Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
File: r06GL461X0-CVOLIWLcvQzl_4_o.mft (raw, json)
Hash identifier: yE7qxjdB0avdfHGAqj4hsdbWg2z2jDGZkEtUY7M+tDs=
Subject key identifier: A6:34:31:7C:08:9F:A6:C0:B9:F1:44:30:FF:1C:1E:EA:17:77:18:24
Authority key identifier: AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA
Certificate issuer: /CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa
Certificate serial: 0196741DBBD910137FF0C3C18F6861FED322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
Manifest number: 150C
Signing time: Sat 26 Apr 2025 22:00:27 +0000
Manifest this update: Sat 26 Apr 2025 22:00:27 +0000
Manifest next update: Sun 27 Apr 2025 22:00:27 +0000
Files and hashes: 1: r06GL461X0-CVOLIWLcvQzl_4_o.crl (hash: N8yahwUoRWoenuveFTW4Bv/ZMS30V1VMEN2L4G+pWug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:bb:d9:10:13:7f:f0:c3:c1:8f:68:61:fe:d3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa
Validity
Not Before: Apr 26 22:00:27 2025 GMT
Not After : Apr 27 22:00:27 2025 GMT
Subject: CN=a634317c089fa6c0b9f14430ff1c1eea17771824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:6a:7d:ba:53:b9:7d:76:86:8a:e5:f9:79:
84:db:aa:c3:f6:2d:bb:1c:4d:7f:99:30:37:e6:0d:
87:77:ec:88:13:6b:fa:cc:01:7d:72:2e:8d:2c:cc:
bb:a7:ff:17:a8:50:3d:e6:c6:05:92:43:25:1d:cf:
8a:45:d6:09:71:36:43:e5:ea:6a:e4:3e:a5:d7:26:
d6:3b:b2:e2:f3:d1:09:51:4c:08:ed:f8:fb:11:b9:
3a:0a:5b:04:4f:33:f0:d9:b6:cc:ad:2c:e3:bb:92:
17:e0:a0:d1:d9:12:7e:e9:87:cc:f3:67:a7:ab:1f:
4e:ed:64:cd:2d:c4:00:b8:3d:5b:17:15:b7:18:09:
40:c7:f3:ad:c5:52:01:39:e7:7e:92:78:ae:58:5c:
15:9b:93:68:62:8d:0c:54:f2:09:a1:ee:c4:6e:b3:
d1:fd:46:95:07:29:c5:0f:e2:66:cb:36:58:38:38:
26:c1:e6:b8:64:58:59:20:d1:fd:0b:3c:27:38:dc:
4a:2c:b6:2c:58:d8:98:0c:ea:c7:cc:26:c4:a6:b3:
32:f3:92:05:01:20:a7:86:c3:63:fc:ed:05:67:47:
69:7c:b6:a9:fb:24:38:0f:ee:c5:77:3e:8d:a3:66:
21:bc:a0:60:58:b0:64:40:68:dd:45:35:b3:0d:72:
74:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:34:31:7C:08:9F:A6:C0:B9:F1:44:30:FF:1C:1E:EA:17:77:18:24
X509v3 Authority Key Identifier:
keyid:AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7a:6c:50:51:b3:95:55:02:71:b9:b7:03:a3:da:76:cd:8f:
86:64:e5:79:6e:11:a7:bc:05:cc:b0:0a:c1:19:06:82:60:28:
8e:8b:c5:3c:dd:95:c9:79:4a:ea:50:1a:5e:6f:ae:fb:ec:a9:
bf:a4:b5:ca:81:8d:bc:c7:e8:ce:80:aa:08:e9:da:e4:d7:07:
af:77:e1:08:3e:a1:76:d0:3d:7a:82:74:c5:10:96:ee:70:f4:
b7:2e:ab:ae:fe:76:8a:8c:bb:05:7a:b1:95:f8:ed:6f:dc:11:
be:da:c6:2e:fb:a5:f3:0f:2b:f3:b4:ba:94:9c:0c:6e:4c:1a:
80:f2:81:97:8d:78:75:f5:5c:65:73:d7:f4:94:7c:07:fa:90:
bf:47:df:b0:87:e3:8f:45:43:1c:a1:73:1e:b7:8b:63:2b:cc:
a5:80:bd:d0:bf:84:0a:83:17:1a:1c:25:ae:3e:19:e8:15:99:
44:5e:55:c6:5c:66:37:5a:ba:dc:e7:4e:ff:20:fa:61:a8:91:
77:6d:50:ea:e7:c5:84:41:43:cc:fc:b4:e1:90:0e:34:26:5f:
23:4d:a9:ff:0b:9c:b8:8d:ca:48:99:eb:8a:6c:9f:02:a1:6c:
74:30:b9:48:9a:19:ae:9c:3f:9d:59:69:8c:7d:54:b9:55:77:
f0:8e:ca:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:47:00 2025 by rpki-client