Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.mft
File: 352lG6cnhKBORBIPne1HhWd5TBs.mft (raw, json)
Hash identifier: z4X5kHbi+gGJ77WiAQazwHw6jbd/muvD9VtS+WNsAJo=
Subject key identifier: 83:9E:22:50:65:46:B7:A7:5A:80:CF:A9:5A:89:A6:C3:44:40:CF:1E
Authority key identifier: DF:9D:A5:1B:A7:27:84:A0:4E:44:12:0F:9D:ED:47:85:67:79:4C:1B
Certificate issuer: /CN=df9da51ba72784a04e44120f9ded478567794c1b
Certificate serial: 01965870085E86A6F84D5744C4D351123082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/352lG6cnhKBORBIPne1HhWd5TBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.mft
Manifest number: 08E8
Signing time: Mon 21 Apr 2025 13:00:59 +0000
Manifest this update: Mon 21 Apr 2025 13:00:59 +0000
Manifest next update: Tue 22 Apr 2025 13:00:59 +0000
Files and hashes: 1: 352lG6cnhKBORBIPne1HhWd5TBs.crl (hash: gOFcJEA6xUcwkkcnbuPDdOFQuaaNHUatcQ5D1cqcf7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/352lG6cnhKBORBIPne1HhWd5TBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:70:08:5e:86:a6:f8:4d:57:44:c4:d3:51:12:30:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9da51ba72784a04e44120f9ded478567794c1b
Validity
Not Before: Apr 21 13:00:59 2025 GMT
Not After : Apr 22 13:00:59 2025 GMT
Subject: CN=839e22506546b7a75a80cfa95a89a6c34440cf1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c5:63:d8:f8:53:cc:56:41:a6:db:2b:de:f4:
f0:70:77:23:8d:81:ed:1f:ea:d2:8a:e1:77:3b:64:
d5:ed:e6:33:99:df:62:30:54:b8:a4:44:52:26:4a:
5d:bf:c3:90:47:5a:10:47:cd:6e:6b:d4:ad:f3:ba:
8b:23:1d:7f:92:62:fe:63:3c:f7:a8:a3:dd:d5:c7:
6c:17:06:4d:03:b5:79:a6:fc:85:91:0d:c8:64:00:
fe:e3:1d:90:28:81:b8:ef:ae:51:6c:1e:02:5c:96:
c5:0a:1a:18:ab:a3:6d:9b:a6:48:09:53:e9:ac:4e:
a0:4b:e6:ac:d3:33:82:09:a9:e1:c5:12:14:c1:e2:
cd:02:f6:a6:a7:15:24:31:63:90:11:ad:17:25:e1:
3f:79:e2:e6:88:3d:2f:36:ab:af:b9:ec:7c:e2:ab:
19:b2:b1:35:48:b7:28:a6:b0:46:db:97:64:6d:3f:
9e:7f:3d:32:1d:34:1c:8c:50:d0:85:37:c3:49:e8:
2a:ce:8f:51:66:0a:cb:c8:ae:23:06:28:59:f6:93:
ee:a1:dd:4a:fd:d8:7b:24:78:a3:99:9b:b0:38:20:
79:bc:8c:40:09:3b:95:8c:54:44:bb:e5:c0:77:0c:
37:aa:85:b1:9a:a5:b1:00:2c:a2:c6:e7:68:66:80:
bf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9E:22:50:65:46:B7:A7:5A:80:CF:A9:5A:89:A6:C3:44:40:CF:1E
X509v3 Authority Key Identifier:
keyid:DF:9D:A5:1B:A7:27:84:A0:4E:44:12:0F:9D:ED:47:85:67:79:4C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/352lG6cnhKBORBIPne1HhWd5TBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e1:57:e9:67:46:14:c6:5d:55:72:5f:64:f9:ab:ad:3e:27:
cc:5f:a9:e5:48:0d:fc:a4:af:09:4b:5e:b4:ad:26:8c:2b:8a:
e6:93:eb:19:23:e2:e5:e7:ea:f8:43:ab:9f:a6:03:f4:3a:be:
2a:2d:d8:bb:6f:c6:65:23:35:bf:13:69:42:fe:2f:6f:0b:d6:
79:77:94:94:bd:e8:0e:e0:b5:b3:94:3c:3c:27:56:7f:54:0a:
fe:e7:8c:6a:5e:a8:ed:81:ad:e0:ff:9e:72:30:da:41:72:40:
0e:11:01:98:1a:c9:81:2c:eb:1c:ec:57:a3:86:1d:94:c0:f3:
62:6e:44:46:ae:3a:e3:8c:5c:db:c8:37:78:5a:14:60:1c:6f:
ab:88:40:95:29:b5:bc:9f:35:7a:04:be:fd:26:10:2b:ef:ff:
fb:90:5f:e6:ab:d0:87:0d:84:af:fe:6f:c2:2f:42:9d:e3:56:
db:68:1d:d5:07:3c:89:53:f1:aa:d0:86:63:89:4d:d2:fa:23:
05:cb:94:7c:19:cc:cf:22:1d:87:de:f1:dc:7b:72:38:99:59:
a6:e2:3a:1f:d9:4c:6c:9f:0e:5f:c4:32:b9:3e:24:39:07:1f:
e2:7e:dd:9f:d5:28:af:4b:8c:cc:da:48:1d:0b:ab:95:dd:12:
96:4d:14:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:23:22 2025 by rpki-client