Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
File: udCVzONbOja-8QjvdipiGvRmJiE.mft (raw, json)
Hash identifier: hg1z11/Yqpfexy3c3MdggmhLQtK0z9ZCANBz3vs8lnQ=
Subject key identifier: E0:33:D4:DB:71:80:CB:13:1A:D4:C7:97:D6:42:61:EF:34:A4:30:63
Authority key identifier: B9:D0:95:CC:E3:5B:3A:36:BE:F1:08:EF:76:2A:62:1A:F4:66:26:21
Certificate issuer: /CN=b9d095cce35b3a36bef108ef762a621af4662621
Certificate serial: 01968511978BD692BCEB163253C1687CB40B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/udCVzONbOja-8QjvdipiGvRmJiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
Manifest number: 026B
Signing time: Wed 30 Apr 2025 05:00:44 +0000
Manifest this update: Wed 30 Apr 2025 05:00:44 +0000
Manifest next update: Thu 01 May 2025 05:00:44 +0000
Files and hashes: 1: udCVzONbOja-8QjvdipiGvRmJiE.crl (hash: 93vsvt4fTY8pSiaXKp8HoWPoJsG7Iz0BGzcT0hHElmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/udCVzONbOja-8QjvdipiGvRmJiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:97:8b:d6:92:bc:eb:16:32:53:c1:68:7c:b4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9d095cce35b3a36bef108ef762a621af4662621
Validity
Not Before: Apr 30 05:00:44 2025 GMT
Not After : May 1 05:00:44 2025 GMT
Subject: CN=e033d4db7180cb131ad4c797d64261ef34a43063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:7b:9c:6e:2d:e8:a7:01:35:31:5c:5d:cc:
8f:6a:1b:9c:25:57:45:8b:1f:d0:41:89:ab:88:8b:
f5:37:74:00:ef:3e:9a:75:15:e4:47:2e:de:f8:25:
40:35:f5:8e:19:5d:f6:26:11:a2:a7:9b:cb:a1:c9:
96:85:c0:1b:6b:d4:bd:6b:45:64:a2:3f:03:bb:4f:
e8:76:eb:08:a8:a4:48:c9:5b:0d:79:61:ac:db:06:
a4:4a:02:85:a1:75:ed:ee:be:da:af:75:da:06:ac:
60:5f:28:9a:9a:cd:32:9e:07:f4:2a:ed:1c:f2:12:
26:25:a0:f4:5a:7d:ab:6e:b4:95:3f:cf:43:66:3c:
f6:1e:59:b5:51:f8:06:0f:cb:1c:64:1f:dd:b1:1a:
cf:ed:ae:d6:88:d1:01:e2:d0:7f:14:d2:81:6d:97:
80:44:3a:64:38:38:90:2a:a9:48:b4:99:c7:ec:cf:
09:18:a5:b4:e3:d5:a9:d6:36:8f:17:5b:9e:9a:56:
9c:bc:1b:a8:55:7d:69:ed:9b:ce:b5:44:9b:bf:b8:
38:fd:ee:34:83:de:e1:10:8f:61:0a:1b:87:12:b3:
a7:f7:52:87:c3:d9:5f:aa:a6:b7:74:ac:86:7f:e6:
be:67:b8:dd:2c:73:7b:7c:b6:0f:c4:11:6d:e5:a2:
67:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:33:D4:DB:71:80:CB:13:1A:D4:C7:97:D6:42:61:EF:34:A4:30:63
X509v3 Authority Key Identifier:
keyid:B9:D0:95:CC:E3:5B:3A:36:BE:F1:08:EF:76:2A:62:1A:F4:66:26:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udCVzONbOja-8QjvdipiGvRmJiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:59:46:0d:2e:1b:02:45:d7:3a:a7:0b:0f:c9:f4:98:c9:cc:
f1:64:e1:36:7d:e8:e9:ce:e1:05:bd:4b:d5:b9:b0:47:f9:55:
a2:2b:65:04:52:78:4d:ef:25:95:6c:44:15:e0:5c:56:f1:7e:
bd:68:04:56:03:39:27:50:3d:2e:ab:ec:f2:5d:42:f0:94:bb:
e4:20:ae:e5:ee:b9:6b:d9:ec:01:20:f3:86:b6:a0:31:8d:d5:
ea:14:05:67:4f:09:c4:04:41:c7:df:99:f5:e9:ab:77:22:e5:
fc:25:33:72:a5:e0:fb:00:4c:8e:6e:e8:57:88:b0:5a:33:d3:
55:ae:3d:7b:44:17:ac:d0:88:75:bd:0a:6c:36:5f:fd:50:85:
e0:cf:fd:0c:0d:a9:0c:c4:2b:d3:c5:23:7a:d0:f7:49:2a:57:
da:cb:93:53:ce:3f:27:ca:40:d8:b7:f7:d7:c6:bf:a8:7e:81:
f6:67:ce:35:56:63:d2:b4:21:f9:85:a1:05:0d:93:4b:93:28:
15:d9:c2:32:31:6d:ab:f1:47:1e:be:8a:b5:41:fb:17:5c:63:
47:8c:3b:66:a3:bf:28:b0:c0:f1:11:be:f7:05:2f:26:1e:bb:
57:fa:46:0f:de:38:e2:60:11:0d:be:6a:f8:31:32:44:38:37:
33:f1:11:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:34:28 2025 by rpki-client