Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
File: c3eHzyqHDZGxE2n510WRlXYCgU4.mft (raw, json)
Hash identifier: cwz3hgvYcQJFAeOeV8eybYAfgjnmxfCqXuRVBXJx5/8=
Subject key identifier: 7D:74:7B:B8:71:4B:D6:D6:97:B1:5C:0F:B4:E0:99:5E:D4:93:8A:B5
Authority key identifier: 73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
Certificate issuer: /CN=737787cf2a870d91b11369f9d74591957602814e
Certificate serial: 01967FB4FA529448D5A02CA5BCD631DD691B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
Manifest number: 07DA
Signing time: Tue 29 Apr 2025 04:01:28 +0000
Manifest this update: Tue 29 Apr 2025 04:01:28 +0000
Manifest next update: Wed 30 Apr 2025 04:01:28 +0000
Files and hashes: 1: c3eHzyqHDZGxE2n510WRlXYCgU4.crl (hash: xeLjmwfUBO3A+jt2XoSzfjiR70fkRRnPafVjMP4HioI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:fa:52:94:48:d5:a0:2c:a5:bc:d6:31:dd:69:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737787cf2a870d91b11369f9d74591957602814e
Validity
Not Before: Apr 29 04:01:28 2025 GMT
Not After : Apr 30 04:01:28 2025 GMT
Subject: CN=7d747bb8714bd6d697b15c0fb4e0995ed4938ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1e:ec:cb:37:0d:c0:a2:90:44:56:13:a8:12:
df:99:c4:1f:75:af:55:70:37:5e:47:51:dd:de:67:
c5:80:ab:0f:af:f5:26:09:bf:ba:22:76:0b:5d:17:
86:9a:52:78:ee:60:d4:82:f6:93:1e:f2:d7:b8:99:
b7:53:8b:69:2c:00:4b:5f:3f:32:37:d7:c1:a5:56:
0f:75:55:07:de:1a:27:fd:7a:4b:47:5c:ee:64:0c:
1b:7c:26:09:e4:6c:83:12:99:a6:c2:98:cc:63:4f:
d6:cb:3a:93:e4:d8:b6:96:43:85:36:43:75:ff:2a:
0c:d1:a6:51:52:83:1e:5d:9d:b1:d0:7d:ff:43:93:
64:5c:05:25:72:09:b7:89:78:f8:8d:c2:5c:c8:d9:
37:00:e4:0b:ff:3c:38:5f:be:73:c2:d1:0e:a6:7f:
2e:bc:d8:dc:b9:bc:7c:18:27:2d:b1:b1:8e:4f:91:
22:33:de:6c:95:81:05:de:4d:a4:be:1d:b5:7b:c9:
7b:bb:b3:aa:f9:53:36:cb:0c:f1:0d:02:2a:43:a4:
6c:c2:70:28:db:4f:26:89:37:38:3d:60:14:5b:83:
10:66:d0:92:f7:cf:28:db:66:ec:9f:3a:6c:a2:2a:
4d:08:36:1e:cc:db:a0:00:87:3d:d5:f2:0f:0b:0c:
35:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:74:7B:B8:71:4B:D6:D6:97:B1:5C:0F:B4:E0:99:5E:D4:93:8A:B5
X509v3 Authority Key Identifier:
keyid:73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:65:cd:95:8f:f9:22:57:68:77:5c:ed:8d:f6:40:c7:43:05:
21:0d:9d:cf:6e:20:b4:94:bd:d9:9f:50:f7:c0:bc:0e:bc:74:
e2:67:9c:69:6e:7d:eb:2e:dc:48:52:80:2b:76:6c:b9:ca:67:
48:53:41:b5:01:61:5e:46:66:c3:bc:54:82:79:cd:f1:37:27:
f0:b6:b3:6a:ef:3d:fc:08:b5:10:63:05:96:e5:e5:2a:8a:1a:
15:7d:29:0f:78:b2:56:d7:6c:fa:3e:7e:c4:68:32:23:30:d3:
1d:3d:d4:2d:c8:7c:86:9e:0b:84:7d:4f:dc:6b:cc:fa:70:01:
bd:54:81:31:89:22:cf:d7:f0:d2:e3:46:89:f7:c3:d6:16:00:
8e:fa:ee:2d:60:a7:91:bc:28:f7:58:3f:7d:09:7e:b4:8c:97:
de:67:ab:08:b8:10:6b:6c:c9:0d:b8:7a:ec:bf:17:ab:42:01:
3e:1f:f8:c6:f4:29:d8:43:7a:dc:26:5d:d5:35:49:c3:fe:3d:
37:4d:a1:63:d6:36:d8:e4:bc:71:41:be:3c:b2:f4:31:48:f4:
69:da:48:e4:60:43:c5:b1:b7:d6:12:3a:15:f8:bb:90:f2:17:
1a:9c:72:45:f2:a5:6f:4e:5c:ff:ef:0e:3c:f3:c1:83:10:ac:
2a:62:b5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:28:30 2025 by rpki-client