Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
File: ge84bpUp6_89_qsXonx5OCPNPVU.mft (raw, json)
Hash identifier: aT5KjPSZxUmlMmolXceNfW2oDXTqAl1XFE2lUS6K1t8=
Subject key identifier: A6:C6:6A:DB:1A:A7:A4:72:AB:A0:FC:AA:AD:68:64:9D:BA:7F:76:61
Authority key identifier: 81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
Certificate issuer: /CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
Certificate serial: 0196760C4473D6C5841CC81F8979818B9557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
Manifest number: 01D9
Signing time: Sun 27 Apr 2025 07:00:37 +0000
Manifest this update: Sun 27 Apr 2025 07:00:37 +0000
Manifest next update: Mon 28 Apr 2025 07:00:37 +0000
Files and hashes: 1: ge84bpUp6_89_qsXonx5OCPNPVU.crl (hash: /Xp+pSgC/6WOjMS1EkDNvKP2DR1TygwOqDpKdywWCmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:44:73:d6:c5:84:1c:c8:1f:89:79:81:8b:95:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
Validity
Not Before: Apr 27 07:00:37 2025 GMT
Not After : Apr 28 07:00:37 2025 GMT
Subject: CN=a6c66adb1aa7a472aba0fcaaad68649dba7f7661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ad:51:88:e6:68:be:f1:a6:8b:8e:08:b7:64:
0c:b9:b0:21:02:b4:4e:78:cc:6f:a4:56:46:5e:f1:
61:47:cb:81:87:d5:1a:d2:fd:1b:e3:5d:0b:3b:2c:
0f:c5:2c:a2:41:30:7a:36:7c:c5:7a:84:e7:7e:19:
d6:5d:41:5c:fc:7a:de:b6:41:3a:a1:a6:38:c5:7c:
61:a7:0d:46:5d:75:75:5a:97:06:53:68:55:27:d5:
36:1c:59:c3:cd:b9:63:7f:2e:e9:d2:8c:10:5f:a1:
22:9f:7e:5e:ba:3b:75:d7:0c:e1:24:b5:3b:46:80:
f6:55:71:5e:e6:76:9b:1a:0a:43:ad:53:38:7a:21:
a2:dd:3e:6f:b3:5b:53:55:e3:79:8e:cf:8a:3a:2a:
a9:35:2f:69:1e:9b:62:8f:17:ec:75:81:4f:45:b7:
25:72:38:5f:49:66:f3:e5:15:3a:86:49:7a:6c:4c:
06:24:60:0d:a3:6f:8f:7f:ce:ba:86:19:93:30:19:
be:39:58:fe:41:a0:20:2e:92:e6:31:d9:75:4e:47:
e5:69:83:b8:49:92:29:7a:e1:c4:ae:6f:c9:2f:98:
d6:6d:1e:f5:60:b7:bb:80:1d:ec:27:bd:d2:e1:ad:
0c:00:bd:3e:0a:4b:51:c1:93:03:a9:63:7e:e3:9d:
a9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C6:6A:DB:1A:A7:A4:72:AB:A0:FC:AA:AD:68:64:9D:BA:7F:76:61
X509v3 Authority Key Identifier:
keyid:81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:16:57:5c:06:30:13:f7:5e:cd:42:af:7f:a8:4c:32:ce:40:
21:f4:8b:38:a4:fa:6d:9b:b8:50:e0:a6:d0:68:a2:f2:35:7b:
85:9e:b4:e3:6c:af:c3:36:64:a2:aa:a7:28:e5:a7:8f:80:4c:
8a:58:85:3c:2d:c0:72:ca:5d:3e:b6:06:c5:2b:b9:cb:61:8a:
20:22:aa:ed:64:e4:d4:2a:1f:6b:8c:bc:d4:fe:d8:cc:37:7f:
14:3a:5c:1b:07:07:e2:b9:a2:c0:b5:39:df:1d:d0:0d:13:91:
7c:ff:21:ed:8e:e3:3a:de:70:87:03:03:0a:9a:ac:14:26:fa:
07:d7:52:00:89:bc:e2:ef:fc:67:09:11:c6:ca:0d:97:bb:53:
e8:ff:70:34:fa:9f:f8:6e:f6:d8:b3:6d:7b:6a:bd:a0:95:e3:
95:92:3d:5d:df:62:5c:c1:09:cb:45:d2:2b:2e:54:84:5d:64:
e2:43:1e:82:7a:ed:bf:a6:31:ad:d7:3b:56:a9:40:ad:63:5e:
7e:08:0d:30:de:99:d2:86:23:9c:06:a7:fb:5e:1f:51:9b:42:
13:c1:2f:04:d8:17:f1:fe:44:00:95:16:07:70:24:b8:d0:c6:
84:9d:d3:8e:fc:dd:6a:a6:47:d0:49:b9:b2:37:28:bd:70:0d:
05:d5:4a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:58:02 2025 by rpki-client