Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
File: ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft (raw, json)
Hash identifier: G5W8LEOecIuT/HQtYAyMCO16IGj/aojwQ8WhOwaQxaA=
Subject key identifier: D5:59:A4:7B:0B:A5:D6:E6:DB:EF:23:5A:D4:6F:59:EF:D9:FF:16:D3
Authority key identifier: 6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E
Certificate issuer: /CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
Certificate serial: 01965E717AB2FF84992B10C4FC767BD990E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
Manifest number: 0101
Signing time: Tue 22 Apr 2025 17:00:17 +0000
Manifest this update: Tue 22 Apr 2025 17:00:17 +0000
Manifest next update: Wed 23 Apr 2025 17:00:17 +0000
Files and hashes: 1: ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl (hash: wNjyRKDKQQY1MX6MceCIGKfqKcfe/fj9qkTCteJ/39Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 17:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:71:7a:b2:ff:84:99:2b:10:c4:fc:76:7b:d9:90:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
Validity
Not Before: Apr 22 17:00:17 2025 GMT
Not After : Apr 23 17:00:17 2025 GMT
Subject: CN=d559a47b0ba5d6e6dbef235ad46f59efd9ff16d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ca:25:29:36:9b:54:4a:b2:58:cf:2b:7f:25:
5f:60:73:2b:5c:c8:cb:a9:89:6b:52:2a:74:ff:f2:
50:31:72:5c:b6:5a:49:b5:ab:15:d1:e0:08:fa:19:
00:e0:6a:00:08:51:35:21:85:bd:d1:c3:55:5d:6c:
9f:3a:e2:d5:23:b3:44:bf:2c:44:26:95:68:23:2a:
79:5e:c9:8f:d6:e9:92:2e:a0:ab:22:91:fa:be:23:
34:ec:1a:33:a2:45:0f:ae:6a:93:b8:98:12:f8:eb:
3b:29:d2:df:c1:0b:e0:d0:69:f6:b8:e8:54:f0:a2:
da:80:96:c3:30:e7:86:b8:4e:b7:23:d9:fa:25:96:
25:78:d3:67:e1:36:20:52:3d:b4:71:03:02:3b:68:
6d:ab:c3:b1:f5:90:53:a4:28:03:b0:ee:d1:3c:a5:
05:51:a8:79:3a:69:9e:4a:fc:9e:a8:20:eb:a4:44:
a5:ab:24:18:a5:87:aa:04:59:72:4e:1e:20:0b:03:
cd:b5:c6:78:a6:72:ac:c0:88:48:c8:25:b2:55:e7:
49:88:c8:ae:38:11:3d:ae:06:c2:a9:3d:3e:8f:1c:
7d:e8:4a:74:a6:18:04:e5:11:72:30:d5:6f:e0:65:
89:cb:fd:ed:cc:9b:3c:1c:4a:7b:48:d9:0e:5a:4b:
9a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:59:A4:7B:0B:A5:D6:E6:DB:EF:23:5A:D4:6F:59:EF:D9:FF:16:D3
X509v3 Authority Key Identifier:
keyid:6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8f:d6:44:28:c4:a0:02:9a:db:05:4e:b4:e2:c8:30:bd:3a:
af:79:46:80:ee:e2:b3:bc:bf:c0:9b:28:2c:3e:88:bd:d4:bf:
08:d5:9f:e9:77:2f:b8:e4:6a:0f:99:d3:91:b3:ac:dc:39:1f:
dd:92:03:df:2d:87:30:50:d2:2d:69:41:ae:f0:83:4b:73:6e:
1e:32:d8:8d:44:2b:af:06:78:e4:6c:3f:47:b8:71:02:ce:a5:
9f:bb:c2:73:2d:01:d8:ba:f5:c4:12:06:81:ed:39:ef:4b:6c:
e9:35:24:f2:4a:c7:a2:a3:16:e8:ae:c5:83:b9:15:68:08:df:
de:42:1a:24:4d:eb:64:b8:fe:c6:2b:4f:0a:6f:ce:b7:98:af:
dd:bf:6b:0d:12:ed:86:f0:36:aa:82:80:79:94:12:a7:99:0b:
56:72:00:82:fe:a1:18:fb:bf:16:7a:53:7f:48:bc:a1:04:e7:
86:2a:7d:75:1c:af:5c:f9:98:0b:b9:3b:94:33:09:c4:4e:73:
ba:1b:54:6f:64:2a:38:ff:22:0b:0c:89:3a:ad:db:19:c9:02:
29:a3:a9:38:cf:3b:ec:53:f9:d7:92:54:25:cc:56:34:6a:66:
d5:7b:b2:e0:6a:51:8f:a9:57:90:88:fd:7a:3f:6d:ba:f1:f8:
35:f9:62:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:29:34 2025 by rpki-client