Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier: 3pVRv9YL1hKEB6wZ3aKqzTRbT31EtBGJfPaDZTiYap8=
Subject key identifier: 6D:56:C7:8E:0D:E3:E7:CA:B7:BA:7E:AD:84:1D:A8:40:4E:25:B9:F2
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial: 01967943DD8BF605B84697DC6D197736F889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 22:00:12 +0000
Manifest this update: Sun 27 Apr 2025 22:00:12 +0000
Manifest next update: Mon 28 Apr 2025 22:00:12 +0000
Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: P0Un73F9OzNk6OQDkThqsCOMf/H/XcC3OGNC08qg7No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:43:dd:8b:f6:05:b8:46:97:dc:6d:19:77:36:f8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Validity
Not Before: Apr 27 22:00:12 2025 GMT
Not After : Apr 28 22:00:12 2025 GMT
Subject: CN=6d56c78e0de3e7cab7ba7ead841da8404e25b9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:1a:d5:6b:0a:f1:a3:25:37:4d:e9:4b:56:
a6:41:c1:3e:23:d7:76:6e:3c:ff:e2:b9:23:72:8a:
a0:92:86:68:12:18:c7:e8:1d:75:00:ae:2b:fc:d7:
89:b5:80:87:ba:d3:1c:bc:3c:b1:ad:f2:3b:2e:e0:
6d:f3:9c:98:b0:64:68:63:c3:c9:3b:3c:9d:56:64:
0e:f4:dd:fd:e6:36:70:9c:cb:a4:be:75:5c:b1:e2:
e3:bb:47:1e:98:19:aa:d4:df:7b:f7:cf:8a:22:a4:
69:4c:1a:7e:08:8d:67:4b:a2:d6:d4:ba:24:3c:35:
0a:df:4b:09:18:34:a1:1a:2a:39:42:39:55:2e:a5:
51:5a:b1:ff:ef:0f:b8:03:ba:b9:8a:19:76:e9:6d:
fe:8b:6c:e0:1e:ee:5d:b3:ae:44:d5:b8:45:2e:f7:
20:74:6d:ad:a1:ae:fb:e0:f2:32:99:74:39:9e:a6:
36:c9:1f:b4:6f:b4:66:b5:0e:2f:e2:34:61:35:81:
d5:19:a6:82:6d:bf:87:db:37:66:76:35:a9:05:a8:
d8:f2:dc:ab:a7:bb:b7:52:20:93:b0:b1:95:1e:0f:
6d:f2:c7:26:40:d8:b7:96:4d:a0:fa:e6:f6:ec:67:
b3:a3:66:f2:09:95:ce:49:24:fb:79:b9:5e:e8:f6:
54:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:56:C7:8E:0D:E3:E7:CA:B7:BA:7E:AD:84:1D:A8:40:4E:25:B9:F2
X509v3 Authority Key Identifier:
keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:76:88:c4:1f:89:3a:ab:cf:3b:97:e6:b6:56:c9:7f:33:7d:
aa:97:80:eb:76:5c:da:54:2d:a8:2b:a7:a9:1b:9e:8f:fb:e7:
8b:bc:06:9c:b4:3d:78:fb:f2:32:9f:4a:76:58:ad:7d:30:22:
79:d0:80:b1:96:b1:9b:7d:93:e5:60:7f:8d:61:48:b0:b9:e6:
d3:29:49:8e:dc:0f:09:df:3b:cf:02:c2:ba:bc:ee:b1:90:da:
64:8e:28:79:9e:c6:26:97:5e:f3:b7:e8:c0:43:e6:e3:2b:96:
a7:cd:f4:b7:8d:cf:ad:3d:5f:16:f4:34:ad:ff:ea:af:99:e8:
5d:ec:fc:60:bd:5e:be:36:8b:e6:83:6f:da:38:1a:d7:51:83:
a0:15:67:8c:02:09:d4:b7:49:a5:4f:d4:63:89:a7:8f:8e:95:
cf:de:b3:8a:54:bd:fc:87:45:06:15:a9:23:f4:b0:42:b4:c2:
ef:d0:a9:6f:62:07:71:6e:3e:44:b3:ae:e8:d6:db:df:3d:3d:
2d:4c:91:77:21:66:66:1e:65:d0:47:61:4b:a9:c6:3c:05:00:
ff:10:89:fe:2f:0c:f6:c8:54:42:ed:85:80:9d:2b:1a:08:fa:
e3:16:a9:6c:8a:6d:96:f8:95:dd:22:92:2b:85:c8:8f:2d:17:
a3:33:76:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:20:22 2025 by rpki-client