Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
File: gWiVcrIAukh5OByFdCdCZVkqFKs.mft (raw, json)
Hash identifier: 5qzQONz1co4zuZEGoJQqV1sl8lenD/CzaMFVA+j2rgE=
Subject key identifier: B7:C2:36:A5:53:AF:06:D2:AE:A0:C4:D9:95:DA:B8:94:98:89:4B:CA
Authority key identifier: 81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB
Certificate issuer: /CN=81689572b200ba4879381c8574274265592a14ab
Certificate serial: 01967DC61BBA7AC62DC74642FFD00DC14CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
Manifest number: 150F
Signing time: Mon 28 Apr 2025 19:00:57 +0000
Manifest this update: Mon 28 Apr 2025 19:00:57 +0000
Manifest next update: Tue 29 Apr 2025 19:00:57 +0000
Files and hashes: 1: gWiVcrIAukh5OByFdCdCZVkqFKs.crl (hash: l9b44goiBBHZFDyt+6rbaxMDAYi3DSDVkEfOvLuDmRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:1b:ba:7a:c6:2d:c7:46:42:ff:d0:0d:c1:4c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81689572b200ba4879381c8574274265592a14ab
Validity
Not Before: Apr 28 19:00:57 2025 GMT
Not After : Apr 29 19:00:57 2025 GMT
Subject: CN=b7c236a553af06d2aea0c4d995dab89498894bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:09:1e:6b:2e:cf:c9:56:5c:b4:07:57:72:
3a:3a:c4:19:39:64:f4:f1:ec:eb:94:76:3d:16:20:
98:68:74:14:6d:6d:80:73:8d:56:a3:7a:9a:30:d7:
28:b0:f7:75:eb:06:b8:22:44:e6:6f:3e:14:23:13:
44:77:4a:be:4d:63:02:80:94:77:6b:8a:dc:9b:46:
c0:ba:13:59:8f:03:99:56:0c:3f:96:0d:f6:ef:72:
15:9c:4c:22:7d:be:01:5b:8b:1e:bb:15:f2:67:51:
46:8f:61:ae:de:71:82:3e:3c:15:9a:51:cf:ab:56:
88:38:1c:11:90:29:bd:d8:4e:cd:64:98:6c:5e:8c:
74:ad:85:67:b5:78:da:bb:8f:5b:a6:53:81:8a:aa:
a6:6e:1d:26:28:19:bc:bf:04:a0:24:e5:16:c7:4c:
b2:31:e8:18:a6:5d:79:05:18:54:b4:b7:a0:1b:ca:
28:a9:84:91:87:55:a3:88:b8:93:ee:b2:20:f9:fb:
94:cf:94:26:3a:40:94:a9:ea:80:12:27:34:4e:af:
f7:05:b0:6f:6c:4c:b8:b2:0a:da:62:0c:dc:e5:8b:
13:03:53:a8:7f:39:1f:1b:cc:4a:77:e6:aa:0b:e4:
e6:90:01:66:ac:fb:ed:50:e0:d2:4b:9c:54:8d:cb:
03:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C2:36:A5:53:AF:06:D2:AE:A0:C4:D9:95:DA:B8:94:98:89:4B:CA
X509v3 Authority Key Identifier:
keyid:81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:20:18:dc:07:27:73:31:51:05:52:d0:d5:e4:5a:df:5d:a8:
9a:31:b9:b5:9d:15:b4:9a:20:de:40:56:47:e4:65:a0:5a:ad:
b2:19:33:82:dd:f5:69:85:dc:87:b3:b2:04:08:d2:4e:59:b7:
80:00:69:a1:62:69:d0:10:ab:b7:cf:49:50:b5:07:fb:32:ce:
77:61:18:d1:2e:28:a3:4e:02:91:bd:3f:61:f6:21:88:fa:bb:
d0:b2:a4:5a:7a:23:a6:be:c0:fd:09:e9:23:bd:bc:75:b5:ed:
e2:02:a0:fb:82:ad:1d:9a:f5:01:4b:36:6b:27:2d:7c:54:ad:
78:f0:a5:8e:2c:a6:aa:3b:bb:2e:41:04:c6:ef:b5:d9:36:47:
fd:06:65:e2:2c:c5:81:3d:46:fd:06:c6:50:fc:89:97:ce:ef:
80:95:de:71:4c:1e:84:56:be:4d:53:73:a3:de:91:80:3a:bc:
a7:d4:79:fa:03:de:59:d1:31:6d:4f:14:ef:41:d4:70:4b:ba:
aa:57:f6:e8:b6:a6:78:2f:63:9f:9e:91:ce:99:69:e7:f7:15:
f9:60:88:b9:14:1a:4d:8e:33:4d:57:d4:47:6b:9d:7a:f0:e6:
68:39:89:b8:a5:3f:b9:27:b7:60:da:ea:23:2b:4b:c3:dc:5f:
df:36:9b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:36:01 2025 by rpki-client