Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
File: cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft (raw, json)
Hash identifier: lSEo0lfvkEBUsefPlxaYyXTAC3v3FcAt5PpYr47FjU8=
Subject key identifier: 47:6C:DB:F8:99:67:4C:D3:F0:F1:24:FC:2E:6D:CE:C9:43:2A:6C:74
Authority key identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
Certificate issuer: /CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Certificate serial: 0196789F53F170B42DB8FE0A9FF3FB2B393A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
Manifest number: 05E1
Signing time: Sun 27 Apr 2025 19:00:29 +0000
Manifest this update: Sun 27 Apr 2025 19:00:29 +0000
Manifest next update: Mon 28 Apr 2025 19:00:29 +0000
Files and hashes: 1: cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl (hash: ZsLYP77C2OhSNKS7YmdmrUmjXPG4EaJkn28vwPoxYIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:53:f1:70:b4:2d:b8:fe:0a:9f:f3:fb:2b:39:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Validity
Not Before: Apr 27 19:00:29 2025 GMT
Not After : Apr 28 19:00:29 2025 GMT
Subject: CN=476cdbf899674cd3f0f124fc2e6dcec9432a6c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:df:fa:ef:d7:64:5c:be:a6:61:9f:89:7e:
20:fe:11:89:d7:79:ec:b1:74:eb:50:b7:1b:5b:1d:
aa:ce:c5:ce:b9:77:b1:53:e0:2c:1a:73:78:c2:3b:
ea:6d:12:32:b4:52:c2:2d:fd:d8:d5:d1:7d:38:b0:
5f:8b:82:5a:01:b5:f3:43:48:59:39:8f:92:2c:3e:
a4:4a:06:97:69:5b:77:d9:23:3c:16:37:1b:1e:2e:
eb:38:84:b3:c7:59:29:f7:5c:56:2c:9e:a0:57:60:
eb:3a:95:50:a3:b7:cf:aa:00:8d:8e:c8:86:44:1b:
47:e9:c3:29:41:a8:3b:6a:7d:37:ef:ca:c7:34:6f:
80:bf:05:84:e8:e9:7d:b9:3c:1d:a8:c7:86:6d:5b:
10:86:7a:26:42:a5:8c:41:7c:85:11:cc:3b:1d:15:
21:ad:36:c8:c6:6d:f8:41:7a:86:e5:c1:fc:8c:3a:
bd:a8:62:21:c5:df:b4:d8:84:90:7d:73:a6:85:7e:
14:aa:35:33:aa:ad:f2:2c:0d:62:fd:ae:aa:88:c4:
14:32:cb:55:29:fb:5a:f6:73:16:4a:36:8d:ff:1b:
b2:95:b0:63:ff:8f:4b:d6:06:2a:d1:c3:f6:06:ae:
20:9a:23:b4:85:e2:e3:91:a7:23:87:16:97:e8:0a:
44:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6C:DB:F8:99:67:4C:D3:F0:F1:24:FC:2E:6D:CE:C9:43:2A:6C:74
X509v3 Authority Key Identifier:
keyid:72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b3:e8:67:45:44:30:72:de:22:90:58:29:7b:e1:25:53:5e:
6d:22:c8:bf:be:ef:e7:8d:9e:0e:ed:5e:a6:1a:91:51:28:32:
ba:e8:aa:ad:74:bb:41:3b:1b:75:79:57:db:1d:13:0d:dc:06:
28:ae:b0:82:ca:5f:b5:08:bb:0a:8d:12:d1:4c:46:42:b7:e3:
88:70:68:cb:18:a2:93:64:f7:15:1f:bc:62:16:8d:b2:c8:c7:
d3:34:76:f1:64:89:cd:ac:b5:da:b5:fc:8d:9c:42:e1:cc:02:
4f:4b:57:dd:5c:08:45:19:32:d6:c9:a0:f1:e0:00:7b:8a:68:
6c:87:66:0f:46:4c:c2:65:0b:42:66:ba:d9:65:b4:83:b5:ed:
3e:a7:b7:33:9a:35:30:a3:fa:07:b8:df:7c:a2:54:1f:07:3a:
e6:e6:f3:5a:09:e2:e4:64:62:0e:34:57:65:80:18:93:ac:5a:
99:5e:4f:7f:9e:9b:e9:e1:e6:a5:ae:55:85:91:68:d1:77:7e:
a6:f1:25:47:1d:98:c9:6d:fd:2f:63:82:b3:e8:7c:fe:59:a4:
39:8a:2b:2d:b5:4a:67:42:c7:43:96:7a:e1:f3:7f:3f:9c:84:
9d:85:b3:16:99:15:76:97:02:86:43:57:0a:e4:82:b1:30:68:
07:2f:4d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:25:47 2025 by rpki-client