Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
File: 214_2Taim0KaFIK070HDJuKTfSo.mft (raw, json)
Hash identifier: aZPWvczVRNeKEScLfSvVbZH5SYA2hxFC+WHXJw+f/KU=
Subject key identifier: E0:31:EB:9F:5D:25:E9:2A:61:7A:50:E5:81:CE:F7:1E:98:2E:E2:2A
Authority key identifier: DB:5E:3F:D9:36:A2:9B:42:9A:14:82:B4:EF:41:C3:26:E2:93:7D:2A
Certificate issuer: /CN=db5e3fd936a29b429a1482b4ef41c326e2937d2a
Certificate serial: 0196767A3B837DF7776D9498BAF821EB2569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 09:00:44 +0000
Manifest this update: Sun 27 Apr 2025 09:00:44 +0000
Manifest next update: Mon 28 Apr 2025 09:00:44 +0000
Files and hashes: 1: 214_2Taim0KaFIK070HDJuKTfSo.crl (hash: kvTeXbZz067CjnczxJhowQR4oURRaRMOxXBY1myRyOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:3b:83:7d:f7:77:6d:94:98:ba:f8:21:eb:25:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db5e3fd936a29b429a1482b4ef41c326e2937d2a
Validity
Not Before: Apr 27 09:00:44 2025 GMT
Not After : Apr 28 09:00:44 2025 GMT
Subject: CN=e031eb9f5d25e92a617a50e581cef71e982ee22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:c3:62:09:56:fb:3b:a9:85:00:09:05:97:
90:f2:72:46:03:18:b9:a9:15:4e:af:4f:22:4f:08:
a8:4d:de:e3:0c:49:5a:f9:25:ac:e9:f2:3d:ad:45:
66:e7:0c:3a:df:60:33:e7:84:0c:be:65:23:4f:51:
69:41:75:40:50:7e:fa:2b:bb:f9:d3:56:93:85:c7:
6e:a2:ee:bf:f0:d6:36:eb:d5:dc:8a:1e:b6:ae:96:
54:70:64:1d:c8:4d:49:7b:8d:5d:e7:ae:4e:50:a2:
b2:9c:f7:ca:56:b1:58:5e:b1:94:3b:e5:86:9b:45:
d2:ce:cb:13:08:7d:df:0c:bb:c0:dd:fe:e4:6f:14:
be:1e:84:56:08:cf:22:be:8f:58:4a:11:39:39:f7:
5c:b2:ff:5e:72:cf:af:0d:36:52:d9:e4:7d:d2:07:
ca:39:5e:e9:58:35:f1:88:7e:9d:3e:03:59:04:10:
f0:77:2c:4e:dc:5d:f0:03:d5:46:87:06:07:34:3e:
a7:eb:ab:3b:ac:72:41:c4:a5:85:fc:eb:62:3f:e8:
e8:f3:92:98:ea:09:e1:54:9e:12:67:fe:be:5f:d2:
9d:92:29:51:f9:23:e7:f2:a5:3b:41:00:31:b2:c1:
72:8e:9b:5e:e2:93:3e:24:7c:a8:7e:94:c0:15:09:
cb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:31:EB:9F:5D:25:E9:2A:61:7A:50:E5:81:CE:F7:1E:98:2E:E2:2A
X509v3 Authority Key Identifier:
keyid:DB:5E:3F:D9:36:A2:9B:42:9A:14:82:B4:EF:41:C3:26:E2:93:7D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4b:a7:02:2d:d2:77:59:70:48:49:b1:5a:91:45:69:eb:77:
53:78:d2:fb:ae:31:2a:42:79:88:ce:ff:9d:8a:a3:22:67:ed:
9c:2d:d4:10:bc:80:60:78:64:a6:4b:fc:bf:6e:06:ec:70:ee:
14:74:14:08:4f:cf:73:5e:cf:5b:11:83:f2:ca:71:ed:44:cf:
c8:e4:6f:e2:df:2d:60:0a:71:b2:01:cf:7b:50:d4:cf:e0:32:
df:5c:79:6d:de:06:ef:2c:c3:47:68:c6:ef:77:47:bd:60:07:
98:4f:18:e5:d9:71:e4:c2:7f:30:44:82:a4:94:2f:7b:9e:94:
5c:46:a3:0d:8f:d7:e9:3f:bc:9e:e8:62:9b:aa:4a:c7:6c:68:
0f:36:cf:d1:94:d9:9c:24:60:ac:94:ee:7a:f8:84:a5:54:98:
89:5d:05:e6:2c:83:f0:1a:c2:c4:9e:8f:cc:af:c1:9e:30:32:
0e:61:87:56:3d:e4:b7:b9:d1:6b:24:ca:84:22:1f:32:2c:ee:
8a:d0:54:08:4f:44:4f:9c:ab:8a:e9:c2:97:42:ec:f8:91:76:
39:1e:c1:30:9a:e7:e3:1c:cd:6c:75:54:80:68:e3:aa:26:75:
01:d2:02:c5:1a:c9:7f:c8:0c:25:ed:e6:a4:6b:29:6a:bc:5b:
4b:11:2c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:50:38 2025 by rpki-client