Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft
File: aluKc4anCgzU9gC-dYHe-JRHOkE.mft (raw, json)
Hash identifier: ZBSvGhEp4LlFDZA1KlWAJcWpX5bPXgFrII/czKfQnZw=
Subject key identifier: 78:E2:F3:F9:ED:57:C0:DB:22:97:3D:AB:89:6C:8B:1E:6F:5E:A4:05
Authority key identifier: 6A:5B:8A:73:86:A7:0A:0C:D4:F6:00:BE:75:81:DE:F8:94:47:3A:41
Certificate issuer: /CN=6a5b8a7386a70a0cd4f600be7581def894473a41
Certificate serial: 019657CB99CA00D18A023F1C3BC131E32FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aluKc4anCgzU9gC-dYHe-JRHOkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft
Manifest number: 061E
Signing time: Mon 21 Apr 2025 10:01:23 +0000
Manifest this update: Mon 21 Apr 2025 10:01:23 +0000
Manifest next update: Tue 22 Apr 2025 10:01:23 +0000
Files and hashes: 1: aluKc4anCgzU9gC-dYHe-JRHOkE.crl (hash: RcSV1QKllP/A2TNp1+z+9IBV/qn1VtG7GJsdSosJBiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aluKc4anCgzU9gC-dYHe-JRHOkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:99:ca:00:d1:8a:02:3f:1c:3b:c1:31:e3:2f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5b8a7386a70a0cd4f600be7581def894473a41
Validity
Not Before: Apr 21 10:01:23 2025 GMT
Not After : Apr 22 10:01:23 2025 GMT
Subject: CN=78e2f3f9ed57c0db22973dab896c8b1e6f5ea405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:4c:66:cf:f3:71:c0:65:e2:a1:c4:6f:80:
06:91:3d:6d:4e:e3:28:77:61:af:67:40:e0:a1:0d:
d5:0b:78:c8:d9:da:e2:cc:6b:03:b8:70:90:b7:16:
24:37:59:81:3b:31:91:67:dd:55:46:83:5a:53:97:
91:70:13:97:1e:be:8d:b7:df:7f:d7:d9:64:b7:ad:
54:63:cc:8a:0f:c2:a4:72:03:71:a7:f5:27:e7:c8:
0e:12:9f:4e:2c:43:38:e4:da:fe:0c:9d:10:84:2b:
14:91:dd:28:53:0b:28:f2:e4:53:c5:51:2b:e2:b0:
e3:54:0f:13:95:4c:1a:30:d7:00:3a:a5:db:e1:e9:
27:76:cf:bf:2e:ab:01:76:0c:21:2b:77:e1:62:35:
a9:49:79:75:8f:eb:1a:a3:9e:2e:ec:43:46:41:05:
f3:1f:f9:0e:46:fd:83:04:8c:f9:60:34:23:23:ad:
86:b9:f9:e8:08:5e:28:a6:91:63:c4:66:ad:ee:2e:
03:0d:27:12:b4:6e:7a:60:60:fd:47:53:bc:6d:34:
9b:48:7e:2f:a6:f4:2d:ee:34:0c:90:08:76:10:be:
a0:ad:1c:a6:ce:12:7d:1e:49:11:a3:b8:3d:57:c5:
fc:35:ae:c9:f8:85:c2:19:91:00:27:bc:96:b8:33:
4c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E2:F3:F9:ED:57:C0:DB:22:97:3D:AB:89:6C:8B:1E:6F:5E:A4:05
X509v3 Authority Key Identifier:
keyid:6A:5B:8A:73:86:A7:0A:0C:D4:F6:00:BE:75:81:DE:F8:94:47:3A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aluKc4anCgzU9gC-dYHe-JRHOkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cc:5b:60:6c:97:ae:5b:1b:1b:6e:5b:76:08:52:f2:36:e0:
5f:7b:1a:12:e1:5d:f8:ea:bb:c1:04:f5:6f:c2:7c:b1:ec:6d:
af:90:e8:38:96:13:57:77:4b:e0:64:8d:07:e7:34:60:01:61:
11:7e:e6:66:fe:bc:03:6b:01:aa:3d:76:93:69:9b:67:fc:db:
aa:e7:3c:ab:55:71:19:8b:e0:52:e8:cc:79:ab:15:a5:85:ac:
71:0c:c8:c1:eb:43:1f:a6:7b:f7:9b:e9:9a:90:63:61:43:e8:
4d:f7:ea:44:c6:dc:bc:64:4d:3a:67:40:e6:21:85:5b:36:31:
f1:25:47:a0:02:59:17:9b:de:a4:62:80:73:51:d9:21:db:df:
c1:0f:18:a5:dc:bc:29:47:a2:d0:4a:37:c8:df:55:fa:4e:ac:
fa:0b:d7:c3:c3:21:f3:5e:8f:2b:a7:50:e0:3e:ac:41:67:f9:
8d:1c:b0:13:21:c2:ca:1a:df:1b:f4:00:54:ad:ab:d6:21:ca:
5b:28:75:50:a5:ae:c0:82:60:4f:ea:6e:3e:46:a8:b3:7c:28:
1e:7a:18:5e:3d:b6:3e:02:24:c4:e0:31:5d:71:5e:7d:5c:18:
d4:80:31:f9:81:95:4a:40:71:df:b8:c1:e2:6a:c7:c6:15:a8:
19:e2:e3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:31 2025 by rpki-client