Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
File: 4DkMHDYd8FIkN2EI7_myDcLuAmU.mft (raw, json)
Hash identifier: hljuU0mRAyv0c+nav6hAGLMKJJeCX8AcYQbg1PeZ/p0=
Subject key identifier: 0D:26:72:D6:A1:E6:6B:5F:EC:FE:24:71:B9:87:EF:86:88:30:B3:A2
Authority key identifier: E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
Certificate issuer: /CN=e0390c1c361df05224376108eff9b20dc2ee0265
Certificate serial: 0196579479C4B3FED8D013913B2B369F6DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 09:01:10 +0000
Manifest this update: Mon 21 Apr 2025 09:01:10 +0000
Manifest next update: Tue 22 Apr 2025 09:01:10 +0000
Files and hashes: 1: 4DkMHDYd8FIkN2EI7_myDcLuAmU.crl (hash: J88hBvPldU4tElb/nGabLndrs+Nn79bPvLU06hFAXwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:79:c4:b3:fe:d8:d0:13:91:3b:2b:36:9f:6d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0390c1c361df05224376108eff9b20dc2ee0265
Validity
Not Before: Apr 21 09:01:10 2025 GMT
Not After : Apr 22 09:01:10 2025 GMT
Subject: CN=0d2672d6a1e66b5fecfe2471b987ef868830b3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:89:48:08:2c:d3:fa:c7:f6:c1:66:cc:7a:
1c:fb:00:2a:54:a0:c1:1a:aa:5d:b6:96:c4:61:64:
f8:0a:66:af:4a:a0:c2:5c:2f:25:68:01:94:fe:f5:
49:49:4e:54:fe:f1:0c:aa:4e:77:72:b7:2d:f3:c6:
83:a5:87:ce:0f:f0:05:e3:8c:8c:54:36:49:a4:7d:
74:48:53:92:7b:02:c0:f1:47:c8:1c:4a:e5:65:ac:
8b:a0:ca:1e:aa:8f:45:b6:94:48:ac:5e:7a:93:a7:
50:20:85:c2:eb:32:64:0f:d1:3e:05:ae:16:98:26:
e3:82:e7:fb:3b:ee:37:d3:bb:22:70:5e:5c:88:cf:
4b:c4:d0:e6:b1:2b:55:74:fa:46:c4:7f:01:1a:78:
70:57:25:e6:f0:79:ad:c5:7b:99:88:9b:43:fb:51:
0d:fc:f7:9b:4f:ea:d5:4d:f7:1f:32:b8:58:a6:40:
3a:7c:45:58:48:6d:46:68:47:b5:f0:1b:c9:84:66:
65:97:32:d2:3f:8b:a3:83:bf:10:24:00:02:8a:81:
51:de:cc:9e:cc:e3:d2:42:be:52:d9:f7:9b:08:fa:
62:b9:7b:25:dd:06:83:c9:a7:56:91:a6:50:2d:73:
07:30:e6:19:a6:22:db:d9:5a:fc:3d:2f:b6:d5:dc:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:26:72:D6:A1:E6:6B:5F:EC:FE:24:71:B9:87:EF:86:88:30:B3:A2
X509v3 Authority Key Identifier:
keyid:E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:66:43:5e:34:94:ce:4e:b6:83:a8:45:f4:0c:d0:dc:34:73:
63:f8:fa:4c:f1:6a:69:b8:81:97:2f:4b:a5:0a:1f:80:66:89:
2a:b7:df:72:79:fb:04:29:25:0f:90:e6:b9:c5:60:ef:1b:42:
37:ac:70:f6:88:d4:97:88:79:b4:cf:4e:01:b8:b3:f1:e2:e0:
58:8a:fb:12:3b:7a:dc:71:18:d2:e2:1f:a7:41:5e:72:1b:f4:
7f:2f:81:b7:7f:bc:d3:50:21:0e:6f:b8:c0:81:8d:e5:76:65:
72:bf:8a:1b:c3:1d:ed:0b:96:29:38:52:f1:e3:e1:b3:6d:9e:
cb:4f:ee:17:c6:83:b8:17:7f:9c:65:36:0c:d9:de:6a:f1:8b:
c6:ca:08:5a:a3:b5:a4:64:7f:67:fe:17:96:7f:0a:e9:5e:7b:
03:af:36:11:2f:40:f2:de:73:15:5f:d7:9f:6f:17:71:c1:13:
55:ff:4c:e4:8c:c4:1f:ab:40:69:20:07:e3:e2:65:01:e8:3e:
ca:e1:59:53:8f:e4:14:b6:9b:55:ec:f8:3c:41:a2:5c:85:b2:
5a:91:29:1f:65:3c:9b:20:99:22:37:32:b6:47:72:de:b0:4d:
43:04:e6:d9:5e:1e:6b:30:6e:9f:18:25:74:4b:c4:54:d1:5b:
66:c7:dd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:40 2025 by rpki-client