Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
File: 04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json)
Hash identifier: WZLmfi9wWGrEXSpCxmV0Ys8qnXH+YYkuJWASPPGcAUw=
Subject key identifier: 87:4B:F9:73:80:81:A3:24:22:49:C2:56:FB:9E:D1:75:22:47:A3:D2
Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Certificate issuer: /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Certificate serial: 01967DC6B37A30592906A6A7FE82D0F89A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
Manifest number: 091F
Signing time: Mon 28 Apr 2025 19:01:36 +0000
Manifest this update: Mon 28 Apr 2025 19:01:36 +0000
Manifest next update: Tue 29 Apr 2025 19:01:36 +0000
Files and hashes: 1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: Shk29pMo44JM48I5m8/9lXupBhx0nbhz2xEoYUl40h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:b3:7a:30:59:29:06:a6:a7:fe:82:d0:f8:9a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Validity
Not Before: Apr 28 19:01:36 2025 GMT
Not After : Apr 29 19:01:36 2025 GMT
Subject: CN=874bf9738081a3242249c256fb9ed1752247a3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:48:fc:57:7e:fe:47:c6:d7:5b:c6:90:cf:
f5:c5:31:26:4a:62:ee:01:d1:1e:06:af:ca:05:f1:
09:0e:b6:95:21:88:90:37:2c:eb:ca:3c:0b:30:a6:
7c:60:ab:62:68:ee:9f:9d:04:44:00:28:eb:29:bd:
81:6c:66:76:4d:bd:fa:0f:29:4d:33:bb:b3:77:46:
b8:ef:4f:f3:b8:f5:88:95:20:01:c1:46:b3:5b:06:
e0:f5:d2:e3:fd:f8:9e:71:bd:5d:df:29:19:6e:5f:
11:ed:c2:83:16:5c:2b:59:9a:f7:c7:02:81:51:90:
99:09:b2:cf:5a:dd:65:f3:b1:cb:11:0c:29:18:ec:
5a:8f:f0:04:b1:b8:62:da:93:27:79:a6:ce:76:e5:
2f:30:8c:ce:69:bf:e6:e9:4e:45:f5:ba:1c:ce:3c:
aa:7e:a8:18:fc:d7:62:fe:6f:5b:68:b7:a2:64:b5:
a8:44:19:e8:90:f2:9a:db:ff:c8:2f:2d:d4:07:54:
db:17:d8:c3:29:b8:e8:b1:13:0f:84:5d:62:13:48:
b1:cb:20:9e:fd:c8:7a:a3:b4:67:f2:d7:72:27:46:
40:59:b4:fc:20:37:41:56:0f:d4:3c:af:1f:1e:db:
ed:b6:ec:55:3b:85:f4:c0:ff:93:fd:0b:49:86:27:
b1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4B:F9:73:80:81:A3:24:22:49:C2:56:FB:9E:D1:75:22:47:A3:D2
X509v3 Authority Key Identifier:
keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ba:f4:c4:e6:f1:e4:86:7a:53:f2:00:34:1d:24:46:e6:6f:
87:18:85:1f:3b:6b:4f:b1:0e:4b:87:70:e4:46:2d:47:cd:5a:
e1:1c:1b:bf:46:5d:18:7b:8d:cd:b4:93:99:45:11:68:73:63:
1a:93:05:31:bc:14:fd:de:40:66:3d:37:73:13:77:b3:4b:64:
cf:6e:e6:64:86:52:a1:60:fa:27:6b:17:20:ef:ce:d3:b4:57:
7e:1d:43:28:bc:1f:44:b6:0a:0c:6b:bf:71:f8:6e:eb:ba:d6:
75:19:c0:d7:b1:82:6d:d4:0e:55:a2:2a:36:38:9f:bb:d0:5d:
7e:ff:58:64:e4:c7:fd:53:c6:fb:7d:a8:ce:33:4d:89:d2:26:
9a:39:7a:1c:e5:b1:0f:a2:1b:c3:69:b6:b4:24:97:82:9d:4f:
2a:80:57:22:82:18:18:2e:68:87:70:4d:0b:f3:a6:b7:3b:08:
df:16:e9:21:f4:57:e3:40:0e:5a:c3:3a:36:f0:97:ef:af:5a:
c4:52:ae:70:c7:03:98:f1:0b:1a:ec:03:dc:95:34:4a:17:bd:
a6:65:69:30:e0:b7:16:83:c5:56:e7:d3:12:10:b0:c4:93:c5:
89:72:13:5a:a6:bd:e4:ef:8b:b7:cc:58:18:f5:1a:b7:27:d7:
04:c6:6e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:19:24 2025 by rpki-client