Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
File: eSttblvaBSZfwM6XGaYzvgSm6Xk.mft (raw, json)
Hash identifier: XIdL5nY8tsnrBa445fKet7XtpireogcAkubhzG/gd1o=
Subject key identifier: D7:28:46:06:F8:27:A9:26:99:BD:3F:F3:0D:4D:64:AB:2F:9B:30:58
Authority key identifier: 79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
Certificate issuer: /CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Certificate serial: 0196760D304791122203933F8B0697856E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
Manifest number: 150B
Signing time: Sun 27 Apr 2025 07:01:37 +0000
Manifest this update: Sun 27 Apr 2025 07:01:37 +0000
Manifest next update: Mon 28 Apr 2025 07:01:37 +0000
Files and hashes: 1: eSttblvaBSZfwM6XGaYzvgSm6Xk.crl (hash: y9qEQOK6Gu/CBo9JRdcstTLb7Wu+V3/C+AuwEvAYtDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:30:47:91:12:22:03:93:3f:8b:06:97:85:6e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Validity
Not Before: Apr 27 07:01:37 2025 GMT
Not After : Apr 28 07:01:37 2025 GMT
Subject: CN=d7284606f827a92699bd3ff30d4d64ab2f9b3058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e5:6c:e2:b7:60:f7:0b:32:8b:c3:38:a9:21:
d3:5c:bd:cf:ec:5c:22:f6:61:17:0e:5d:68:de:0c:
dd:58:65:43:c4:4e:05:53:f3:94:84:e2:64:db:cd:
b9:23:3f:a7:f1:72:6a:b6:71:6c:e3:08:81:58:46:
d0:84:5d:56:6c:41:7d:1e:69:9e:ef:a1:e8:21:b6:
41:71:04:e6:64:fa:7a:71:d2:79:cf:4e:e9:b0:60:
be:62:f7:50:8e:45:eb:60:27:3e:bc:18:ce:25:a1:
b5:01:b0:0f:8e:7f:e5:70:7c:e6:73:7b:e7:ad:3f:
85:71:47:61:39:4b:bb:c5:0f:15:9c:70:4c:9a:9a:
c0:13:4f:ff:89:6d:5d:e3:49:f4:26:bf:e7:cd:50:
bd:6b:c6:7f:ee:14:bc:7e:8e:91:ea:65:1d:fa:48:
8c:8b:f9:0c:f2:3e:33:06:db:3f:fc:26:d1:5c:e4:
ec:13:6f:ad:b3:a6:02:eb:c0:71:3c:d5:a5:b1:53:
d4:25:14:a0:82:99:a8:ca:6e:28:1b:77:83:a6:9a:
0a:b2:6d:ab:d0:53:23:63:c6:2a:78:b1:cf:da:53:
52:8d:e6:99:c0:e2:c2:01:2d:35:2d:f1:85:63:6c:
35:36:f1:61:ee:51:2c:26:47:f6:07:b7:fa:58:12:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:28:46:06:F8:27:A9:26:99:BD:3F:F3:0D:4D:64:AB:2F:9B:30:58
X509v3 Authority Key Identifier:
keyid:79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:e9:e0:70:dc:98:03:27:50:4a:cd:c8:04:c6:65:ad:72:fe:
c9:e4:5c:d8:74:cf:98:8a:60:1d:99:62:e9:37:cd:9c:e5:8e:
1b:7f:a6:26:a1:9f:9c:ce:f2:7b:b1:b8:d1:a1:e6:3d:88:78:
98:93:30:0e:0d:98:b1:04:77:46:c7:12:41:89:50:b2:85:c6:
42:8c:a7:14:8f:14:69:2a:d4:e5:3e:8c:5a:b9:95:d9:1c:1e:
05:ed:e5:84:2a:0c:a0:58:ce:f1:9f:62:87:c5:6b:d6:68:b7:
e5:e5:7c:e7:c6:59:d5:62:11:bf:32:f0:70:ef:78:9f:5e:84:
c1:df:a7:b8:8e:d2:2c:08:0d:d0:c1:26:6e:6e:ab:c1:4d:92:
cb:90:c8:98:d5:0f:a4:03:ed:ad:00:36:a4:02:98:99:c9:26:
59:59:5b:a0:c8:24:48:1b:69:e3:5d:a4:d3:15:34:1a:0c:47:
70:7c:2c:ed:d7:cb:85:c1:c2:28:e0:b4:3f:ca:54:bf:9f:a9:
b2:c9:38:72:fd:30:48:c3:03:74:a7:67:24:ef:5d:15:7c:e4:
78:51:44:66:fd:a3:88:7c:f9:34:44:51:11:ad:51:df:78:36:
69:df:98:9d:f5:39:f1:50:06:6d:b4:aa:7f:13:82:59:dc:e3:
57:14:bd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:15:41 2025 by rpki-client