Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
File: 24tcHuy6hgz_8XR5ZtdjyagvbZo.mft (raw, json)
Hash identifier: lsRSKpw4g8h1AqEpLHu/RaeJB6vVgZ8eMW61TYEr4KU=
Subject key identifier: 84:F1:4F:06:20:DC:33:02:11:96:AA:40:A1:F3:D0:B3:B0:49:C0:EF
Authority key identifier: DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
Certificate issuer: /CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Certificate serial: 019769CEEBC416EACD846B742879A7A9075C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 15:00:57 +0000
Manifest this update: Fri 13 Jun 2025 15:00:57 +0000
Manifest next update: Sat 14 Jun 2025 15:00:57 +0000
Files and hashes: 1: 24tcHuy6hgz_8XR5ZtdjyagvbZo.crl (hash: fQj82QUJKqC/j5PnEHW/dWF0RmwFjyIeK/BDIy8sWxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:eb:c4:16:ea:cd:84:6b:74:28:79:a7:a9:07:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Validity
Not Before: Jun 13 15:00:57 2025 GMT
Not After : Jun 14 15:00:57 2025 GMT
Subject: CN=84f14f0620dc33021196aa40a1f3d0b3b049c0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:71:20:ff:cd:29:35:ad:59:5a:be:07:ed:
d7:1a:f3:e5:2b:6e:19:dd:1d:6c:c2:b5:4e:43:f4:
c7:a2:6b:40:aa:e2:47:a8:b9:e1:be:53:4a:87:55:
3d:1c:0c:ef:f7:6f:63:b9:4d:f9:1c:ba:c6:83:72:
7b:6b:3d:a4:23:36:28:e1:82:58:36:73:57:57:a4:
51:5b:68:fb:4d:14:b6:3e:7c:c1:ed:25:f8:0c:ab:
c0:2c:9e:0a:79:ad:7c:14:59:f0:c0:84:32:de:f3:
5c:20:7b:dc:e7:71:2f:b8:ca:a0:59:2b:15:ca:a0:
82:83:73:d2:e1:94:2e:2d:4c:34:e3:cd:f0:89:90:
fc:30:de:58:11:f5:9a:82:93:4a:8c:5a:e9:25:ba:
42:cf:b5:ac:17:3a:e7:fb:f4:16:a3:9d:ea:38:2a:
35:48:b1:56:d4:2a:e4:6f:2e:fd:46:59:c0:ac:96:
bc:26:34:89:1a:3c:9d:64:93:86:8d:73:32:a0:f3:
be:ce:9b:be:4a:76:08:39:04:72:e7:58:06:91:c2:
df:94:a9:56:90:f8:b5:e8:34:25:4b:d7:62:cc:32:
f7:2a:a4:2f:54:3d:8f:23:08:c4:fb:91:cd:5e:5c:
b0:21:90:48:96:a7:0d:56:85:b5:c6:f0:1c:f1:5b:
e5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F1:4F:06:20:DC:33:02:11:96:AA:40:A1:F3:D0:B3:B0:49:C0:EF
X509v3 Authority Key Identifier:
keyid:DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:66:07:6a:f0:a7:2d:81:38:cc:33:2b:7a:77:e1:88:5c:8b:
d6:06:83:5c:83:60:c2:cf:aa:d0:cb:32:93:70:7b:aa:bd:3d:
2b:4c:25:cb:6b:43:89:0d:a9:1f:df:09:31:79:90:3e:3f:07:
7f:ac:1d:3d:a7:ea:4f:45:19:55:7e:c9:de:9f:4e:1a:bf:8b:
dd:dd:c5:f5:37:2c:d3:2e:b6:d3:cb:d9:cd:88:48:8a:ae:a8:
c0:9b:1b:b7:a7:23:e5:9f:a5:07:cf:2d:07:e6:15:3a:11:1b:
18:5e:44:b9:af:ef:83:62:d7:7a:4e:73:b5:ba:9e:82:eb:51:
65:30:e4:33:bb:46:21:db:7d:80:0a:ed:d7:d7:6f:22:7f:bc:
0c:7e:f4:d0:56:d0:80:3a:70:e3:5c:66:1a:31:50:fe:22:8f:
c4:6f:05:8e:ac:a8:17:b9:72:de:9e:11:f5:0b:dc:ef:cc:7b:
a4:c5:fc:fb:32:d9:c9:ce:77:41:a8:44:83:0e:e0:2a:1e:e7:
50:30:24:76:b4:1f:81:2b:65:91:47:86:5d:38:41:94:be:c8:
04:e9:99:44:37:d0:aa:f4:5c:03:38:ce:6d:d2:44:05:17:66:
21:cc:80:37:00:94:46:25:86:73:17:6f:44:3d:d4:d0:da:03:
f7:65:a0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:57 2025 by rpki-client