Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
File: _C71HmsUo-6_tImOD6gTq2eIUTY.mft (raw, json)
Hash identifier: N3n+SdW6m2zD4axHmW7le+2J7wbbpz6yImOE2mWOUlI=
Subject key identifier: D5:E4:1C:5D:7A:BA:87:7A:D5:2F:F0:05:7B:F6:F5:2F:41:55:50:09
Authority key identifier: FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
Certificate issuer: /CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Certificate serial: 0196760CD7C626439814E3131BFCF863AC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
Manifest number: 0C6F
Signing time: Sun 27 Apr 2025 07:01:15 +0000
Manifest this update: Sun 27 Apr 2025 07:01:15 +0000
Manifest next update: Mon 28 Apr 2025 07:01:15 +0000
Files and hashes: 1: _C71HmsUo-6_tImOD6gTq2eIUTY.crl (hash: CvVlcrR8xsERNHJuP6hn/Z3RPMGU2mVdVDQcNRyU0QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:d7:c6:26:43:98:14:e3:13:1b:fc:f8:63:ac:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Validity
Not Before: Apr 27 07:01:15 2025 GMT
Not After : Apr 28 07:01:15 2025 GMT
Subject: CN=d5e41c5d7aba877ad52ff0057bf6f52f41555009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:e5:34:8b:59:79:ff:0e:0d:79:0f:64:28:
64:57:d4:84:88:34:a4:20:e1:e9:5f:63:23:38:1b:
8e:ed:bf:3d:8a:fd:c7:ca:4a:cf:39:31:9f:4d:99:
85:98:d6:99:13:b9:7b:d8:5d:89:f4:6c:4a:bd:ad:
ed:f4:13:1a:04:27:2e:db:71:f6:3d:e9:ef:21:11:
c5:7c:4b:aa:7f:e2:2d:25:7e:b0:3b:9e:79:ab:7d:
30:aa:41:ef:48:a1:3d:21:a1:0a:61:2b:3f:22:83:
96:fc:eb:57:f6:27:89:d4:b0:c3:bb:49:93:ed:54:
55:a9:4a:07:58:db:86:c3:a9:32:0b:77:4a:ac:81:
94:f1:5f:4c:54:41:f3:1b:bb:b4:1a:ce:d5:77:9f:
c3:00:c7:b3:c4:04:64:31:e0:9c:2c:9f:39:ef:c4:
6f:78:b4:2e:4d:8f:ab:cf:5b:c4:28:ce:09:da:a2:
2f:a6:ba:14:f1:de:f6:b1:e8:91:30:55:d0:f5:a9:
4f:37:12:1e:4e:82:80:43:5c:16:7b:82:a6:2e:fe:
0d:f8:e6:41:85:0a:05:ff:2d:eb:bb:10:7b:2e:96:
45:24:5a:6d:ee:9b:06:94:92:dd:f0:f1:1e:6d:09:
7b:20:ee:95:0d:54:31:cf:d8:6b:74:a3:4d:b4:cc:
1f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E4:1C:5D:7A:BA:87:7A:D5:2F:F0:05:7B:F6:F5:2F:41:55:50:09
X509v3 Authority Key Identifier:
keyid:FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:98:f7:86:97:49:3a:d2:7e:5c:f8:54:d3:51:fb:72:fd:13:
7e:90:65:e0:45:6f:e4:29:4a:93:52:cd:8d:de:fc:c8:3c:e8:
d0:2e:3d:99:44:08:8a:f6:b7:50:6c:8d:fa:18:7c:15:b4:b6:
b6:69:7a:88:56:e1:26:7f:ff:f5:b9:91:44:f1:8d:ec:06:5c:
69:5b:a9:d4:e7:54:2e:b5:b0:60:36:37:a3:8b:a8:40:35:e4:
5e:61:30:ce:99:38:f5:47:56:cc:32:86:ab:6f:e7:dc:33:64:
0f:dc:b6:fb:7b:fe:f9:18:4f:7e:31:f2:3c:07:d3:3a:27:41:
05:37:00:b8:6a:30:69:f2:b6:a1:4f:a9:90:2d:9f:53:39:5e:
10:db:99:4a:a6:cc:ae:60:8f:cd:4d:3b:77:78:63:5e:82:8f:
d9:ed:2e:72:4a:a9:4a:20:47:e8:7d:93:b2:9f:a5:cb:1e:93:
03:0f:14:00:92:31:0d:ff:74:42:34:0b:3b:da:64:5d:ba:7b:
39:20:2e:f2:e1:bb:99:82:73:e6:56:fe:6b:52:37:d6:0e:86:
b3:ba:30:f0:a4:d7:63:67:cc:34:0d:1f:4a:4e:16:c8:83:21:
85:b9:f8:20:90:fb:7c:41:97:53:c0:8e:2d:9b:01:53:1c:7b:
d9:98:92:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:17:08 2025 by rpki-client