Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier: KtP6Srll8tXf7MzgvQf/3Pm+8n6FtrYDMwdhrAvgmZg=
Subject key identifier: C2:95:23:55:2B:31:A2:6F:67:3A:49:72:A9:A7:F9:F0:B7:5C:63:BB
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer: /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial: 0196862421CACFD8AB000A3FE5987B678D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number: 1514
Signing time: Wed 30 Apr 2025 10:00:36 +0000
Manifest this update: Wed 30 Apr 2025 10:00:36 +0000
Manifest next update: Thu 01 May 2025 10:00:36 +0000
Files and hashes: 1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: ZkBykCtkZrDXrkOJQ6ZAm7DSNy0qzPZYMdJ4M4yl80U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:24:21:ca:cf:d8:ab:00:0a:3f:e5:98:7b:67:8d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Validity
Not Before: Apr 30 10:00:36 2025 GMT
Not After : May 1 10:00:36 2025 GMT
Subject: CN=c29523552b31a26f673a4972a9a7f9f0b75c63bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:c3:86:80:ac:c2:d9:7d:fb:3f:2f:6f:75:
f5:ec:a1:dc:dd:7e:8e:7d:e3:75:78:31:4f:37:86:
02:91:7d:12:2a:12:18:0c:26:3d:39:4d:bb:1e:d7:
8d:0f:ce:20:ee:fc:b8:66:45:48:88:7c:22:58:2a:
9d:19:4d:6c:81:1e:34:58:b2:2f:4a:51:d9:57:72:
2d:98:7a:a5:58:34:59:ac:ea:ec:32:03:48:20:a6:
10:ed:8a:15:8f:23:8b:21:e9:15:97:16:ca:32:bf:
25:fa:89:da:f9:0d:2e:b2:34:fe:da:7b:dd:42:a7:
8c:a4:d0:c9:bb:88:28:49:21:aa:0b:d3:39:79:6d:
4b:ee:63:ef:d7:2f:e5:6f:cc:e4:e8:30:dd:50:dc:
d1:85:dd:8f:35:83:d9:9c:e6:df:94:b1:4c:31:91:
ce:ec:57:83:70:9b:70:45:7d:88:b8:80:20:80:32:
b8:c7:e6:5f:66:d7:95:8d:cb:bc:8e:b6:46:09:57:
41:9f:7e:be:5a:82:f5:77:f0:e3:a0:00:22:05:79:
a1:9e:b3:f5:55:00:dd:36:56:df:c0:03:5d:83:18:
c0:90:56:cc:a6:04:a4:37:6f:c3:94:9f:a8:74:fc:
5e:d3:f0:c0:31:34:50:b9:3e:18:91:ce:83:ea:47:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:95:23:55:2B:31:A2:6F:67:3A:49:72:A9:A7:F9:F0:B7:5C:63:BB
X509v3 Authority Key Identifier:
keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d6:ab:d6:01:ef:94:ca:97:a7:b9:f7:68:33:e5:13:62:05:
d8:8d:29:50:f4:43:29:c2:5e:4e:5f:2c:0a:75:e5:3e:6a:b9:
17:ca:c4:4d:07:5d:da:f3:c1:7e:49:ea:b8:ee:38:ce:21:05:
e6:c3:86:54:6d:95:8a:b9:61:90:a8:f2:a2:c5:7b:e8:ba:33:
ab:99:e4:18:5c:e5:b2:42:fa:86:6a:1a:4d:ed:d7:42:29:80:
e4:17:3d:f2:90:84:5f:aa:7d:69:7e:cf:81:81:3a:47:79:64:
99:ae:22:23:09:13:97:68:14:2d:41:7b:c5:49:17:33:94:50:
cd:b2:78:9e:96:17:1c:a5:49:c7:2e:ba:39:8d:9a:0f:eb:a4:
a4:be:e4:9b:b0:98:47:88:e3:58:4d:ce:3a:4a:0f:10:00:e7:
a0:f3:89:50:f8:55:ce:4d:2f:87:a0:86:d2:62:8c:28:4b:a1:
74:69:bf:bd:87:e2:75:a5:92:b8:d7:a7:20:42:e1:bb:c6:85:
6b:32:ab:7d:04:03:9e:f1:a0:66:cf:bc:e5:c9:8e:ef:e0:52:
91:5e:43:f9:23:85:99:a7:be:39:a1:b1:df:c8:d8:16:51:86:
20:ae:24:08:2e:08:a9:42:a0:b6:81:e1:45:a6:d5:f1:3f:36:
ac:bc:02:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:38:02 2025 by rpki-client