:e7:dc:c1:93:7f:18:f4:c9:8a:f0:6d:a0:43:
f3:40:52:ce:43:dc:4b:68:26:26:51:fe:a8:db:14:
9f:11:eb:e2:8a:4a:d0:82:a7:36:e3:fb:b0:dd:a0:
b1:89:3f:2a:f5:53:8e:8b:0f:b5:95:e6:ea:39:39:
f0:f9:7a:6e:09:8e:c8:6d:b5:ef:5e:d8:6e:b2:20:
92:50:56:69:9a:18:12:7d:36:dc:18:e8:d8:7f:33:
c1:4d:d5:1a:a7:bc:9c:20:c1:d8:61:ea:61:79:5d:
74:cb:f5:89:b3:36:34:ee:8b:a7:d6:6a:eb:a6:c0:
79:15:66:12:e3:d6:48:cd:8c:85:64:69:cd:03:00:
8f:29:09:04:17:44:a8:e1:58:ad:60:d6:b8:a6:58:
b7:e4:ea:b5:c9:cd:54:3e:d2:32:a5:db:fe:a6:f0:
9e:11:d0:f2:c4:32:a9:f8:aa:85:f0:52:4a:93:d3:
ca:c6:8c:90:8d:d8:d1:7c:13:2c:c3:d3:f1:9c:5d:
69:b9:1c:71:c9:c2:10:09:15:10:cd:10:a5:18:82:
b0:d8:77:1d:07:4b:2c:cb:72:3a:e1:69:14:78:71:
78:80:76:c6:d0:d1:17:f4:d9:63:9e:89:bb:8d:61:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5D:28:CE:8A:FB:C8:13:80:6F:21:5B:C4:C2:A8:5C:C4:A3:50:75
X509v3 Authority Key Identifier:
keyid:DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8d:66:c3:11:2c:e0:93:a0:91:ca:a6:a2:97:b0:e0:99:a5:
6d:9a:6c:f0:c1:b5:70:29:64:23:a1:00:0b:1b:ce:f9:fb:1f:
08:ce:a5:2e:95:8e:13:45:4c:15:e7:ae:f2:5f:d8:b7:39:b5:
a4:df:ff:f7:a5:b9:d4:00:e0:42:15:9f:12:4d:ae:9c:a5:45:
0e:a3:2e:67:12:8e:bb:8f:a7:8b:09:6f:56:a6:df:53:ae:19:
23:fa:52:54:5d:67:24:68:97:59:f8:be:34:20:d6:50:c8:ea:
35:c0:c6:e9:68:63:df:9a:40:e3:11:7c:c0:fa:ff:96:c1:3d:
ed:05:86:aa:af:dd:73:cd:76:0e:87:20:f3:87:c9:12:92:69:
91:03:c9:12:e2:5d:c9:ea:d7:b0:d4:a2:b8:59:eb:97:b8:8a:
bb:fd:9a:3e:2c:9a:c8:2e:53:af:82:87:2c:db:7f:81:e7:b6:
3a:89:36:af:78:44:59:08:09:c2:1c:e8:84:6f:9c:51:bf:ae:
78:9a:8e:ae:0f:4a:4f:fe:06:99:38:d8:18:51:d3:05:05:69:
e8:5e:f4:2c:ea:b3:80:74:ae:b2:f3:d8:cf:df:08:0c:4d:98:
fd:e9:93:a6:e4:c1:9f:e6:11:aa:0b:3e:d6:4f:71:ee:51:90:
d2:fa:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:03:39 2025 by rpki-client