Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
File: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft (raw, json)
Hash identifier: G7jDj1r/YBG50DuEaDv9wOMZmfiZGcNmhouZ7w6MT2A=
Subject key identifier: 6B:12:73:89:B4:8C:47:5B:B3:91:DC:45:4B:12:D1:B5:5D:41:D3:68
Authority key identifier: 53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12
Certificate issuer: /CN=53bf98d53522aa957081fdec28b172084394f112
Certificate serial: 01967DC62A708C8B2E8D5286C1177018C14D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
Manifest number: 0D27
Signing time: Mon 28 Apr 2025 19:01:01 +0000
Manifest this update: Mon 28 Apr 2025 19:01:01 +0000
Manifest next update: Tue 29 Apr 2025 19:01:01 +0000
Files and hashes: 1: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl (hash: zLU98NZ4YWFKASDIVyJB70NCV27FsdTySALF2cjW+jM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:2a:70:8c:8b:2e:8d:52:86:c1:17:70:18:c1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bf98d53522aa957081fdec28b172084394f112
Validity
Not Before: Apr 28 19:01:01 2025 GMT
Not After : Apr 29 19:01:01 2025 GMT
Subject: CN=6b127389b48c475bb391dc454b12d1b55d41d368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:17:e4:26:a4:6f:f4:b5:b1:9d:e5:87:be:2d:
b1:4b:54:8d:23:54:54:43:96:c1:29:44:5e:3d:b6:
50:3c:70:86:9c:57:17:fd:ad:9b:e1:fe:1b:c5:da:
99:ba:75:af:1d:ec:c9:3d:d5:e6:15:18:a1:a7:ad:
eb:91:71:11:b7:2a:20:81:06:0e:11:99:75:a7:dc:
39:48:5b:86:62:46:74:01:21:09:92:b9:f8:8e:fd:
fd:e0:f8:c0:c2:29:26:4d:9b:be:79:37:cb:c6:70:
7a:40:02:51:17:ff:db:55:9b:41:78:56:2b:b1:b1:
2e:e1:ed:04:68:10:b6:7b:93:1f:a4:cb:6f:ec:34:
a8:8b:55:29:18:da:e3:d5:7e:fe:8e:ad:29:1a:b0:
54:30:37:e9:a4:ce:08:6e:24:8a:56:ee:04:aa:35:
4a:4f:15:cc:6f:6b:23:6a:11:78:0a:29:05:c9:c4:
fd:d0:66:42:d1:3c:79:27:4f:8b:df:92:bd:1b:f0:
10:94:cf:5c:c8:f2:04:87:c0:fa:77:2f:03:c4:a1:
eb:e3:22:49:e2:07:d7:01:74:75:35:4b:c4:bb:e8:
16:85:ec:6e:ba:57:d7:8b:03:1b:f8:28:92:26:a2:
04:ed:1b:d7:78:e8:2a:24:30:60:7f:43:84:51:d4:
e3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:12:73:89:B4:8C:47:5B:B3:91:DC:45:4B:12:D1:B5:5D:41:D3:68
X509v3 Authority Key Identifier:
keyid:53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:fb:5c:d1:4d:72:d6:e5:f6:b3:a8:dc:5d:39:59:e6:7a:f6:
73:ea:8a:68:87:d9:a4:5d:9d:0e:cc:49:29:b5:a9:06:76:8e:
26:ff:6b:48:1f:10:82:5c:78:4c:e6:85:6a:55:21:15:ed:8a:
72:cd:e8:ec:ea:17:3a:15:3c:f4:f5:5d:06:4e:5c:87:1f:a2:
8a:0e:d1:1d:be:12:17:ef:9e:c2:44:8d:4f:54:26:9b:47:42:
72:1e:dd:1c:41:6e:1b:07:ba:3d:84:e1:99:b5:33:f6:d0:6c:
fb:3a:71:ab:4b:76:de:a1:0f:12:d5:33:2b:ea:ab:2e:88:f7:
03:ed:a9:96:c1:29:7d:fe:32:00:67:63:ba:23:05:d7:43:84:
67:ad:3c:95:2c:32:84:78:34:49:cd:24:a1:7c:30:cf:5b:1e:
92:cc:b2:5b:22:6b:09:e2:0a:16:be:95:6c:a9:7e:13:ce:99:
12:4b:3b:7d:34:a0:6c:7b:88:73:b4:65:77:4f:b0:5d:db:83:
d5:1e:e1:8d:c1:a5:f0:21:95:41:e1:ed:a2:25:39:70:c7:b1:
0c:c2:ca:c1:6c:da:fe:af:ba:23:95:80:61:a5:79:b1:a7:0c:
e4:23:dc:3b:05:76:49:48:37:98:4b:b6:64:2c:cc:01:3e:0e:
5f:df:88:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:08:49 2025 by rpki-client