Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
File: 639rU_mItXcyDvKJM4Cl6oJLauQ.mft (raw, json)
Hash identifier: 6KNSVHtMqyGICsZ6NnOtHbKggcbhBLGfFh0r02f7Q8s=
Subject key identifier: F6:36:36:C7:99:36:3A:5B:B7:27:7F:DA:99:FD:D9:FD:CF:D2:81:BA
Authority key identifier: EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
Certificate issuer: /CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Certificate serial: 019659145F967F530055C3B8A7DAB3D7D025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 16:00:29 +0000
Manifest this update: Mon 21 Apr 2025 16:00:29 +0000
Manifest next update: Tue 22 Apr 2025 16:00:29 +0000
Files and hashes: 1: 639rU_mItXcyDvKJM4Cl6oJLauQ.crl (hash: OMsGkKpiahmJwHcLS+KOkHwH1yjZbvn2NINtK3nr8Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:5f:96:7f:53:00:55:c3:b8:a7:da:b3:d7:d0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Validity
Not Before: Apr 21 16:00:29 2025 GMT
Not After : Apr 22 16:00:29 2025 GMT
Subject: CN=f63636c799363a5bb7277fda99fdd9fdcfd281ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cd:39:a6:95:e5:d7:3a:2d:d3:5c:7a:aa:c6:
b0:09:b7:a3:f0:b3:e5:c8:17:a4:52:37:17:f2:1c:
ea:88:c9:4a:23:0a:54:45:35:ff:36:f5:ef:23:fa:
72:9d:6f:c0:89:bb:9f:c2:da:80:af:26:a9:c7:77:
09:d0:43:67:97:5b:59:0a:e9:20:b7:e7:03:22:03:
01:62:b3:e7:1a:c4:a3:a8:65:3a:9a:68:a7:99:22:
26:99:d0:ac:d9:f0:7e:02:13:3a:af:8c:15:4e:6e:
67:76:d3:77:7d:5a:0f:85:dc:16:d3:9a:04:9c:6e:
ea:27:05:68:7a:e8:97:68:b1:df:70:c6:ce:ae:2b:
17:3d:87:67:48:3d:34:86:40:d1:2b:29:95:4b:8e:
12:bf:c4:ee:93:86:d7:30:6e:60:40:f3:b8:5c:e5:
c9:3d:8b:db:25:c5:5e:89:b5:3d:6d:56:da:5b:d4:
5b:01:e8:a6:f3:1c:e5:da:cd:73:27:dd:64:42:1e:
63:62:3a:f7:50:a1:ab:f6:8d:d8:cf:05:2d:3b:06:
d7:41:eb:d3:6d:07:c3:ab:dc:97:d2:71:4b:d5:5b:
4b:0b:0d:5d:64:6d:6d:a8:7e:72:2c:bc:9b:a8:17:
6e:d8:b8:c3:ef:2d:58:71:ac:db:3a:49:5e:76:53:
ac:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:36:36:C7:99:36:3A:5B:B7:27:7F:DA:99:FD:D9:FD:CF:D2:81:BA
X509v3 Authority Key Identifier:
keyid:EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6e:5f:fb:f2:19:af:f8:a5:d7:e1:44:df:c2:60:b4:16:d6:
b4:ec:c9:9d:3d:a3:37:f9:df:57:fb:91:44:08:d8:10:5a:65:
c0:70:7a:06:d4:f0:37:be:93:f8:86:62:db:9f:5a:5c:b5:2f:
08:04:ea:5d:4f:bd:07:d4:2f:b7:53:c6:e4:86:3e:2d:28:ac:
98:01:ac:d1:d8:14:d2:db:6b:05:74:60:c5:31:b3:99:28:0a:
ee:bb:b0:ac:83:ae:aa:be:9c:66:fd:b7:08:6d:03:27:06:bb:
ad:72:25:da:5c:65:6f:da:c7:c9:a5:bf:02:a1:32:87:d9:a6:
7d:6d:03:a3:3f:99:ce:2c:bb:43:6d:e3:2f:da:19:bc:58:87:
15:f0:5b:a3:92:30:cd:88:27:78:68:67:49:11:81:1c:27:75:
73:f7:c0:97:ae:12:8a:f4:9b:84:84:0c:6b:22:10:1e:b2:68:
1b:cf:57:9f:f1:fb:30:63:31:35:ff:22:15:13:2f:f7:08:0c:
4c:fe:ac:6e:46:f7:8a:71:22:a2:b5:01:ea:f3:8a:95:da:cf:
5a:c8:32:b8:13:21:5a:3c:19:80:9d:af:bd:32:d4:61:d3:7f:
3c:3b:fe:87:cc:9b:44:2c:59:05:45:72:79:84:b0:c9:79:de:
c6:81:c7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:08 2025 by rpki-client