Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
File: 3EviU3WUInayZECX3D1ah1r7ivE.mft (raw, json)
Hash identifier: qeIfEPLGHH5WCshUWRdKRZ10tXAC8W4Je4bHgmeJEUk=
Subject key identifier: 85:C8:B1:D2:97:A0:53:D2:23:81:09:F4:32:D9:4D:E4:52:E2:B9:34
Authority key identifier: DC:4B:E2:53:75:94:22:76:B2:64:40:97:DC:3D:5A:87:5A:FB:8A:F1
Certificate issuer: /CN=dc4be25375942276b2644097dc3d5a875afb8af1
Certificate serial: 0196760C6A582BBF3B68E0F5D0F6A26B31FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
Manifest number: 07C3
Signing time: Sun 27 Apr 2025 07:00:47 +0000
Manifest this update: Sun 27 Apr 2025 07:00:47 +0000
Manifest next update: Mon 28 Apr 2025 07:00:47 +0000
Files and hashes: 1: 3EviU3WUInayZECX3D1ah1r7ivE.crl (hash: QVv/fM88aHrIfDblA3iqOQiujvl6O1OjxLB7WX9LlsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:6a:58:2b:bf:3b:68:e0:f5:d0:f6:a2:6b:31:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4be25375942276b2644097dc3d5a875afb8af1
Validity
Not Before: Apr 27 07:00:47 2025 GMT
Not After : Apr 28 07:00:47 2025 GMT
Subject: CN=85c8b1d297a053d2238109f432d94de452e2b934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:c1:d4:c2:73:3c:6c:c9:b6:d9:14:d1:c0:
92:af:bc:a9:0e:0f:fb:1d:bd:7c:4d:48:8e:1a:85:
86:b5:70:e4:b6:f8:d7:d3:0b:58:d3:c8:d3:b7:48:
1c:79:55:ce:63:e0:cb:c6:56:af:20:64:4b:f2:b7:
d5:a5:c7:de:c2:bb:a6:b4:57:9a:f8:91:0f:91:99:
9a:a5:f8:b4:3a:42:3f:37:bd:8e:11:eb:f6:c8:1b:
34:1a:37:3d:e4:79:7a:c1:eb:b7:41:a2:4f:0d:32:
e9:4c:78:da:51:90:d3:56:8c:7f:e9:b4:6d:9f:b1:
c7:10:4c:73:0d:4b:df:91:79:c1:df:e6:2c:e0:b5:
67:44:b3:71:83:7f:ee:b7:9a:75:36:cd:00:79:2f:
22:46:f4:86:a6:f9:63:ca:ac:b8:f2:1c:a2:ed:9d:
db:1f:70:00:23:7e:ec:ea:6f:cd:72:d3:6c:98:de:
c1:c8:47:77:44:19:93:04:2a:74:61:47:31:7c:55:
57:90:00:f1:b6:48:24:48:b3:81:a5:08:19:48:b5:
da:60:2f:a0:fe:6b:26:ff:66:f5:53:a0:7a:c1:72:
f2:63:81:58:a3:08:ef:62:cf:a2:72:9a:02:a9:1e:
93:99:0c:1e:70:94:71:9f:f7:6c:4b:cf:c8:c2:d3:
2c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C8:B1:D2:97:A0:53:D2:23:81:09:F4:32:D9:4D:E4:52:E2:B9:34
X509v3 Authority Key Identifier:
keyid:DC:4B:E2:53:75:94:22:76:B2:64:40:97:DC:3D:5A:87:5A:FB:8A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:51:b0:93:d4:db:f8:93:22:6d:4f:dc:d7:3e:2a:be:10:60:
65:4e:c5:4a:eb:bc:3f:32:10:3a:37:7d:88:13:5c:31:a2:91:
dc:15:72:4b:f1:1d:4e:c9:e5:23:61:4b:d9:e1:66:77:e9:5a:
8a:76:4c:92:5c:12:78:0c:ab:74:0a:33:fd:71:83:8d:d7:6d:
c3:0d:ba:fd:14:ea:b4:9b:c5:5f:c7:5a:2a:25:26:f2:03:11:
e1:f2:24:83:c5:ad:ce:0e:f5:da:7c:d4:dc:54:40:a5:2e:34:
47:b8:b2:e9:14:bb:b4:ba:6d:94:a1:f6:1f:7a:1a:f7:39:87:
94:28:a8:9f:76:22:12:d0:d9:8f:95:84:de:7e:79:73:d4:2f:
3c:c3:b9:87:c9:d5:ec:fe:5b:ed:e8:51:72:d9:f1:b1:fb:2a:
3d:3d:4f:1a:aa:02:2e:40:01:5b:c9:54:38:1e:07:92:27:4e:
af:ef:be:e2:10:e7:ac:60:65:75:30:53:19:bc:4f:d0:fa:fa:
c7:7f:f6:d7:40:1e:1e:bc:dc:3d:85:37:23:25:7f:db:f6:a4:
7f:a8:e5:d4:99:83:60:48:ab:59:e5:30:94:79:c3:a4:78:c4:
22:e1:c4:09:3a:c7:de:cf:39:53:ad:81:ba:75:1c:6c:23:c6:
c3:08:d8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:58:53 2025 by rpki-client