Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
File: DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft (raw, json)
Hash identifier: ZH/457TEAo80XDbw//t8Z5k/sIVGLPvPe8IfXQeGpZk=
Subject key identifier: D2:4F:BE:3E:F2:45:FF:DF:9E:0A:7F:B5:04:06:BF:93:57:06:50:7A
Authority key identifier: 0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81
Certificate issuer: /CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
Certificate serial: 01965E3AA2CAA6582501E3B6410264F6B5EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
Manifest number: 14FF
Signing time: Tue 22 Apr 2025 16:00:22 +0000
Manifest this update: Tue 22 Apr 2025 16:00:22 +0000
Manifest next update: Wed 23 Apr 2025 16:00:22 +0000
Files and hashes: 1: DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl (hash: gACJduwaVGThpyaRJhMR9wK8h+/gMXLeCH3A4cmfGnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:a2:ca:a6:58:25:01:e3:b6:41:02:64:f6:b5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
Validity
Not Before: Apr 22 16:00:22 2025 GMT
Not After : Apr 23 16:00:22 2025 GMT
Subject: CN=d24fbe3ef245ffdf9e0a7fb50406bf935706507a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:45:df:db:15:be:ef:21:fa:0f:df:22:4e:
79:ca:0a:ef:84:e5:49:8b:1e:fd:c9:5b:c0:17:bb:
5e:08:45:b9:65:72:83:d4:ff:7b:4e:38:26:1a:90:
4e:a4:dd:c7:95:d0:36:bd:20:b4:1e:7e:cb:a1:8d:
00:50:4e:51:2e:a3:f8:b6:ab:cf:7a:65:ce:d2:ee:
4d:83:ad:4a:80:18:e8:37:80:a8:af:4a:19:81:3e:
96:f4:ae:9c:81:75:31:f0:08:03:5a:d9:6b:39:d3:
8f:22:12:8c:3c:8a:0e:3f:02:54:da:ff:2b:9e:b2:
4e:c2:fb:71:b3:c4:f6:ce:dc:98:eb:87:d0:d7:0d:
46:3e:19:bd:d9:f1:90:b0:1f:c2:ce:2a:a9:fe:70:
9d:e3:ee:88:a5:28:a6:ce:9b:da:46:7d:fb:39:dc:
68:38:64:8d:bd:7d:5b:3a:01:ac:1c:7c:d8:cd:79:
10:a3:15:31:11:9f:94:46:4d:e6:69:cc:43:e1:8f:
6e:88:ad:0c:db:50:b2:a2:9c:b8:95:f0:76:dd:f4:
e5:05:e8:3b:35:be:8c:47:57:3d:6f:30:34:76:f9:
e4:b8:da:c2:dd:ae:b9:3c:36:e1:f0:c8:1d:46:7e:
b2:a4:c7:f5:f5:23:49:8f:07:94:13:da:c6:03:2b:
25:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4F:BE:3E:F2:45:FF:DF:9E:0A:7F:B5:04:06:BF:93:57:06:50:7A
X509v3 Authority Key Identifier:
keyid:0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4f:d7:34:7f:5d:e5:d4:39:d5:f8:0c:19:11:4f:6f:18:e1:
e8:6b:43:d2:ca:96:24:23:43:01:e1:0a:b1:21:37:91:6c:51:
bf:f6:2f:a8:40:ce:9e:54:6f:e4:fd:61:34:48:94:68:97:f8:
a9:f5:04:7b:5b:33:c9:fe:f4:98:f1:0e:ba:dc:61:45:29:c2:
b4:bd:9d:8a:12:ea:7b:c7:90:e8:43:62:b9:81:66:b9:85:b4:
44:07:df:17:ea:76:c0:ce:b6:a8:99:a7:47:2e:79:e6:2c:54:
c6:8c:52:d2:35:6a:eb:1f:71:e0:54:4b:d5:fd:51:b9:e3:2f:
a4:c9:c1:dc:13:37:76:cb:60:f6:13:d5:17:58:7b:c9:9e:91:
a8:56:49:ef:b0:36:b6:3c:8c:db:78:da:e9:bb:ff:0c:44:62:
eb:a0:27:b2:69:58:5f:cd:24:0a:40:86:e4:e5:cf:5c:e9:56:
c8:e5:28:13:51:2b:15:9f:7e:82:47:6b:6a:ab:fe:e9:fe:26:
c1:51:7f:0f:11:2b:5c:ac:c1:ea:b5:27:da:ea:c8:98:ef:30:
6e:96:39:24:b5:82:8f:1c:5e:b4:a0:81:8a:69:b4:0d:e9:b0:
4a:13:77:d7:d6:27:e4:02:56:20:53:42:ee:56:74:6c:85:e4:
75:a8:e7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:54:19 2025 by rpki-client