Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
File: AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json)
Hash identifier: rY7inX8sFU+de25xjSuH6p1XTL5fuds1yBsFnwQHb88=
Subject key identifier: 20:6A:B2:C7:06:E9:A5:62:A0:E9:EC:98:55:37:3B:DA:25:90:C9:DC
Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
Certificate issuer: /CN=030be91321074434c9e820db661c91ca62ccb0fd
Certificate serial: 019643D71C37F40DD91C792E6A0780B2DB25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
Manifest number: 0EED
Signing time: Thu 17 Apr 2025 13:01:33 +0000
Manifest this update: Thu 17 Apr 2025 13:01:33 +0000
Manifest next update: Fri 18 Apr 2025 13:01:33 +0000
Files and hashes: 1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: yBqBuruTioVaumbFAF1vZo6pBa31FnMs7O2Vr2d6oAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d7:1c:37:f4:0d:d9:1c:79:2e:6a:07:80:b2:db:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd
Validity
Not Before: Apr 17 13:01:33 2025 GMT
Not After : Apr 18 13:01:33 2025 GMT
Subject: CN=206ab2c706e9a562a0e9ec9855373bda2590c9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:0d:c3:21:d0:99:74:59:f8:0f:38:53:47:
f9:1d:89:c3:ce:ce:99:48:ed:64:05:9c:f8:02:97:
15:b5:61:51:c7:6a:ea:bc:b1:27:15:ad:46:a5:66:
69:de:8a:bf:22:72:ec:71:a3:3f:e1:34:06:cf:38:
c8:38:4b:64:8f:d6:c5:fd:08:e9:61:a2:99:18:ea:
b6:56:4d:47:15:15:97:66:e0:50:3e:08:60:42:77:
ac:d2:5f:bc:16:c9:81:a5:c6:6f:e8:ca:4f:92:20:
47:d7:a9:46:8a:04:94:4d:e9:b8:11:58:86:5d:6b:
ca:46:de:ab:3f:78:31:4f:ba:5d:2d:31:96:52:d4:
44:eb:d9:9c:01:77:85:88:66:c3:c5:50:be:c8:8c:
66:50:46:6c:1d:70:8b:f8:48:fb:5c:ea:73:f8:a3:
66:82:41:53:d8:76:a3:e6:12:86:c3:27:b4:67:86:
fb:e1:66:68:01:22:c1:d5:bc:32:a9:69:03:53:6f:
6d:e7:81:f1:9b:20:e1:88:b8:ec:67:0c:72:4b:17:
a1:bb:0d:6d:4d:e9:f2:c1:a0:06:74:1b:23:68:5e:
b0:b2:04:d9:14:55:b1:58:4f:21:d7:43:06:a9:11:
a5:87:55:8e:7e:fc:00:cc:4d:62:a8:e2:76:65:96:
30:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6A:B2:C7:06:E9:A5:62:A0:E9:EC:98:55:37:3B:DA:25:90:C9:DC
X509v3 Authority Key Identifier:
keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:fa:39:25:9b:7d:ca:25:d0:9d:52:e0:93:30:df:cc:48:0b:
9d:a7:9f:e0:bd:25:d3:18:8a:40:7e:ad:3c:7a:3a:3c:89:c2:
7c:5e:0d:7d:e6:c8:cb:f4:40:1a:41:b6:24:90:19:f0:e2:de:
7f:9a:67:62:eb:ba:af:1f:6f:52:3c:59:b6:3b:14:d0:dc:35:
f4:8b:e8:8c:26:09:21:9b:1d:e5:b6:0a:a6:d5:7f:ad:2e:91:
e6:d3:1f:60:ca:04:e4:0c:91:b8:89:42:e2:e5:32:25:7b:d5:
a4:7e:48:ca:e0:15:47:69:bd:9a:13:c2:6b:1c:f3:bd:c3:b9:
44:51:b5:91:ba:05:44:d2:9f:af:a1:1e:77:dc:fe:c7:25:ba:
d2:3b:a9:fe:5e:70:ee:c6:41:02:01:11:47:09:a0:03:9c:e4:
a2:3b:a7:2e:55:2b:b2:e1:d7:d8:cf:01:f7:ba:9c:93:80:89:
ed:75:cb:d1:fc:c6:42:bc:69:81:5f:36:1c:16:8d:e8:73:7f:
d4:e8:88:ce:97:b1:78:f1:3b:44:76:23:11:9e:49:2e:24:ba:
e0:cd:96:65:a7:47:e9:93:42:62:3e:74:5f:c0:5c:3a:f8:2c:
7d:c5:6a:67:89:be:05:3d:ee:cf:49:55:ac:05:83:40:c5:fd:
98:31:95:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:29:14 2025 by rpki-client