Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
File: Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft (raw, json)
Hash identifier: BlqIzz6nmw60sYvVfLHXEk5orMPD2j6jKq9Twh6qWrQ=
Subject key identifier: 90:DB:D1:57:00:46:05:E6:B5:90:59:A9:65:98:6C:F0:79:0B:77:62
Authority key identifier: 0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
Certificate issuer: /CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Certificate serial: 01967B696750EE736AAE448BAF074777CF3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 08:00:27 +0000
Manifest this update: Mon 28 Apr 2025 08:00:27 +0000
Manifest next update: Tue 29 Apr 2025 08:00:27 +0000
Files and hashes: 1: Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl (hash: VpgArZFEQ6b2p7w25MWp5z3V1LPp2TSIPBRvhfk9Wew=)
2: oMIi1pEOv1jeJYH_D8-bsx7eN14.roa (hash: L6yUeA60s1oezRJ3/Hwo53eHZ4mzV9eSXG/AVf/FB4E=)
3: ylHfNJxivzSDEST10fWDem7vKnQ.roa (hash: A5nWEbRO5hkEAdJU6Q2r7yPo+a47nvfcEeJhbXc7xME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:67:50:ee:73:6a:ae:44:8b:af:07:47:77:cf:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Validity
Not Before: Apr 28 08:00:27 2025 GMT
Not After : Apr 29 08:00:27 2025 GMT
Subject: CN=90dbd157004605e6b59059a965986cf0790b7762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:98:77:48:67:bc:83:9b:29:1f:4b:2f:c1:ea:
d7:4c:b8:05:f9:b5:6a:90:2d:29:cc:31:85:a4:1a:
6c:79:0c:fd:a8:99:82:fb:4a:60:ba:6c:8b:c0:27:
a6:3c:46:4f:8d:d8:2b:53:55:9f:0a:d6:f3:e7:e0:
8d:cd:37:ff:f1:40:ea:5c:d9:94:ce:48:38:2e:f7:
a9:05:d2:16:96:8a:c9:80:b1:10:a9:be:f0:2a:b7:
2d:e0:e6:04:cf:3b:83:20:2e:be:dd:98:81:7d:34:
ec:63:a7:36:9c:e1:fe:ef:cf:4e:4f:ea:95:2b:67:
1e:c5:9a:2d:78:3e:bd:72:73:3e:ce:84:0c:49:63:
0b:6d:33:35:d3:4c:f6:2c:18:ff:ee:92:2a:8d:42:
9b:ec:b5:0b:2e:11:88:88:7e:22:e3:88:fa:42:d0:
14:be:5d:98:e6:76:13:95:dc:a1:4b:da:94:f9:f9:
97:4f:86:1d:4d:81:1f:07:59:12:1d:a1:09:57:c1:
db:e6:30:98:e6:f4:f5:69:69:da:b9:1f:69:69:f1:
9d:42:e8:b9:e1:f3:c9:d1:f3:fa:3e:5e:5e:a2:ba:
09:d1:00:5a:a7:e1:be:d7:d8:48:18:5d:3e:aa:ab:
73:1b:14:67:15:96:45:41:a8:88:36:ab:60:f4:43:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DB:D1:57:00:46:05:E6:B5:90:59:A9:65:98:6C:F0:79:0B:77:62
X509v3 Authority Key Identifier:
keyid:0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f9:82:6b:c9:ef:2f:b2:8a:08:9b:50:c6:55:3f:b6:af:2f:
d9:11:f2:6b:e8:43:64:2d:61:e6:d6:79:0f:2f:d7:8f:eb:8f:
37:4c:40:79:a3:59:2e:8a:05:d2:cf:f7:76:ad:21:84:29:fa:
8b:ed:6e:f1:33:40:bd:fd:b0:66:fa:4c:18:2b:b9:0e:8d:8e:
d1:23:9e:61:43:1d:e2:1e:13:4b:06:8b:3d:ab:10:25:a5:1f:
2c:5c:29:ae:79:e0:99:03:4a:05:bf:ee:d1:c0:33:3b:f8:81:
73:65:d8:6f:8c:76:7e:1e:97:8a:a9:f3:1d:7a:70:6d:85:af:
af:aa:b4:32:bd:69:95:56:d2:35:1f:33:8e:f2:09:00:8c:87:
34:f2:72:fa:a3:d4:b6:c6:df:f3:9e:08:0d:74:55:94:c0:f6:
a7:b0:b9:17:a9:08:b6:d0:72:77:34:57:f7:a3:b5:80:e0:6e:
1c:9e:48:80:b0:47:0a:a3:4c:ca:2c:73:ab:c3:2f:a5:a2:70:
26:a9:9c:e0:e1:59:29:ff:dd:e4:ae:5b:3f:7f:c3:48:a5:85:
34:ad:ea:92:f0:7f:84:b5:9e:50:28:c9:3a:44:ec:7e:c3:23:
22:18:34:8a:da:8b:c3:e5:c4:e7:d4:7f:98:87:d0:4f:53:3f:
ba:30:c9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:56:45 2025 by rpki-client