Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
File: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft (raw, json)
Hash identifier: sSxt9p7a1HENzszcG0ikRwGz4FwgWu86R+h9azTsL4I=
Subject key identifier: A3:E5:E8:72:BF:90:42:16:07:70:B7:5C:F9:D5:36:D4:2A:09:F7:A1
Authority key identifier: D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06
Certificate issuer: /CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
Certificate serial: 01968849551A68A654E9F8A212B97943CAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
Manifest number: 1516
Signing time: Wed 30 Apr 2025 20:00:29 +0000
Manifest this update: Wed 30 Apr 2025 20:00:29 +0000
Manifest next update: Thu 01 May 2025 20:00:29 +0000
Files and hashes: 1: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl (hash: Cz+VmbA1n+0dht65CvTWp6nt4ByzwX7Nni1/9QOYzRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:55:1a:68:a6:54:e9:f8:a2:12:b9:79:43:ca:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
Validity
Not Before: Apr 30 20:00:29 2025 GMT
Not After : May 1 20:00:29 2025 GMT
Subject: CN=a3e5e872bf9042160770b75cf9d536d42a09f7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:a9:b0:68:c3:5b:04:ef:91:54:69:05:23:
c7:9e:24:d8:b6:75:5b:36:f1:b5:b1:e8:1b:98:9f:
99:a6:ea:02:53:01:5f:e1:1d:df:23:b7:e3:9f:2a:
57:a9:71:c2:24:94:5d:f3:b8:1b:27:6c:30:18:58:
b9:1e:1b:30:75:44:8a:75:ff:61:b6:b0:fb:95:d6:
58:6a:ba:9c:5a:7f:13:25:54:fd:cd:ec:90:ea:8a:
f8:75:14:70:c1:7c:aa:ea:c4:76:3d:8e:ff:c6:bc:
6b:98:35:68:2a:82:17:60:2d:60:55:3f:2f:b4:d1:
48:5f:8f:e8:43:6b:07:a6:0d:42:87:33:2c:f0:c7:
1b:4f:8f:4b:07:27:85:ce:f7:26:dd:ff:a2:5c:26:
b6:56:78:28:46:ab:66:10:99:96:fd:6d:5c:8d:13:
00:8a:ce:8a:ac:96:bb:62:ae:84:6d:d4:b3:ca:4d:
44:9e:ae:46:67:19:56:5f:d5:37:86:63:b8:d2:af:
aa:28:19:db:c2:0f:86:d2:40:7b:43:18:59:6e:6f:
70:06:f0:58:93:0e:88:d2:1d:6a:21:44:05:03:80:
af:91:50:21:ea:c6:16:50:3d:c8:c3:07:dd:56:d2:
18:bb:07:6f:8d:d2:ef:c8:13:e0:31:99:19:47:ad:
92:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E5:E8:72:BF:90:42:16:07:70:B7:5C:F9:D5:36:D4:2A:09:F7:A1
X509v3 Authority Key Identifier:
keyid:D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:69:cd:59:22:40:43:85:aa:5a:a1:6c:a7:13:65:08:12:24:
e6:cb:60:8f:a5:2f:44:1c:a7:d8:50:9f:ef:96:65:29:e6:51:
66:39:ac:aa:a4:4e:fe:96:17:81:7f:c0:1c:0e:73:0f:9b:15:
2c:bd:84:9c:58:02:bf:15:59:48:32:35:ab:67:cb:15:d1:a8:
d6:36:1b:e4:00:89:93:8e:5e:2e:25:15:a5:52:a8:3d:f5:9f:
fb:65:d6:26:4b:bd:c3:70:be:b2:0a:cc:e9:1c:e2:bb:08:54:
e5:64:c0:6a:25:18:8b:a4:a5:05:d7:ee:ec:8e:09:e9:4c:4b:
07:b6:e6:c4:07:93:54:30:63:0b:65:80:f3:1c:7c:d4:84:32:
dc:cf:bd:59:8a:ab:4c:a4:c5:7e:3a:c8:37:f4:1e:f4:d3:5f:
ba:75:78:61:f2:01:67:26:b2:a4:a7:f9:21:b7:c5:b6:e9:76:
44:d7:1d:c6:e5:a3:e0:40:fc:cb:13:df:41:80:7a:51:6d:c1:
0b:18:0c:98:a2:8a:41:39:19:d7:4e:8c:c4:a1:5c:9f:5f:a7:
aa:69:c6:ab:c8:b0:62:2f:8c:a4:13:a6:b5:53:b8:1c:d3:8c:
b5:16:b0:bd:4d:2b:fe:5a:1a:7b:3a:29:65:e4:18:2a:dd:1c:
d6:75:ad:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:28:10 2025 by rpki-client