Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
File: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft (raw, json)
Hash identifier: sTUm0WqaX6Q6C3EUAtzs7W/XCQuRUDDdhngL2/7Sr0A=
Subject key identifier: 40:D3:78:FF:91:B6:26:5C:57:75:B5:DF:91:07:C8:A4:A9:7A:08:17
Authority key identifier: 2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
Certificate issuer: /CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Certificate serial: 0196561369BB4C2FDAC9B9829F94052E19A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
Manifest number: 0C38
Signing time: Mon 21 Apr 2025 02:00:34 +0000
Manifest this update: Mon 21 Apr 2025 02:00:34 +0000
Manifest next update: Tue 22 Apr 2025 02:00:34 +0000
Files and hashes: 1: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl (hash: S6AeQr3QW7/vL7YtlL2n1zuI5uMULhzdz+3tIkuZcyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:69:bb:4c:2f:da:c9:b9:82:9f:94:05:2e:19:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Validity
Not Before: Apr 21 02:00:34 2025 GMT
Not After : Apr 22 02:00:34 2025 GMT
Subject: CN=40d378ff91b6265c5775b5df9107c8a4a97a0817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:87:9a:2c:26:8c:92:5c:52:8a:f6:aa:c9:
8f:1a:39:17:c3:9c:60:2b:bc:bc:b6:66:20:45:38:
e6:b7:4a:e3:4b:8d:e5:14:a3:c9:ec:f9:75:e0:40:
b5:69:cd:96:15:fb:29:a4:f7:24:d8:a4:3f:25:51:
ad:4d:47:44:e4:db:a4:1c:7f:3a:f1:be:04:a1:74:
0c:85:cf:0b:fb:ae:27:47:6d:4f:7f:f7:09:4e:4f:
b0:b1:cc:a8:5a:0f:28:46:a7:87:4f:2b:50:6e:49:
97:84:3f:a4:d9:1b:ce:e4:ec:6f:ee:07:4d:e2:fe:
0a:b4:0f:7c:59:d5:8e:50:78:47:3e:d0:26:85:73:
9f:b4:b1:05:a2:a8:e9:1f:e2:89:64:76:3c:9f:f3:
80:f5:b0:75:43:a9:2a:93:52:12:86:66:5c:ed:ef:
d8:64:44:b0:bc:68:b4:d6:43:ae:4f:39:4a:88:d6:
70:f9:82:61:a6:f7:ec:3b:e2:a9:d2:99:e6:b1:1e:
d7:31:80:36:c1:0b:69:94:9d:3f:ff:cc:f2:af:73:
6a:a8:38:7b:93:f1:03:ab:a1:63:01:d1:04:e5:09:
b3:f0:e6:1f:52:99:5b:ff:67:31:4d:45:37:0c:58:
b7:c2:bc:e6:3d:f5:ff:01:0e:82:47:11:05:14:d4:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D3:78:FF:91:B6:26:5C:57:75:B5:DF:91:07:C8:A4:A9:7A:08:17
X509v3 Authority Key Identifier:
keyid:2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:88:f3:f3:e9:c4:1a:52:77:01:0f:a6:de:71:61:62:cd:6f:
bf:76:4a:3c:cb:4e:84:40:bf:cd:aa:d4:d2:33:18:d5:37:2d:
fa:81:25:c0:09:d7:4d:d6:25:d9:65:5f:0b:09:83:5e:c4:b6:
a9:87:0e:3b:36:e9:f4:06:91:49:a4:fd:63:3c:b5:d9:f3:4c:
71:73:2d:45:66:4d:59:1c:f5:98:e1:6c:27:61:6c:b8:2e:1d:
2f:a1:82:7a:5c:d6:1e:50:6f:6d:c8:25:f8:51:e6:7f:7d:4c:
12:68:7f:4f:2d:de:9b:33:8b:c2:1b:00:cb:1f:4a:ab:4c:9e:
30:cd:2a:a3:03:02:8b:e5:2e:b0:7a:ae:fe:77:bf:d9:ef:17:
ab:79:23:65:e9:f4:67:93:ec:6f:e5:2e:28:2a:ce:60:a3:a6:
01:06:4f:f6:fc:e5:2e:0a:aa:c0:ae:1f:e2:c7:e9:a7:ec:c8:
f2:5b:0a:b4:97:1c:78:f4:ad:23:ff:20:1f:ba:a3:b4:be:42:
59:00:0f:d6:73:73:9e:43:3e:b1:cc:77:cb:83:4c:2a:46:01:
78:26:6b:ea:ce:4d:e7:c3:54:61:87:51:14:5d:b9:28:d6:95:
f6:4c:5f:38:62:05:21:50:77:7d:31:24:90:1d:53:b9:39:df:
2c:45:ce:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:49:43 2025 by rpki-client