Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
File: 68Xg5EXZRzFUru10Rpss-6NmTjU.mft (raw, json)
Hash identifier: TR0Jp2Qg+Dm1OMYzoMT47cYDvcAaC4EfvVfDXewJGEQ=
Subject key identifier: C0:55:47:50:AB:9D:A0:CF:A1:F0:47:F9:FC:8F:71:76:5D:1E:98:1F
Authority key identifier: EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
Certificate issuer: /CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Certificate serial: 0196876DF9778C9A1AD4C4736F58123D79CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
Manifest number: 085C
Signing time: Wed 30 Apr 2025 16:00:53 +0000
Manifest this update: Wed 30 Apr 2025 16:00:53 +0000
Manifest next update: Thu 01 May 2025 16:00:53 +0000
Files and hashes: 1: 68Xg5EXZRzFUru10Rpss-6NmTjU.crl (hash: 2Vvevmz1j9s9pxh4PpYVSRTok3BEc35K+S0RPh8Q1vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:f9:77:8c:9a:1a:d4:c4:73:6f:58:12:3d:79:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Validity
Not Before: Apr 30 16:00:53 2025 GMT
Not After : May 1 16:00:53 2025 GMT
Subject: CN=c0554750ab9da0cfa1f047f9fc8f71765d1e981f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:37:ba:b9:75:09:6f:a8:13:9f:ff:a3:79:95:
50:b2:8e:de:a1:3d:d9:e3:4f:ec:e1:c0:b0:2f:5e:
47:a2:36:b6:91:c1:63:94:b2:69:c5:6c:9a:27:c4:
5f:fa:aa:cb:e2:20:12:66:c9:87:f6:7b:30:d8:02:
a5:10:83:03:06:f7:1a:30:3f:da:cd:1c:12:7d:ba:
fd:cb:7a:31:3d:48:d9:1d:54:3e:ea:3b:a0:79:b6:
b7:e0:41:bb:a2:d6:c0:b7:c9:a8:9e:a0:91:0f:c8:
f1:3f:2b:c6:92:80:6e:84:99:88:95:66:cc:e2:10:
35:5c:7a:cb:52:3b:ed:47:a4:f9:d5:b0:8b:b4:9a:
19:cb:02:93:44:5c:7d:fa:16:cf:85:7d:cf:fa:8c:
56:e7:a8:92:a9:74:50:a7:4d:3a:d6:b4:30:bf:ba:
40:42:06:8d:5f:e6:7f:de:5d:8b:ad:cd:a2:8a:e9:
1c:f6:c3:0a:80:5f:83:f3:11:68:85:e7:3e:75:4a:
fa:31:e9:26:ca:90:69:41:75:39:69:4b:dd:f0:fb:
65:73:de:ca:29:b4:be:8b:a5:fc:d0:4d:f8:58:97:
b1:4e:92:76:31:20:08:3a:59:f5:16:8c:c5:40:f9:
d7:bb:06:9d:34:33:a2:26:7a:1d:be:75:49:f3:40:
59:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:55:47:50:AB:9D:A0:CF:A1:F0:47:F9:FC:8F:71:76:5D:1E:98:1F
X509v3 Authority Key Identifier:
keyid:EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a7:ae:9d:04:84:f5:21:8f:bc:40:32:4d:6c:03:96:76:7f:
e9:40:ed:89:81:0b:ac:ba:81:20:08:57:49:a8:3f:a9:61:1a:
23:21:20:41:70:c7:59:5a:ba:ad:3e:6d:42:c9:dd:57:74:23:
cc:23:8a:06:a5:3e:e1:85:28:c4:27:d8:00:52:11:fc:04:50:
2e:e9:6c:d0:88:dd:b1:b9:8d:57:65:2b:7e:99:af:6e:9d:16:
10:6c:bd:1f:c3:0d:a3:7d:e3:01:b9:e6:f3:e4:8c:fd:39:1d:
0c:e2:28:bf:34:ce:2f:da:fd:d1:09:32:b9:01:ae:91:aa:da:
43:d9:64:d9:e0:6f:e3:6a:26:27:d0:9d:2b:fa:6b:33:1e:87:
ed:4e:e1:f6:ec:be:f7:d2:0e:5e:62:fb:e9:a7:19:d5:c8:d0:
ae:49:60:e5:4a:5a:4f:ca:01:ad:0b:1d:44:91:5e:1c:7a:3d:
e5:a9:07:9e:c0:0f:02:43:9b:f9:d7:c2:31:82:4c:9c:ce:f2:
cd:63:fd:fe:75:58:8c:67:ae:d9:9a:22:4b:cd:cd:df:8f:18:
cf:62:a3:b3:28:c2:cd:e3:71:bd:e4:c1:64:80:69:b2:bb:73:
fc:8a:ae:04:0b:b4:2a:0c:e4:08:72:e1:c9:46:3b:69:91:92:
81:ef:fb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:43:22 2025 by rpki-client