Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
File: 6ILCYEFZvDDAW58M9unYNhAuqUs.mft (raw, json)
Hash identifier: xb4d946Ntwt6v21t6siG3nZ/V7mnFBVJMbkJzNsIL3g=
Subject key identifier: 56:8C:3B:B2:AC:A8:F3:CD:F1:6C:3A:31:F5:EF:3B:5F:59:33:A5:E7
Authority key identifier: E8:82:C2:60:41:59:BC:30:C0:5B:9F:0C:F6:E9:D8:36:10:2E:A9:4B
Certificate issuer: /CN=e882c2604159bc30c05b9f0cf6e9d836102ea94b
Certificate serial: 01965CF12933146FD2F5D45B222CFA89DF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
Manifest number: 11C4
Signing time: Tue 22 Apr 2025 10:00:30 +0000
Manifest this update: Tue 22 Apr 2025 10:00:30 +0000
Manifest next update: Wed 23 Apr 2025 10:00:30 +0000
Files and hashes: 1: 6ILCYEFZvDDAW58M9unYNhAuqUs.crl (hash: NNDIJ93ygNywl7WCzjYr8veCTw4fH2O5Diiu/cDgg9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:29:33:14:6f:d2:f5:d4:5b:22:2c:fa:89:df:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e882c2604159bc30c05b9f0cf6e9d836102ea94b
Validity
Not Before: Apr 22 10:00:30 2025 GMT
Not After : Apr 23 10:00:30 2025 GMT
Subject: CN=568c3bb2aca8f3cdf16c3a31f5ef3b5f5933a5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:db:76:43:92:88:94:70:a9:2e:3f:82:7a:1d:
a8:de:7b:76:f8:ae:e1:94:2f:56:7a:ae:c3:2e:a3:
89:da:69:9e:e8:a8:b6:b1:ba:2d:fe:28:79:a6:89:
e8:e2:36:3a:f8:08:0d:f7:ed:33:06:0a:0e:52:c8:
f3:37:f5:bb:9b:52:e1:c6:8f:be:1b:60:ae:1c:19:
e7:13:cb:2a:ea:d5:cc:cd:04:91:2d:a3:f5:31:52:
ef:e3:35:6a:a1:18:69:4d:69:fe:04:08:f2:9d:29:
87:ef:c2:ec:64:3e:9b:b3:d7:16:bc:62:fc:01:3f:
6d:ec:56:b0:dc:6b:f8:3f:41:71:b5:34:cb:5e:d1:
db:b3:1c:88:e2:d1:18:b7:5d:b0:b5:e4:65:51:85:
9d:28:dd:64:ad:7a:cf:2e:0e:5a:0b:c3:bd:fb:dd:
c8:3b:04:38:8e:7f:01:59:ba:22:0f:79:cc:ff:7e:
7e:95:2a:33:5c:cc:74:27:a2:80:53:23:aa:61:bd:
91:5c:9e:5f:8c:c8:7f:5b:e1:95:a4:56:42:dc:83:
aa:97:36:3e:28:80:71:64:a3:83:72:84:e4:2d:22:
87:7e:73:da:a1:ba:2d:fe:dd:71:fe:30:02:54:d1:
a3:b1:c0:60:46:92:86:ff:94:31:f4:bc:f9:88:c8:
1c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8C:3B:B2:AC:A8:F3:CD:F1:6C:3A:31:F5:EF:3B:5F:59:33:A5:E7
X509v3 Authority Key Identifier:
keyid:E8:82:C2:60:41:59:BC:30:C0:5B:9F:0C:F6:E9:D8:36:10:2E:A9:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:af:13:3c:5e:a8:4f:8f:91:ab:a5:76:9d:62:bf:8a:09:fe:
cd:a5:44:7d:b8:07:cf:19:99:66:f1:97:93:c2:96:ef:2f:00:
f1:1c:10:a5:f3:9b:ae:64:e8:05:7b:05:28:9a:3e:41:fa:d5:
8b:88:73:6b:8b:a0:f5:32:5f:66:84:ec:0a:f6:29:be:63:92:
69:a2:0a:9f:7d:3b:fd:2c:62:b0:59:33:10:76:d2:f3:bc:d7:
f4:17:e1:fa:89:0e:4e:7b:6d:01:fc:40:2f:09:90:bf:d9:a9:
f7:5f:bc:73:48:e0:b5:e8:7e:af:9b:b8:37:71:ef:76:56:7e:
3a:12:e6:85:c1:41:7f:82:ec:5a:45:ab:9d:7f:ab:f3:52:9e:
6a:1e:7b:4b:42:75:64:b3:0b:e0:63:e2:03:bc:9e:c1:9c:43:
7f:ab:47:fe:c2:eb:49:24:a0:4a:60:c1:0a:09:4b:72:fb:b1:
dd:b1:c5:b4:42:a2:b4:d2:2c:28:cd:6b:8d:3f:f8:74:e8:ab:
64:35:37:0d:20:74:1f:c4:83:c2:30:c1:a3:c9:89:d0:da:cc:
ae:71:23:c1:5f:59:54:d1:9d:8e:db:5e:30:c1:c8:cc:da:a9:
95:64:b7:6c:fb:23:61:30:8d:8d:c1:26:6d:4d:9f:a5:a5:d8:
34:b8:7b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:18:38 2025 by rpki-client