Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
File: afjrNm_GyKCb-xQPFQX57GddQuQ.mft (raw, json)
Hash identifier: 7qZoBQf194jHkNvV/6XY50BgVeGfC8nB6uEwbNKwWBw=
Subject key identifier: 70:84:EC:FF:61:70:FC:1D:F1:1B:05:8D:F6:4A:DC:82:32:3E:81:5D
Authority key identifier: 69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
Certificate issuer: /CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Certificate serial: 01965537CB26CFD97DD8675D16D0598167D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
Manifest number: 07D2
Signing time: Sun 20 Apr 2025 22:00:41 +0000
Manifest this update: Sun 20 Apr 2025 22:00:41 +0000
Manifest next update: Mon 21 Apr 2025 22:00:41 +0000
Files and hashes: 1: afjrNm_GyKCb-xQPFQX57GddQuQ.crl (hash: ihAY09tauiOCoeKQKqhAhfuFvLzohd9oqzo3lEpCi1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:cb:26:cf:d9:7d:d8:67:5d:16:d0:59:81:67:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Validity
Not Before: Apr 20 22:00:41 2025 GMT
Not After : Apr 21 22:00:41 2025 GMT
Subject: CN=7084ecff6170fc1df11b058df64adc82323e815d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c6:2a:5c:23:95:ea:5c:30:83:ea:b6:8e:4c:
ac:d4:7f:dd:d5:bd:38:1f:98:25:30:85:a5:dd:14:
c9:64:69:a3:cb:70:da:45:c8:b8:40:5e:82:07:00:
07:6c:9b:6f:61:70:4f:03:0b:3e:d2:48:a4:c8:5b:
55:23:50:a9:60:94:cd:46:63:2a:c1:b9:e6:31:67:
14:54:98:2d:51:0d:be:3c:1e:14:58:4b:98:75:da:
ea:8c:1c:07:13:06:45:b7:9e:f3:8a:27:b5:af:4a:
70:25:dd:18:c2:27:c7:e0:b2:09:e5:10:4e:a1:5d:
cc:67:ff:f1:3c:fd:4a:da:12:31:bf:56:27:12:03:
56:27:ce:63:93:5c:73:b2:c7:0d:93:da:47:04:59:
63:fe:6b:2c:c1:d7:f8:64:05:bf:8a:30:87:90:7a:
35:a9:60:27:22:90:e7:3c:8b:dd:f5:06:cb:f2:47:
b0:d8:17:6a:b0:e5:d3:83:8e:f6:2b:39:d3:f6:7d:
ba:6c:db:a1:64:cd:14:a3:f4:86:00:fe:3b:22:02:
75:46:2c:e8:e7:3c:d2:da:7a:fe:75:e7:14:41:ab:
09:5e:19:9b:55:c0:40:47:75:0e:b3:3d:f3:5b:26:
54:38:84:fe:83:c2:d0:d2:82:2b:75:04:48:96:98:
a1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:84:EC:FF:61:70:FC:1D:F1:1B:05:8D:F6:4A:DC:82:32:3E:81:5D
X509v3 Authority Key Identifier:
keyid:69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ef:24:cf:88:43:29:6c:da:e0:71:4c:ca:c1:8e:ff:a0:0e:
15:fd:3d:de:5f:9b:d8:53:62:24:46:25:14:59:93:41:65:2e:
8d:f5:75:8c:14:db:e1:40:9f:ad:c2:9c:8b:f7:98:46:a5:04:
a4:f4:57:7a:47:fe:d7:b4:8c:61:75:93:78:97:88:9d:1e:c7:
65:d1:b6:53:f3:76:8e:2e:c7:ef:66:f5:fb:19:f5:45:d6:13:
e4:07:d8:62:2c:0a:03:2d:66:c2:5e:6b:c6:b8:5d:b5:b0:e0:
25:98:64:08:59:39:12:ed:31:b3:9b:d9:2c:61:d3:a9:85:8d:
d6:b4:b9:23:46:76:2a:61:f7:57:87:b2:f4:dd:6f:65:d2:f3:
e5:b1:52:f6:49:15:49:78:ba:9f:bc:d8:d9:3e:c0:c2:7e:7a:
d4:ef:4a:ed:f1:39:92:a9:dd:c0:33:92:7d:08:8a:53:58:c4:
bf:32:d4:61:e5:3a:fb:4b:d4:7f:b8:67:a6:49:47:ef:77:4c:
f3:69:4e:82:d1:50:b2:a2:da:84:f6:e4:05:9c:d9:f1:4c:a1:
2c:ee:e2:1e:43:58:f2:9f:d6:6d:0d:cc:a3:85:29:e5:d8:ce:
c1:f1:1e:c8:6c:e6:b9:a1:16:05:e9:90:f6:0c:d9:b0:a1:e8:
92:6b:7e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:13 2025 by rpki-client