Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
File: rh967y8S0HaqitWli8uNyvPwvUw.mft (raw, json)
Hash identifier: 4XK5eYkUzgtlQp2SK0/NW/dCVu9e5GBIXOInXz+S0bo=
Subject key identifier: E8:85:E0:7D:4A:07:51:EB:36:2A:E8:65:C9:E4:D3:09:8A:08:88:F4
Authority key identifier: AE:1F:7A:EF:2F:12:D0:76:AA:8A:D5:A5:8B:CB:8D:CA:F3:F0:BD:4C
Certificate issuer: /CN=ae1f7aef2f12d076aa8ad5a58bcb8dcaf3f0bd4c
Certificate serial: 01965D965BFA2CB4FCA8F06496D19F857961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
Manifest number: 1051
Signing time: Tue 22 Apr 2025 13:00:57 +0000
Manifest this update: Tue 22 Apr 2025 13:00:57 +0000
Manifest next update: Wed 23 Apr 2025 13:00:57 +0000
Files and hashes: 1: rh967y8S0HaqitWli8uNyvPwvUw.crl (hash: QcZBcl00hFGegtKxVDxSKVXqOiyxl43BeviuLd6DRD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:96:5b:fa:2c:b4:fc:a8:f0:64:96:d1:9f:85:79:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1f7aef2f12d076aa8ad5a58bcb8dcaf3f0bd4c
Validity
Not Before: Apr 22 13:00:57 2025 GMT
Not After : Apr 23 13:00:57 2025 GMT
Subject: CN=e885e07d4a0751eb362ae865c9e4d3098a0888f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:ca:9f:36:dc:51:69:2b:45:85:72:ca:3a:
e6:9a:6e:b5:df:0d:ef:01:fb:59:00:d5:34:a2:fc:
19:14:e9:63:8d:1e:64:1d:bd:20:d7:5e:25:96:10:
9d:2c:c7:53:c4:24:85:12:80:f6:fe:58:74:71:7b:
ce:9b:b0:2e:ea:f8:76:a7:01:e0:3f:9a:f3:9d:d6:
32:7f:9e:d9:94:8a:72:ee:7e:1d:05:c1:79:8f:a7:
a9:9a:65:19:25:ef:9f:49:71:80:62:dc:f5:93:22:
c3:0b:d0:2e:27:18:8e:82:68:7a:cd:21:32:5f:4f:
8f:e8:c5:28:96:cd:3a:30:88:bf:a7:9a:2a:87:83:
0c:f0:53:f1:eb:6e:f8:fa:77:be:90:68:3d:2b:8f:
39:6d:45:f7:8e:a3:4e:06:32:b3:eb:d0:86:f5:0c:
87:6d:5a:a5:68:57:79:32:55:c3:a7:73:04:1b:23:
eb:75:5f:87:17:13:67:59:18:c3:85:c2:0d:00:8c:
74:ed:80:e0:bb:de:45:08:1c:e1:b4:8e:52:61:74:
5c:c7:c2:31:ae:f5:8a:03:04:64:56:5b:12:b6:cb:
9f:f7:f5:1b:c6:07:59:79:2a:aa:62:b6:ab:2d:62:
0c:2b:e8:bd:b7:a1:05:c8:9c:98:43:7a:77:59:33:
a2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:85:E0:7D:4A:07:51:EB:36:2A:E8:65:C9:E4:D3:09:8A:08:88:F4
X509v3 Authority Key Identifier:
keyid:AE:1F:7A:EF:2F:12:D0:76:AA:8A:D5:A5:8B:CB:8D:CA:F3:F0:BD:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e5:4d:37:85:2b:06:34:36:8e:98:cb:2a:d1:aa:b6:c1:a3:
b3:b4:3a:ec:34:2c:67:fd:f1:79:e8:ab:ef:f4:96:48:5e:b2:
ea:c4:91:fe:e5:ed:12:22:ac:98:6c:38:5d:13:40:cb:c6:6b:
f7:a7:dc:7a:63:50:d4:15:ee:09:1e:57:90:05:2d:3c:6e:2e:
ce:50:7b:d0:82:c9:92:d2:b5:8a:bd:50:27:79:cd:80:ef:3c:
ef:36:4a:b8:3a:5c:18:ae:ed:70:95:84:99:be:c2:35:b5:d9:
b5:78:5d:8e:96:f1:15:97:3e:5a:c2:b1:c1:14:00:cf:34:fa:
ff:7b:f0:2e:66:5e:d2:74:3e:cc:fd:4b:c3:87:37:17:ae:ae:
7f:b2:11:59:2c:08:d9:34:1c:1c:ac:75:44:a3:1b:9d:28:4b:
17:f8:6d:2c:b5:cc:d5:e9:4e:61:52:56:e5:71:20:a2:cc:38:
47:10:2c:fc:99:0f:fc:ee:b9:f3:9f:2f:84:8f:16:17:1d:0a:
bd:94:61:b2:b1:60:d7:99:44:9a:61:1b:b0:59:b3:90:23:f3:
8c:4a:ac:dd:c9:4b:3e:27:26:0d:47:f9:e3:a2:c3:39:0c:67:
23:49:55:60:ff:65:a9:b9:24:95:4a:c1:c7:b6:18:05:ba:e8:
93:f2:79:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:12:22 2025 by rpki-client