Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
File: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft (raw, json)
Hash identifier: VTk1XwCtlvcrU747yZyk+FISbK3oJenOifRkqD/829M=
Subject key identifier: FE:E7:4C:6C:F5:69:B7:78:4C:07:B6:51:5D:08:11:D3:27:C0:E4:2F
Authority key identifier: 0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
Certificate issuer: /CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Certificate serial: 019677C368940F42E060CDB20F9D22FBAD10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
Manifest number: 03CA
Signing time: Sun 27 Apr 2025 15:00:16 +0000
Manifest this update: Sun 27 Apr 2025 15:00:16 +0000
Manifest next update: Mon 28 Apr 2025 15:00:16 +0000
Files and hashes: 1: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl (hash: 6J/BLFtZeJYA4W8223p357LCzMLeXDHF6zLVWAvVzlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:68:94:0f:42:e0:60:cd:b2:0f:9d:22:fb:ad:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Validity
Not Before: Apr 27 15:00:16 2025 GMT
Not After : Apr 28 15:00:16 2025 GMT
Subject: CN=fee74c6cf569b7784c07b6515d0811d327c0e42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:9e:a4:59:13:06:20:ed:d5:55:91:74:42:
af:f2:b6:6e:44:e2:3d:43:19:c0:0b:d0:b5:fd:9a:
bc:d6:e4:99:52:81:ea:ad:2c:c6:79:11:2d:f2:15:
e2:27:65:2f:0f:25:f1:51:f9:fd:45:17:21:fa:b8:
0d:40:65:0a:d3:69:de:14:9e:0d:d5:80:e6:62:5c:
82:50:ab:a2:df:d1:d9:41:0a:26:4d:3f:6c:68:fe:
69:43:8e:c6:53:b2:37:da:a1:67:85:5a:8b:bc:97:
86:5a:30:1f:a4:be:0f:84:e2:a7:23:21:dc:65:28:
f6:2b:ec:d0:0f:3f:8e:c7:aa:c2:5f:11:78:11:60:
b7:a9:62:b5:be:3b:3c:4c:e2:ff:68:bb:2b:1c:fa:
e9:85:ef:bf:db:8a:8e:6b:84:3d:6b:8a:26:98:ae:
ab:00:23:91:a3:25:42:8e:fd:9c:b4:f7:c3:ce:bb:
58:1c:33:27:60:85:46:19:e4:98:04:3e:ee:aa:37:
08:aa:72:73:9c:a2:4b:94:3e:a1:fb:03:bb:40:94:
d8:1f:86:20:3d:0b:c1:72:98:ca:a0:60:f3:95:15:
09:0f:bd:a6:0c:45:a3:e3:52:2d:36:88:05:cd:f0:
5d:dc:df:b3:c0:1a:c8:d8:db:bd:69:49:24:f9:64:
66:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E7:4C:6C:F5:69:B7:78:4C:07:B6:51:5D:08:11:D3:27:C0:E4:2F
X509v3 Authority Key Identifier:
keyid:0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e7:92:75:1a:6c:ed:5c:41:7c:a1:7f:3b:ac:b6:47:29:42:
0e:64:8e:bb:65:0a:00:13:5b:55:29:0a:c2:4c:f4:8f:71:d8:
a1:e7:af:b7:9f:c5:15:3d:2b:30:e3:46:06:d5:2b:19:15:0f:
a0:da:40:10:65:1d:0d:ea:5d:41:2f:35:5d:62:3e:b2:ce:ed:
be:d2:bb:96:59:1e:25:dd:0f:e1:11:ef:95:54:80:cd:3a:64:
5a:a9:10:48:ca:86:1a:fc:21:0e:9c:20:ec:68:37:c8:c3:87:
4b:06:5b:6a:6c:0f:e6:6f:78:09:50:58:f5:da:d8:c4:2a:3b:
71:b3:d6:1b:c3:ef:75:8c:5c:75:7f:69:3f:63:c2:0c:27:dd:
9b:58:4c:c0:83:7b:c6:3b:ad:d4:eb:80:9c:ce:61:6c:74:dd:
ff:37:19:aa:dc:8a:b9:ac:4c:93:0a:45:c1:06:02:84:bb:1e:
a9:fb:a4:9e:ee:1e:98:bd:23:47:a4:69:4e:5b:f9:19:dc:62:
1b:7a:7c:17:07:cc:cd:c5:5d:26:16:1d:0d:1d:8e:24:30:a5:
33:e7:ee:22:ec:a1:74:63:ac:5d:e9:cd:ca:3a:1a:f0:f4:13:
1e:3f:96:0b:73:5f:c5:38:77:fa:39:78:ab:b3:e4:92:c1:82:
e7:00:7a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:54:40 2025 by rpki-client