Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
File: p_555OY70WvEI3WStoTQBDPL0PY.mft (raw, json)
Hash identifier: 5D7a9N12B9kIFfYNkBiCdNlxSxoui6EFrHiApDT8s3Q=
Subject key identifier: D5:E2:94:25:6F:9B:5E:9D:E9:21:1D:03:31:FA:D3:7E:E4:33:3E:DE
Authority key identifier: A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
Certificate issuer: /CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Certificate serial: 019675D57C16E9B9E5F27259AFF882B693ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
Manifest number: 0651
Signing time: Sun 27 Apr 2025 06:00:47 +0000
Manifest this update: Sun 27 Apr 2025 06:00:47 +0000
Manifest next update: Mon 28 Apr 2025 06:00:47 +0000
Files and hashes: 1: p_555OY70WvEI3WStoTQBDPL0PY.crl (hash: Hw5TimYqvPRDCC+YTFGylVY+JhCyCJ9WRCROWc1cdCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:7c:16:e9:b9:e5:f2:72:59:af:f8:82:b6:93:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Validity
Not Before: Apr 27 06:00:47 2025 GMT
Not After : Apr 28 06:00:47 2025 GMT
Subject: CN=d5e294256f9b5e9de9211d0331fad37ee4333ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:1e:c6:0c:33:43:0a:18:9a:8d:dd:9a:a1:
32:df:a3:8b:fb:43:0e:30:a7:e5:40:da:d7:c4:e6:
03:99:14:4d:93:70:f4:d2:da:9c:14:cb:48:ec:3e:
c6:25:59:3a:60:73:8e:73:d7:3d:6c:21:99:ef:18:
0a:44:42:43:79:5a:56:3e:17:62:48:45:cf:63:33:
a9:2b:0e:ab:5a:20:d4:ef:74:c0:7a:1b:a9:b0:12:
3f:c2:c4:07:a6:f9:53:51:9c:56:93:cc:28:95:54:
30:e9:fe:fc:42:05:c7:c0:6d:38:cd:8d:1b:e9:fa:
35:b9:ec:68:fa:a6:91:a7:cd:9d:01:1a:f0:dc:e0:
ca:0e:fc:cb:40:92:23:4a:32:00:0c:92:6b:2b:29:
0f:52:f1:fc:e6:3c:ef:3a:6e:b3:3d:43:bf:4b:0e:
51:68:3b:28:8d:e6:62:5b:fb:fa:3f:b6:09:81:9e:
68:28:f5:37:c5:c7:61:a2:53:19:42:ea:d0:b1:9a:
68:48:fd:21:d3:aa:75:a4:9c:26:e3:b0:6a:55:b6:
99:c2:96:0d:42:e6:8f:03:6f:06:59:5d:5c:46:06:
48:79:26:f9:c9:30:b8:18:e9:bb:12:46:b7:cc:50:
b2:b8:7a:7e:7f:4f:45:9a:fd:b5:67:c0:fb:a6:57:
5a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E2:94:25:6F:9B:5E:9D:E9:21:1D:03:31:FA:D3:7E:E4:33:3E:DE
X509v3 Authority Key Identifier:
keyid:A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:02:5a:69:df:90:7d:68:58:03:74:f3:e8:d6:13:2d:09:d6:
e2:ec:92:08:1d:e9:a0:80:1f:e6:8f:83:29:d7:9a:4d:c9:c9:
ab:23:44:cb:ae:f4:1d:12:e8:1a:a3:8e:2a:70:20:96:d9:b5:
97:73:27:b6:d8:cb:4b:ed:3d:30:9f:d6:5f:b8:23:78:3b:b6:
d8:7b:06:fc:1e:e3:0a:3c:43:e5:0f:e0:47:75:30:3c:bf:71:
c5:db:da:91:04:56:85:78:49:12:d2:fd:39:10:49:fc:b1:7d:
ee:f0:8d:d9:76:f0:f2:cf:3c:b5:a7:37:a7:d7:fa:52:f6:0d:
7c:a4:78:57:a7:13:98:f4:ba:35:c1:ff:69:72:58:2b:c4:d2:
45:6c:e5:3f:08:66:e6:cc:bd:f8:d1:2e:22:7f:5d:e1:4b:b9:
23:e5:13:93:16:6d:e1:82:e9:4e:58:c8:52:e2:57:1b:77:6b:
db:ac:91:b4:35:f2:0a:0b:66:e9:04:b2:d3:a2:3e:59:15:e5:
7a:1c:2d:9f:46:bd:d4:46:9a:ee:21:80:6b:57:3c:55:67:71:
9f:ee:19:64:8c:71:93:96:68:03:10:4f:3d:0e:93:08:39:b7:
c2:9d:18:a1:d2:06:02:a0:c2:05:ee:ad:99:e7:ca:ba:6e:10:
ce:e2:b5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:16:44 2025 by rpki-client