Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
File: _kK02grqV4yifyXesM_tYagLnqI.mft (raw, json)
Hash identifier: 6WGKnaj9AM6d0j75gPyN3s9FkR6UHs+mtXGDn2gUfEU=
Subject key identifier: 35:39:D8:F8:2D:72:EA:EA:71:3B:6A:D9:20:60:F5:44:D9:93:AC:C6
Authority key identifier: FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
Certificate issuer: /CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Certificate serial: 01964FDA9D87F4BBDE747E2F8A3CB166D35F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
Manifest number: 0838
Signing time: Sat 19 Apr 2025 21:00:49 +0000
Manifest this update: Sat 19 Apr 2025 21:00:49 +0000
Manifest next update: Sun 20 Apr 2025 21:00:49 +0000
Files and hashes: 1: _kK02grqV4yifyXesM_tYagLnqI.crl (hash: dtKYpohZraLQIr83sDDtA/pPwMOTW85ytw+YI7qU2NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:9d:87:f4:bb:de:74:7e:2f:8a:3c:b1:66:d3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Validity
Not Before: Apr 19 21:00:49 2025 GMT
Not After : Apr 20 21:00:49 2025 GMT
Subject: CN=3539d8f82d72eaea713b6ad92060f544d993acc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:a6:62:1e:81:02:5b:d5:79:1b:5d:87:61:
f8:d3:e9:c4:72:78:c9:e8:9c:28:05:9a:c3:73:c4:
b1:17:58:b9:95:63:85:6b:a2:50:cc:c2:27:d3:4d:
b9:66:2d:d8:3d:6a:b7:37:14:9f:90:8c:a6:28:82:
dc:ee:01:ea:4a:fc:69:81:00:e3:33:9b:57:8e:2e:
10:13:c6:aa:bc:16:d6:b4:a7:53:c0:43:60:70:9e:
77:81:b4:85:db:02:15:78:03:e2:02:f9:68:fa:9a:
e9:8e:f3:71:48:59:c1:c7:07:d1:dd:68:8b:f2:a4:
d0:aa:b1:bc:b2:da:ed:d5:71:70:9e:65:54:47:eb:
14:2c:89:65:0e:0b:fe:ce:a4:8a:20:d2:f7:28:5c:
9d:0c:e5:52:b6:47:d4:6b:44:0f:7b:7b:60:4c:f3:
68:c8:49:4a:be:9f:61:c8:1a:e7:5d:82:0b:3b:bc:
ef:dc:45:d0:c9:3e:20:92:ee:8f:ae:27:53:44:c3:
20:f1:bf:da:66:40:23:c3:14:e8:78:b0:cf:8c:c1:
05:dd:89:b5:73:b3:4c:4e:01:d0:77:b3:f3:1d:63:
6c:8c:43:b1:c7:09:83:40:33:0b:bb:3b:e6:7b:82:
b3:a9:56:88:82:1a:65:3f:90:9a:d9:e5:fd:93:89:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:39:D8:F8:2D:72:EA:EA:71:3B:6A:D9:20:60:F5:44:D9:93:AC:C6
X509v3 Authority Key Identifier:
keyid:FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a6:9c:db:5e:14:b2:ca:b1:c9:e1:9e:42:40:79:22:53:47:
eb:2d:b7:68:89:d7:19:8f:b1:5c:66:d7:73:48:04:e6:89:70:
c8:65:33:55:cb:db:4a:61:51:74:4b:27:7a:6b:5d:c4:cb:57:
1d:db:cb:e6:f2:e3:4a:5a:9f:f6:10:8f:42:3e:5d:ad:0e:6c:
7c:8f:21:be:cf:31:c2:40:d8:26:7f:14:d4:d3:51:62:fc:3c:
6c:cf:30:73:38:6a:dc:95:63:39:8f:5d:6e:63:1f:d4:8e:02:
64:6e:99:55:e4:dc:50:eb:d9:b8:fb:63:cb:17:48:1b:36:f2:
9d:2d:24:db:d2:dc:a0:e9:3c:d9:11:9c:80:0e:f2:0c:1e:99:
87:ba:48:d6:49:85:8d:57:43:9c:53:fb:4a:4c:2e:43:a3:f3:
83:83:2e:95:9f:1a:96:39:b2:78:ef:36:9a:22:a7:ef:bf:15:
bc:69:77:28:3e:84:3e:22:df:8c:74:b7:4c:ac:97:f1:1a:1a:
42:be:55:8c:a4:4c:35:37:20:a7:e9:d8:44:81:76:0b:75:16:
5c:c7:0c:7c:63:d9:11:a4:21:f9:4a:49:fa:b9:e5:c2:d7:3a:
3e:99:11:8a:ff:97:a7:38:af:d5:8b:0f:56:20:33:8d:51:71:
70:39:e8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:45 2025 by rpki-client