Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
File: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft (raw, json)
Hash identifier: Wb1rP252jQ3hBQ1c0FYfNo8Q73hb5UtffQgGdNcliUE=
Subject key identifier: CA:31:FE:AE:59:6E:48:F6:26:03:56:B7:69:5F:7F:D9:86:4A:00:B6
Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Certificate serial: 019678D6B36F1ACFCD495EBB10975698E563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
Manifest number: 04D0
Signing time: Sun 27 Apr 2025 20:00:58 +0000
Manifest this update: Sun 27 Apr 2025 20:00:58 +0000
Manifest next update: Mon 28 Apr 2025 20:00:58 +0000
Files and hashes: 1: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl (hash: /grpCYewTTKgTqoo8uJVQHOoFlBMvqQzmBIwSbSv3G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:b3:6f:1a:cf:cd:49:5e:bb:10:97:56:98:e5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Validity
Not Before: Apr 27 20:00:58 2025 GMT
Not After : Apr 28 20:00:58 2025 GMT
Subject: CN=ca31feae596e48f6260356b7695f7fd9864a00b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4d:20:e9:25:51:78:8f:31:3c:96:c8:30:43:
ae:d1:f8:8d:2a:97:d0:04:45:e3:99:71:6a:98:6e:
81:84:03:a7:ed:e0:13:31:89:a1:25:a4:05:9c:de:
77:be:fa:2b:3c:6a:6c:dc:cd:ae:02:17:ca:0a:fc:
70:6a:0e:28:56:4f:86:d9:b4:7d:4b:34:10:da:9a:
55:1b:f4:dd:4b:41:32:21:8c:e9:19:5c:ac:54:7b:
83:63:e1:17:43:78:b1:4d:3e:be:75:b0:48:24:f2:
17:aa:34:c9:ff:c4:50:a1:8c:2f:60:b3:d9:b9:90:
57:e3:41:59:14:9d:d8:e5:c3:3d:c6:27:ac:65:d9:
32:51:d7:b9:f6:f0:8e:a3:6e:58:93:1a:e8:da:1e:
2c:4f:52:96:23:ad:40:a8:82:e4:db:36:0e:45:ff:
6e:8b:90:df:af:d5:c1:d0:c7:9c:51:81:65:4e:99:
16:d8:5f:6f:a1:f4:38:d5:91:41:4d:14:d5:9d:a6:
03:d3:f0:ce:09:af:51:42:52:d5:a0:2a:6d:a9:82:
6b:e4:01:67:58:b2:1a:a7:5e:a4:9e:b7:ea:93:d9:
57:eb:81:6f:13:ef:51:27:3a:4d:45:b8:f7:76:57:
16:29:dc:97:35:9a:08:84:32:54:6a:81:f9:dc:f7:
4a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:31:FE:AE:59:6E:48:F6:26:03:56:B7:69:5F:7F:D9:86:4A:00:B6
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fa:c6:0f:a2:48:17:dc:2a:98:58:bb:86:15:b2:e7:cd:b6:
10:0f:92:0f:03:4c:70:94:e0:c4:63:62:5d:cb:4e:20:cc:ec:
01:98:a8:38:08:0a:1e:bc:3c:27:7c:4f:39:e3:c8:fd:98:d4:
fb:ba:24:18:42:aa:7c:8c:42:3a:e1:8e:2d:73:1f:86:16:ab:
20:40:c9:57:9a:30:51:f8:0d:ff:1d:df:00:66:9e:3c:56:ce:
bf:2c:5e:2f:6c:44:65:6b:95:6f:6e:b8:86:0a:42:da:50:58:
13:32:54:6f:94:ef:f9:47:39:97:5a:90:fa:18:b1:a3:29:5b:
08:96:c2:ad:67:e2:8a:96:82:e0:c8:f1:9c:fe:25:13:ed:a7:
0e:e5:71:84:3f:9e:d1:fd:f0:37:98:a1:9d:77:1b:cf:c9:56:
e9:71:c7:84:d0:4c:50:44:cb:22:89:33:6e:fb:9c:f6:e1:4a:
0d:38:d5:09:1b:d6:bd:f9:de:c2:45:aa:b0:14:c0:07:3d:06:
4e:f1:95:b4:90:03:37:e3:34:fd:75:e7:21:58:f8:42:fe:db:
fc:f3:3c:aa:99:df:dc:1e:c9:22:2c:d9:56:e6:27:e9:cd:bb:
c4:a2:75:60:46:bb:a7:bf:ac:7f:d4:01:a5:e6:b5:4a:30:48:
89:88:88:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:54 2025 by rpki-client