Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
File: SuVbOScPau6FdT3OFO2eHx_ImyQ.mft (raw, json)
Hash identifier: M2DjVjBgJEvjzy7BvCqNMrrfpcbmU2XYtFquR6sco5o=
Subject key identifier: E1:2B:86:02:75:A5:57:30:75:E3:F6:E8:E6:53:65:6A:00:28:5B:45
Authority key identifier: 4A:E5:5B:39:27:0F:6A:EE:85:75:3D:CE:14:ED:9E:1F:1F:C8:9B:24
Certificate issuer: /CN=4ae55b39270f6aee85753dce14ed9e1f1fc89b24
Certificate serial: 019678D6B23DC98C65800BD1E0913DDFA1E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 20:00:58 +0000
Manifest this update: Sun 27 Apr 2025 20:00:58 +0000
Manifest next update: Mon 28 Apr 2025 20:00:58 +0000
Files and hashes: 1: SuVbOScPau6FdT3OFO2eHx_ImyQ.crl (hash: ns7fglqaQIhBg0bqIjdh7R0TqqEOhn75JIGsj5jcXyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:b2:3d:c9:8c:65:80:0b:d1:e0:91:3d:df:a1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ae55b39270f6aee85753dce14ed9e1f1fc89b24
Validity
Not Before: Apr 27 20:00:58 2025 GMT
Not After : Apr 28 20:00:58 2025 GMT
Subject: CN=e12b860275a5573075e3f6e8e653656a00285b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:85:77:9e:2c:e0:04:b8:38:48:06:8a:95:
7a:06:a0:7b:98:3b:cc:bb:77:15:80:de:81:8d:68:
70:cb:29:57:27:c9:05:8e:08:d4:68:1d:86:7d:ec:
6a:99:c4:10:e0:6a:a1:2f:cf:82:ca:52:f3:d7:5b:
e6:59:3c:83:f5:db:96:94:a5:21:d4:43:18:6b:74:
6c:d3:8b:ec:cf:34:66:9e:e8:dc:87:c7:a3:f3:f8:
c7:db:a6:a3:72:35:51:8c:57:0f:a9:fd:ee:77:83:
81:cb:95:ee:af:e5:d4:78:c1:9b:22:20:80:2f:9b:
c2:ea:9a:60:d8:a4:e3:1a:7c:5f:b5:c5:80:46:18:
e2:b6:76:82:08:f7:bb:35:30:cf:5e:20:cb:15:a5:
c2:72:d2:20:10:49:f9:71:cc:fd:af:fd:9a:c0:76:
f2:26:07:06:01:f8:d2:58:21:9c:52:84:e7:ea:dd:
de:92:93:3b:b0:93:be:ff:bb:40:28:5b:1b:f4:46:
52:d2:af:b3:f9:22:73:70:f1:84:05:20:e6:14:d6:
71:d6:1c:1e:a6:1f:87:85:b7:8b:4d:bf:82:47:1f:
56:e0:9c:a2:76:c5:74:d8:77:d5:26:8d:92:0e:c6:
5a:7b:14:b1:1b:79:2d:9e:f7:e6:78:8b:f3:23:29:
91:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2B:86:02:75:A5:57:30:75:E3:F6:E8:E6:53:65:6A:00:28:5B:45
X509v3 Authority Key Identifier:
keyid:4A:E5:5B:39:27:0F:6A:EE:85:75:3D:CE:14:ED:9E:1F:1F:C8:9B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:91:77:7e:ac:b5:fe:06:67:eb:a9:11:81:c1:a8:e3:c7:a8:
1e:c7:5d:18:b9:17:20:1e:10:3d:e6:7c:9b:ae:93:c6:e7:bb:
36:55:d4:53:cc:59:08:b3:2f:5f:de:22:ba:fe:93:d9:b0:55:
ac:9d:82:bd:d0:e7:ce:0b:1d:61:68:8a:d0:3e:f6:99:72:ef:
63:d3:52:a2:0c:a1:53:fb:12:83:d8:ef:49:0b:3d:d3:ac:b3:
c0:70:2b:1e:0a:3c:27:ec:ac:0c:62:fa:ff:e9:1c:9b:70:a8:
4f:71:0e:bf:62:24:5b:36:bf:0e:eb:17:3e:f1:e6:e3:e4:6c:
9e:c4:ee:e6:86:fd:e3:e4:0a:32:32:60:41:3c:ab:ec:9d:7e:
3c:cc:dd:f4:9b:ae:3e:49:4b:c9:fb:09:b7:3c:60:12:34:c4:
43:5b:c2:8b:57:bc:7d:99:73:bc:32:15:70:3d:60:0d:f4:68:
9c:7b:42:54:d6:c7:53:3d:5c:92:19:5f:b8:7b:9a:ab:2f:fe:
08:2a:e8:34:32:d3:9e:5e:53:ea:73:85:81:df:4b:8a:ae:5a:
b3:5f:13:9d:2d:3d:26:0a:a9:d6:cc:a9:76:eb:28:78:36:e8:
0a:23:4d:3e:92:8b:15:02:f6:cd:5a:6e:90:58:04:31:8d:05:
8a:58:f1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:04:13 2025 by rpki-client