Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
File: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft (raw, json)
Hash identifier: czDfEl4/Ey9o5TN0Js5orAf5d/tEHXl8kA8V39RpfLk=
Subject key identifier: F7:F2:C8:9A:A1:79:1F:D1:1E:61:E7:30:DD:74:53:C6:95:B8:2A:13
Authority key identifier: E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
Certificate issuer: /CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Certificate serial: 01967679E20F9769016029BAA6616A728255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
Manifest number: 07C5
Signing time: Sun 27 Apr 2025 09:00:21 +0000
Manifest this update: Sun 27 Apr 2025 09:00:21 +0000
Manifest next update: Mon 28 Apr 2025 09:00:21 +0000
Files and hashes: 1: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl (hash: OIR83Rc/1ZvqqqLPuC17shNNDFGKmPfVpnXgTPZiOgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:e2:0f:97:69:01:60:29:ba:a6:61:6a:72:82:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Validity
Not Before: Apr 27 09:00:21 2025 GMT
Not After : Apr 28 09:00:21 2025 GMT
Subject: CN=f7f2c89aa1791fd11e61e730dd7453c695b82a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:0a:a0:c2:83:77:5c:f2:ea:b7:00:64:93:
d1:1c:81:27:12:ee:c3:7a:15:ef:66:f3:75:0d:60:
7a:b3:7a:ee:d5:a8:76:b3:f5:cf:34:86:b9:df:af:
29:40:91:81:5f:09:df:6c:ac:bc:57:c4:07:26:07:
9f:39:51:5c:7c:c3:19:62:10:dc:c8:98:aa:5a:31:
f4:23:63:af:50:23:fb:e1:5d:53:70:d1:15:58:0b:
31:c3:87:f5:8c:ae:49:02:1b:27:7f:f2:23:b3:5a:
76:7d:dd:5b:6f:64:db:1e:ee:16:01:f4:19:6c:4d:
c1:4b:af:00:b4:a8:dc:15:6c:c1:1d:a5:f1:ff:38:
82:52:8b:29:c6:bb:5a:cb:49:f7:34:30:22:bf:d4:
73:c4:c9:5f:b1:86:6a:fb:aa:c4:0b:47:d4:0f:4a:
40:6b:a1:67:af:21:5b:c1:14:5b:e4:7f:5a:9a:80:
b5:77:7f:db:66:c3:97:f0:1f:5b:06:2e:c8:54:f5:
4c:c0:7d:18:10:6e:66:78:4f:a9:06:f8:5a:a8:b2:
d7:c4:cb:2a:97:5e:10:6f:1a:3f:91:b9:77:38:bf:
da:09:4c:f4:5d:91:87:38:3f:e2:8a:88:53:ad:f3:
ac:79:48:3b:c4:44:df:94:08:c6:82:4c:cd:1b:c4:
32:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F2:C8:9A:A1:79:1F:D1:1E:61:E7:30:DD:74:53:C6:95:B8:2A:13
X509v3 Authority Key Identifier:
keyid:E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:89:74:7f:dc:f3:5c:ab:75:62:1a:4c:e0:d2:6a:34:ce:3d:
dc:59:65:00:8a:f8:48:53:5b:cc:97:3f:f0:e3:ed:d0:ec:22:
6e:b7:87:5c:92:d7:d4:c1:aa:7c:d7:0d:ed:33:4a:34:ef:3f:
01:3c:7c:82:80:51:b6:9f:d3:20:8c:34:53:ee:7d:db:15:45:
90:f0:40:19:8b:bc:0d:40:76:60:30:ca:e2:e4:6a:a8:27:b8:
30:69:e1:92:a6:36:7a:9f:a9:76:48:ed:13:7b:a9:97:76:37:
05:86:49:4f:de:6c:dd:6d:82:d8:d9:41:d7:d2:69:94:9c:2f:
0d:ae:db:33:e8:04:31:da:e9:9b:e0:ba:42:36:4b:11:7e:48:
e6:9b:a6:2b:b5:2f:90:29:93:e8:76:76:da:03:51:3b:d1:16:
5c:95:da:14:9a:0b:df:c6:84:15:5a:f1:67:74:df:26:df:97:
fd:76:01:dc:d9:82:85:5a:fb:d1:99:fe:57:45:63:63:00:9f:
6a:0c:eb:e6:4e:15:fa:cb:d6:33:63:af:d8:74:9e:5d:45:05:
ac:a7:37:a6:e7:53:89:f6:af:14:4c:db:89:9e:78:70:6b:fd:
23:5f:8c:b6:12:0f:f6:40:8e:17:d9:46:be:a0:ee:f7:81:e1:
81:1b:65:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:55:30 2025 by rpki-client