Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
File: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json)
Hash identifier: NMhI6vIAhkyFtKTl8dkABcgr0DHNATn+NNf+6Cb+Fi8=
Subject key identifier: 5F:2C:F7:4E:04:5B:CC:D9:DA:15:93:22:75:2F:CB:8D:3A:25:E8:54
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial: 0196790CED932CB37DD5D05B15B153636345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
Manifest number: 0E39
Signing time: Sun 27 Apr 2025 21:00:12 +0000
Manifest this update: Sun 27 Apr 2025 21:00:12 +0000
Manifest next update: Mon 28 Apr 2025 21:00:12 +0000
Files and hashes: 1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: K0uPOA4fIsSmZosOCO3mC7Mhtk6BvzLuylg3k9xDWns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 21:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0c:ed:93:2c:b3:7d:d5:d0:5b:15:b1:53:63:63:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Validity
Not Before: Apr 27 21:00:12 2025 GMT
Not After : Apr 28 21:00:12 2025 GMT
Subject: CN=5f2cf74e045bccd9da159322752fcb8d3a25e854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:cb:5e:46:eb:74:73:0a:9d:a5:ab:66:0b:
73:99:73:41:4e:60:e4:ec:de:4e:f8:50:48:95:7c:
05:cb:14:ba:f9:db:bf:57:96:ca:8d:a2:28:7c:b6:
84:37:12:68:56:f2:c4:56:f0:af:3b:30:2f:e6:ba:
bf:91:a7:f8:4a:36:ac:54:83:c2:ae:7b:73:50:db:
b5:21:1f:a2:0b:d8:ad:f6:ae:ec:33:51:53:2a:67:
fe:0a:ae:b9:76:11:a1:6d:d2:44:e0:cd:03:52:48:
fe:24:84:1e:95:ef:e6:0f:1b:f1:7d:7a:18:1d:73:
88:19:4c:04:cc:22:5e:03:1a:53:18:24:fc:8d:ad:
7b:8a:d1:bd:56:ba:a2:14:1b:d0:77:9a:3c:c5:46:
df:8b:17:bd:18:17:85:61:9e:63:eb:79:c3:d2:3c:
a2:ec:78:62:a8:d8:84:5d:b8:4d:88:87:99:4c:c8:
b1:b5:d5:87:e6:5a:a8:30:28:0d:b8:71:b2:71:70:
1b:40:08:64:91:4d:65:f4:f9:30:1d:22:9a:d4:60:
d6:bc:3e:c4:b7:ea:c2:cc:fe:e5:e5:0d:6d:16:cd:
f5:1b:87:f1:b6:d0:d6:3b:d4:ba:0c:90:48:e6:92:
12:2c:ab:e0:4c:eb:51:9a:5d:87:b2:bc:63:2d:80:
90:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2C:F7:4E:04:5B:CC:D9:DA:15:93:22:75:2F:CB:8D:3A:25:E8:54
X509v3 Authority Key Identifier:
keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0c:ea:da:ca:fd:f5:84:15:ec:e5:a8:dc:ac:3b:8f:2f:f7:
b5:0c:c3:f0:91:d0:c4:0d:9c:27:fc:72:09:c8:6e:07:64:65:
ee:6d:1a:11:66:20:fc:fb:6e:f3:27:27:70:7e:d9:30:4d:8d:
00:28:fa:a5:b9:09:fd:51:dd:aa:5a:d0:da:c8:43:b5:e6:4d:
89:95:57:c8:04:c4:5d:4e:90:48:bb:d1:e3:55:f1:5c:dc:12:
97:00:8d:01:5e:d1:f2:0c:c2:3a:1d:48:fc:59:46:1e:e3:db:
af:f0:9a:60:fc:3f:eb:a6:e4:44:46:81:96:77:9a:bc:da:3e:
f9:b4:db:86:b2:0c:97:d9:05:ef:ce:18:87:33:40:b6:ef:ea:
78:b6:72:b7:1c:94:b1:97:cf:52:76:0f:7f:e9:32:12:ee:1d:
f0:09:17:69:b5:8b:b3:7a:ae:1b:50:c1:81:24:18:ee:a6:ce:
1e:68:83:45:f1:e0:11:fc:f9:db:27:16:cc:d4:53:e5:34:5d:
14:c6:2f:29:90:0a:b1:62:13:29:9f:3e:7b:1b:70:db:aa:13:
8e:17:ac:9e:1d:be:b3:bf:f3:a8:06:86:89:83:79:24:0c:1d:
85:c8:27:0d:ab:59:f5:08:af:26:46:74:0c:a7:b8:48:69:2f:
4e:44:2a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:02:07 2025 by rpki-client