Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json)
Hash identifier: W5A2g8o1xdxAmjSiwaCN2q5HZfBPbonoFUgWaMAChgc=
Subject key identifier: 53:FC:85:A6:E3:29:FC:F1:29:19:B8:ED:A5:AE:0E:5F:38:7C:98:5F
Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Certificate serial: 01967EA19D03A0161DF68F12616F255E35B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
Manifest number: 01E0
Signing time: Mon 28 Apr 2025 23:00:42 +0000
Manifest this update: Mon 28 Apr 2025 23:00:42 +0000
Manifest next update: Tue 29 Apr 2025 23:00:42 +0000
Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: KmW1oL+mIKK4ZZfOmWpyBcTtc7sNJRAG9Bom7J0dXKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:9d:03:a0:16:1d:f6:8f:12:61:6f:25:5e:35:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Validity
Not Before: Apr 28 23:00:42 2025 GMT
Not After : Apr 29 23:00:42 2025 GMT
Subject: CN=53fc85a6e329fcf12919b8eda5ae0e5f387c985f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d7:fe:81:73:e8:14:16:e5:61:eb:76:f0:cf:
38:cb:b0:04:0b:d6:93:7e:8d:fc:85:e8:45:6e:15:
80:2f:8d:ff:ae:84:e7:7f:d4:23:39:c2:a9:5d:79:
62:d4:f3:21:0f:de:7b:b9:b9:6d:59:02:79:4a:d4:
79:50:2d:78:58:25:ae:e1:b5:3d:37:03:dc:cf:f6:
73:98:0f:83:e9:c5:09:8f:cf:ad:80:53:c2:45:a4:
14:6f:7e:91:47:7f:d6:fb:16:87:fa:63:0d:c2:21:
c4:5f:ff:de:30:8a:cd:45:61:04:a5:30:f6:7e:ae:
fc:7b:83:de:87:6e:a3:c4:52:37:e6:75:62:e9:e9:
35:40:ad:69:76:e2:fa:57:96:c3:19:00:0a:f4:8f:
d3:c8:98:6c:9b:e7:d1:aa:25:e8:9e:53:fa:62:3a:
10:28:d4:af:a6:08:e9:6b:ab:02:e1:75:9a:a6:26:
21:4b:47:e5:25:48:3d:32:e8:28:a7:e8:b2:aa:ef:
66:25:57:6f:2b:56:0d:83:fa:02:e2:62:df:86:5b:
cb:64:1e:dd:e8:48:70:bd:38:65:e9:d0:9d:05:4c:
0a:e1:61:4c:45:35:d6:ed:17:1d:f7:7a:e7:3e:f9:
e5:c5:e0:60:36:ea:be:fe:82:ae:37:86:11:a6:4a:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FC:85:A6:E3:29:FC:F1:29:19:B8:ED:A5:AE:0E:5F:38:7C:98:5F
X509v3 Authority Key Identifier:
keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0b:55:dc:f1:60:84:83:fc:64:64:08:01:c4:a3:42:5c:3d:
fa:63:a7:6f:c0:89:03:08:d9:ed:1c:b2:07:9d:1f:b4:34:85:
0c:71:dc:6e:54:44:ca:b8:9b:cf:6a:dd:9b:83:0a:53:98:d0:
cc:c2:9e:5c:28:f8:77:3a:10:f3:db:e0:bc:d7:ce:09:b9:4d:
ae:7d:90:91:d5:bf:ff:1e:62:dd:f2:33:a6:9d:e2:c6:6b:e6:
c8:b7:1b:22:1a:c6:43:81:4d:0a:66:39:8e:05:84:18:bd:3e:
68:5e:5c:3c:33:35:3c:30:7d:b1:59:b9:23:de:87:e9:f6:38:
51:0c:5f:45:b2:ec:54:22:83:97:dc:e0:ab:a6:8b:e4:d6:66:
a0:73:11:4e:34:8e:22:61:4b:ad:02:07:cb:90:91:73:ef:5f:
80:92:90:6e:cf:54:75:7b:4e:4e:2d:6d:4f:71:6d:d2:9d:43:
15:7d:70:aa:64:14:06:9f:43:20:5a:6d:db:41:ed:ef:62:8b:
48:ca:8f:18:85:0d:11:bc:d4:a3:61:d9:8a:0c:6f:be:b5:82:
70:8a:18:ad:43:5b:dc:5b:e7:69:5c:e8:39:d2:95:ab:ca:49:
6a:03:46:d6:0f:e6:ff:67:a2:c9:57:b7:0c:e9:dd:ff:80:3d:
e0:4c:19:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:23:53 2025 by rpki-client