Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
File: an0UIH91yLFYDbJ_defD_bH_hgw.mft (raw, json)
Hash identifier: f1G6A6xDyD/vR9O/Fqs0Z/KAbJpZjsz6I7m9zXOG1J8=
Subject key identifier: CD:BE:57:D8:BA:87:0C:F6:26:6E:60:61:A0:78:0F:90:39:DD:C3:DB
Authority key identifier: 6A:7D:14:20:7F:75:C8:B1:58:0D:B2:7F:75:E7:C3:FD:B1:FF:86:0C
Certificate issuer: /CN=6a7d14207f75c8b1580db27f75e7c3fdb1ff860c
Certificate serial: 019676B0F62350ABAB2BA58D3B5F7A861E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
Manifest number: 079E
Signing time: Sun 27 Apr 2025 10:00:30 +0000
Manifest this update: Sun 27 Apr 2025 10:00:30 +0000
Manifest next update: Mon 28 Apr 2025 10:00:30 +0000
Files and hashes: 1: an0UIH91yLFYDbJ_defD_bH_hgw.crl (hash: QNpfxkR+tZfJ0KdisH3m8ak5fSDRWnXw6v2S+TCFfC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:f6:23:50:ab:ab:2b:a5:8d:3b:5f:7a:86:1e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a7d14207f75c8b1580db27f75e7c3fdb1ff860c
Validity
Not Before: Apr 27 10:00:30 2025 GMT
Not After : Apr 28 10:00:30 2025 GMT
Subject: CN=cdbe57d8ba870cf6266e6061a0780f9039ddc3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:ad:d6:92:ab:6f:fb:d4:a9:59:63:fb:b1:
79:35:db:f0:19:de:9e:72:3a:0b:d9:d9:69:7d:80:
a7:8a:15:2b:35:fe:bd:70:f4:7c:5e:7d:8e:75:7c:
51:31:e1:b6:19:22:77:20:3e:c2:6f:65:71:a8:ac:
79:c4:1d:91:24:c0:2b:ea:2a:2e:e1:fa:12:ba:2c:
3b:32:14:bc:43:95:1c:b0:e6:49:d7:10:bf:ec:86:
f0:f6:ab:97:52:26:3b:f2:c5:e4:3b:6e:61:61:bd:
73:80:d0:d2:a2:7c:58:75:d1:47:19:29:b0:79:2f:
a9:c7:bb:ae:a1:77:05:02:d4:bb:17:68:b7:cb:35:
a5:ed:43:ac:71:51:88:54:90:72:15:5a:3f:60:91:
02:0f:7e:64:64:90:cf:59:50:c3:0a:11:5f:b0:f0:
bb:a7:6f:52:a6:67:64:af:c3:f1:da:30:c3:bf:7d:
04:50:21:cf:38:48:84:ba:b6:c5:0d:72:53:c6:1f:
8d:66:2d:99:4d:40:3a:9b:1d:7c:2e:97:15:2c:7d:
67:29:d5:8e:ed:06:6b:3c:81:05:d3:2d:5b:de:8f:
57:95:64:06:56:1b:2f:55:94:52:48:ac:0a:91:67:
e4:75:69:14:15:13:f3:68:46:47:a3:6d:f5:6e:51:
a3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BE:57:D8:BA:87:0C:F6:26:6E:60:61:A0:78:0F:90:39:DD:C3:DB
X509v3 Authority Key Identifier:
keyid:6A:7D:14:20:7F:75:C8:B1:58:0D:B2:7F:75:E7:C3:FD:B1:FF:86:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9e:30:00:ba:28:83:4a:e6:fc:1e:8c:ce:16:1f:88:6c:a7:
96:a7:45:3a:cd:ac:41:77:59:3d:fa:2a:3f:54:32:c0:15:5f:
86:48:31:7a:7d:ac:0f:9e:42:65:34:db:a7:b0:7a:03:56:a5:
7c:11:25:a1:54:61:a3:90:4b:86:d7:e3:e3:30:f8:49:51:cb:
ab:61:42:01:56:e4:aa:5d:df:f2:d5:0e:52:b4:6b:4f:59:98:
6e:3a:96:34:c9:c7:bb:97:cb:a0:04:b0:1f:b8:4e:b0:71:3f:
a8:3d:b0:1f:e9:b5:50:78:43:1c:87:10:66:ce:3a:b1:b2:f8:
9d:ec:35:3a:df:11:b4:9a:59:dc:ea:2b:45:ef:5a:46:37:00:
b3:dd:98:55:77:46:69:f2:ab:1b:7a:f3:6a:56:1d:e6:2b:3d:
6d:1d:47:7d:f6:43:e9:f3:52:c1:df:d3:16:48:7e:89:07:a0:
96:b4:02:e2:22:9c:f7:81:5e:97:94:41:ff:b4:37:ba:3f:7e:
22:e8:6a:7f:0b:77:10:9c:27:54:e5:8c:63:b4:b6:a7:a9:91:
75:0b:2a:f1:da:bd:2a:9f:1e:f8:4f:cc:60:f5:f9:8a:e3:1f:
54:d5:9c:fd:a9:dd:dd:f0:b5:fb:a9:6e:b1:fe:aa:eb:cd:db:
08:1c:eb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:29:40 2025 by rpki-client