Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
File: avUBb_idoMjK_uIV72JBwwvJMAM.mft (raw, json)
Hash identifier: +N7VS568ugjs2h36ixq7ldHF/8ikRNhIPOIlL+VUao0=
Subject key identifier: C3:B5:88:EC:D2:93:65:3E:81:0E:17:BC:B6:32:E0:D2:AC:21:84:C5
Authority key identifier: 6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03
Certificate issuer: /CN=6af5016ff89da0c8cafee215ef6241c30bc93003
Certificate serial: 019674C2544CBAA157F5A07D65BB908AB8E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
Manifest number: 0BEE
Signing time: Sun 27 Apr 2025 01:00:14 +0000
Manifest this update: Sun 27 Apr 2025 01:00:14 +0000
Manifest next update: Mon 28 Apr 2025 01:00:14 +0000
Files and hashes: 1: avUBb_idoMjK_uIV72JBwwvJMAM.crl (hash: LxsoA5KYW51YvCDgTSSiwXQr1fzpmzwgM0XbJuZaRg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:54:4c:ba:a1:57:f5:a0:7d:65:bb:90:8a:b8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af5016ff89da0c8cafee215ef6241c30bc93003
Validity
Not Before: Apr 27 01:00:14 2025 GMT
Not After : Apr 28 01:00:14 2025 GMT
Subject: CN=c3b588ecd293653e810e17bcb632e0d2ac2184c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:75:4f:b9:80:d9:dd:a8:d4:93:59:a3:fd:
94:65:82:36:a4:74:2f:69:83:c5:ac:ba:ea:a7:a2:
63:f6:b6:d0:0b:cb:9c:75:d3:fe:29:d2:61:7d:e3:
f4:6b:76:6f:57:ff:74:50:3a:66:d4:4c:4d:a1:8a:
9c:e6:90:6a:58:b5:67:d3:e5:96:41:ba:1f:43:46:
fc:fc:f6:34:37:bb:83:72:f2:0a:70:f1:22:41:0a:
ed:7c:2f:36:78:fd:ee:12:97:5a:c7:d7:39:1e:19:
7c:36:51:3c:98:10:49:7e:ed:c1:9c:90:fd:97:cd:
8f:2b:a4:43:6b:92:ed:71:92:bc:f8:94:7c:11:41:
da:45:65:3d:e2:ad:59:13:3f:42:ad:09:1b:2d:42:
0e:6e:6e:61:e9:17:33:bf:e9:66:85:2e:c2:de:b1:
fc:2a:99:7c:62:cd:2e:4d:93:69:e4:17:47:2a:14:
3d:96:ac:0a:d0:e4:2d:91:73:60:47:8d:04:2f:fd:
5d:7a:96:c9:62:30:e9:6f:e9:9d:41:e6:a7:41:3f:
14:63:02:a0:84:16:db:ae:2a:5e:89:a6:4f:07:a2:
e5:e7:f1:dd:5a:68:72:1a:96:58:26:f0:14:43:ba:
5f:44:ed:5f:56:8b:b7:96:38:86:42:1e:5f:bb:01:
56:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B5:88:EC:D2:93:65:3E:81:0E:17:BC:B6:32:E0:D2:AC:21:84:C5
X509v3 Authority Key Identifier:
keyid:6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d4:f1:4f:35:8d:5e:f3:9f:78:bc:c1:c0:1a:9d:1f:00:05:
fb:3f:49:0d:00:a5:61:32:e7:c6:1f:74:a9:14:2d:76:8e:e6:
00:1d:98:33:83:e0:72:99:01:b2:00:81:70:1b:03:46:cf:45:
b2:38:72:a0:fa:b9:c4:44:fc:dc:4a:c2:d1:1e:9e:d2:7b:6c:
13:05:62:21:91:8b:dc:59:3e:2e:ef:8c:c8:c9:b9:57:88:9b:
2d:db:85:c9:4a:f6:2a:30:37:03:d1:8c:87:8a:2a:af:74:cb:
6e:26:b4:22:82:9a:5b:f4:79:40:d9:db:4f:10:0b:37:ee:c8:
b5:4f:fc:d5:91:2e:6d:60:c5:67:79:3a:01:2f:c9:71:cb:2d:
32:5a:57:d2:dc:9e:95:24:ad:37:c1:f0:f8:5e:f8:62:36:a2:
6f:d6:f4:da:68:ea:61:1e:62:04:32:c6:95:90:a6:85:a5:67:
00:91:9d:7d:d1:08:89:cc:52:d6:6e:07:5f:5f:94:5f:33:8a:
1f:11:43:5c:cb:54:28:b8:92:12:98:f9:a2:42:67:fe:04:37:
eb:02:a3:cb:72:f8:c2:f7:d8:a0:61:18:e4:68:68:17:a1:9e:
c7:9e:e8:98:ed:59:b1:d3:bd:48:e6:27:36:f9:5b:a7:d9:4b:
51:73:a0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:06:04 2025 by rpki-client