Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
File: sWUjiWNgP2LB2SiRbtwbOacuOm4.mft (raw, json)
Hash identifier: fZcBPLiwajzgBio36VUTQvREuPpSYiERBxF+EaC2d/4=
Subject key identifier: 03:56:3D:A7:75:BE:29:F1:46:E5:D1:48:1B:E8:EF:93:AC:85:FC:4C
Authority key identifier: B1:65:23:89:63:60:3F:62:C1:D9:28:91:6E:DC:1B:39:A7:2E:3A:6E
Certificate issuer: /CN=b165238963603f62c1d928916edc1b39a72e3a6e
Certificate serial: 01965492C311E5BCDCB75FE50838F98D4E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
Manifest number: 0157
Signing time: Sun 20 Apr 2025 19:00:26 +0000
Manifest this update: Sun 20 Apr 2025 19:00:26 +0000
Manifest next update: Mon 21 Apr 2025 19:00:26 +0000
Files and hashes: 1: sWUjiWNgP2LB2SiRbtwbOacuOm4.crl (hash: FAXutn4iSopk1nBDcr2ajwsbKvWANBHmhqHX+lEGnJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:c3:11:e5:bc:dc:b7:5f:e5:08:38:f9:8d:4e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b165238963603f62c1d928916edc1b39a72e3a6e
Validity
Not Before: Apr 20 19:00:26 2025 GMT
Not After : Apr 21 19:00:26 2025 GMT
Subject: CN=03563da775be29f146e5d1481be8ef93ac85fc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:e0:08:cf:73:96:4f:7c:2b:89:7f:8a:3a:
a8:ea:d0:46:f5:1f:d2:a9:de:bc:a7:ff:b6:eb:dc:
37:98:32:4d:1e:f9:96:76:32:7a:2f:3a:d6:24:e8:
d0:50:ec:b6:5f:54:63:91:a0:33:76:ea:8c:8c:c5:
6c:32:93:5d:c1:0f:4a:55:2a:f2:8e:e9:b9:b4:2b:
6b:67:e3:43:25:fd:fa:b5:06:97:43:ee:7c:e5:30:
fe:60:3a:d2:00:4b:54:83:ce:dd:32:49:aa:03:7b:
f1:26:80:62:19:81:76:65:17:1d:4d:74:6a:0f:e4:
87:d2:54:e1:e0:25:11:b9:08:0d:5a:8a:f0:db:a6:
f2:26:c2:c3:48:34:9a:2c:d3:9c:39:c0:cb:75:ce:
ae:85:e6:b5:06:62:b4:63:44:a0:d4:26:71:d9:4f:
56:34:7e:25:fd:62:ad:63:b2:9d:37:17:37:7b:a3:
c0:9c:37:59:65:54:b5:12:34:77:3c:c2:c2:47:1b:
2b:24:52:fd:49:f3:f9:4a:42:93:e0:20:94:b7:31:
0b:60:15:5d:e2:df:a3:d5:75:16:da:d2:03:08:f1:
a5:d3:4d:84:26:f7:98:3b:e2:7c:6a:49:42:ea:8c:
b9:32:7b:f8:e0:04:23:8e:31:63:c1:9e:3c:03:c4:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:56:3D:A7:75:BE:29:F1:46:E5:D1:48:1B:E8:EF:93:AC:85:FC:4C
X509v3 Authority Key Identifier:
keyid:B1:65:23:89:63:60:3F:62:C1:D9:28:91:6E:DC:1B:39:A7:2E:3A:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:10:a2:f4:58:65:c1:5a:ec:59:5f:92:5d:34:6d:75:b6:57:
86:bb:11:29:cf:03:a8:35:ed:81:6a:24:96:c9:80:d6:32:fe:
1e:f7:38:04:6c:9a:94:c6:ad:f4:64:76:79:c4:57:bf:d9:91:
a1:ca:a8:e2:d6:c6:9a:fa:9e:62:f3:ba:95:aa:29:1f:f9:88:
8e:65:7f:09:23:1a:21:63:07:c0:4f:90:71:68:ea:2c:4e:a1:
f0:8c:13:e4:b7:1d:e4:d0:00:59:c3:b6:0a:23:95:50:ae:f9:
22:25:08:4b:78:8d:36:d7:bd:1e:57:d0:9b:99:a9:af:ec:0d:
73:b6:9f:a3:d2:cc:2e:5e:7a:b4:1c:0e:0b:37:6d:5e:c5:91:
9f:48:a1:43:32:a2:76:61:a7:22:e7:70:e5:60:2e:8f:17:17:
17:14:91:ca:79:43:10:ce:b9:20:05:d6:e7:f5:4f:de:ec:4e:
17:3e:3a:7b:e9:56:3f:c3:ee:da:c2:ec:16:6e:42:8f:2a:a8:
7a:87:40:b4:10:95:9d:60:a1:ba:32:a5:22:82:0d:85:71:c4:
ab:6d:bb:bf:cc:14:84:0f:04:c8:5c:5a:dd:93:9d:a2:02:28:
02:76:8e:47:b1:1d:9c:34:d8:88:35:a8:06:cc:78:17:3c:17:
29:b3:66:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:16 2025 by rpki-client