Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
File: sl8gfyfZGpE36LZdKQEpmHGqOh0.mft (raw, json)
Hash identifier: jqW4R0I8kIC81vNm0j8TIGgMG4zXLYFnt4QGyZz5ItQ=
Subject key identifier: 0C:A2:55:AC:83:3C:C3:BE:60:14:2D:29:5F:F8:79:98:10:1C:C2:53
Authority key identifier: B2:5F:20:7F:27:D9:1A:91:37:E8:B6:5D:29:01:29:98:71:AA:3A:1D
Certificate issuer: /CN=b25f207f27d91a9137e8b65d2901299871aa3a1d
Certificate serial: 019658DDA7755379C7637FF96EC79C21FD5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
Manifest number: 37
Signing time: Mon 21 Apr 2025 15:00:43 +0000
Manifest this update: Mon 21 Apr 2025 15:00:43 +0000
Manifest next update: Tue 22 Apr 2025 15:00:43 +0000
Files and hashes: 1: sl8gfyfZGpE36LZdKQEpmHGqOh0.crl (hash: QH2/eXckkeh9SYkzwkpuqi48QDTeNkEE2LlXdg83Gpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:a7:75:53:79:c7:63:7f:f9:6e:c7:9c:21:fd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25f207f27d91a9137e8b65d2901299871aa3a1d
Validity
Not Before: Apr 21 15:00:43 2025 GMT
Not After : Apr 22 15:00:43 2025 GMT
Subject: CN=0ca255ac833cc3be60142d295ff87998101cc253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1e:17:bc:ee:4a:30:6f:1b:63:c7:13:7c:22:
a5:a0:4b:4a:26:59:d8:60:7e:ad:ed:06:b7:28:51:
73:6b:b5:12:a7:f0:47:b4:7d:95:3f:c1:f6:43:b3:
11:4c:eb:a0:43:d7:a6:17:69:61:76:57:9d:23:55:
31:0b:83:b5:7e:62:55:54:89:e0:ca:93:90:c4:2a:
f0:ac:d2:81:3a:b1:ce:8a:18:51:bc:3f:da:5f:89:
38:41:c8:41:29:01:47:2a:1e:bf:e8:93:a1:6c:70:
13:b4:cc:3f:0d:af:3d:9c:a5:73:6a:5c:8f:95:8e:
a8:6c:4b:bc:af:66:bb:d4:50:87:3d:71:73:c3:7b:
ef:87:d7:83:fa:80:ee:d6:10:36:0d:96:67:f1:8a:
7d:91:5d:1e:bf:d9:8e:3d:48:c1:ee:3b:5d:ef:f3:
0e:4d:92:36:c0:9b:f0:c6:53:94:d3:c7:d9:80:0b:
cc:d1:97:b5:d8:40:36:19:53:23:3b:10:89:23:cc:
bc:85:d1:ca:0a:0a:d6:07:c2:dd:2d:ca:b6:63:f2:
f7:c4:35:83:d8:b6:67:7b:13:f2:f5:a3:0e:96:36:
a7:d0:15:76:de:44:c0:92:70:ae:c8:46:8e:98:d1:
3a:00:b7:10:a2:06:0c:9a:f0:53:fe:5b:d9:54:8f:
4b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A2:55:AC:83:3C:C3:BE:60:14:2D:29:5F:F8:79:98:10:1C:C2:53
X509v3 Authority Key Identifier:
keyid:B2:5F:20:7F:27:D9:1A:91:37:E8:B6:5D:29:01:29:98:71:AA:3A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e3:e6:ea:52:b8:3e:9f:78:bb:ff:ee:59:0d:36:03:7a:8b:
38:1b:30:12:3a:b0:b7:50:7a:5d:9b:0e:b8:d8:91:3a:e3:a4:
1b:11:f3:07:b1:63:e5:c8:38:2b:84:d4:bd:7c:49:97:b5:db:
99:13:cb:ee:f4:70:d3:61:fe:11:90:31:16:35:59:8f:48:b4:
d8:08:af:31:ee:0e:2d:5c:27:98:02:6b:af:e5:7e:38:88:b9:
39:d6:36:72:8c:aa:62:bc:6e:d3:3f:a1:76:e6:b7:22:2b:89:
2b:dc:93:6d:f4:0c:c2:00:40:6e:5b:79:bb:9c:b2:94:6b:6a:
00:46:cf:3d:03:90:ec:26:f8:f2:2c:ba:63:8c:4a:ff:fc:80:
7f:1f:5f:f4:7b:d4:47:02:1f:f1:8a:d8:73:ec:86:8b:b1:24:
f3:40:64:fe:e6:6e:90:f6:29:fb:eb:ab:28:18:d7:4b:b9:5e:
c8:32:bc:f8:83:3a:ff:73:94:bd:96:c6:d2:e3:25:13:32:17:
c3:e2:e7:9d:49:a2:93:84:d8:26:07:9a:0c:e6:54:85:52:f1:
ea:0f:59:4d:ed:36:7a:2b:d5:a7:72:da:5c:bf:66:1d:b0:aa:
c6:a8:95:8d:40:1f:03:03:74:e5:99:7a:2a:1a:93:92:0e:59:
1a:36:bc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:47:59 2025 by rpki-client