Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
File: griIeR5H8Xu-ofUbnJdpd2JPBBw.mft (raw, json)
Hash identifier: UTOU6//CLtOUb6mAgGcHB3d5hQGCGYambTErniuoKZc=
Subject key identifier: BE:4E:09:63:78:89:A5:2A:CB:0C:BF:BC:C3:02:34:29:7B:32:3E:58
Authority key identifier: 82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
Certificate issuer: /CN=82b888791e47f17bbea1f51b9c976977624f041c
Certificate serial: 01964444B70FF1F8F871AD36C84B35C70155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
Manifest number: 0472
Signing time: Thu 17 Apr 2025 15:01:15 +0000
Manifest this update: Thu 17 Apr 2025 15:01:15 +0000
Manifest next update: Fri 18 Apr 2025 15:01:15 +0000
Files and hashes: 1: griIeR5H8Xu-ofUbnJdpd2JPBBw.crl (hash: a/pgS/eSUuWSdwCwlVix7a5ghbTcyHtbUzQVOzKnN8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:b7:0f:f1:f8:f8:71:ad:36:c8:4b:35:c7:01:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b888791e47f17bbea1f51b9c976977624f041c
Validity
Not Before: Apr 17 15:01:15 2025 GMT
Not After : Apr 18 15:01:15 2025 GMT
Subject: CN=be4e09637889a52acb0cbfbcc30234297b323e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:aa:cf:f3:8e:23:c3:4b:c6:73:36:95:73:
59:57:3b:2c:0e:be:20:b9:15:ef:86:7c:c7:ec:f1:
a3:8b:d5:2b:3b:8b:5d:f5:b3:79:3a:8d:20:98:97:
81:71:db:22:3c:78:3e:92:ab:d7:c6:70:ed:64:df:
3c:39:3e:a4:44:1f:b5:fa:cb:00:af:e5:7d:d5:78:
4e:09:77:0b:9e:d0:ae:67:15:c0:da:b7:02:5c:e9:
4e:02:7c:8f:e0:5d:71:46:1a:69:25:dd:49:12:76:
e8:6f:7d:69:4a:52:f3:ca:bb:90:36:55:68:72:f8:
a2:0c:ed:3c:ce:83:5b:b6:c6:23:ca:94:73:60:37:
30:e3:6f:d6:33:79:4f:a4:e1:8c:ae:e5:de:06:11:
29:78:1f:02:82:f8:10:d8:71:06:63:a7:ee:e2:fd:
4c:be:51:7a:8d:5d:ff:09:ff:7a:73:03:38:22:d5:
90:20:02:b9:f9:1c:10:e2:cd:91:1e:1b:81:31:1d:
4f:43:1b:0a:04:e4:6d:f7:d7:3e:38:f6:19:b7:74:
55:7f:86:ad:18:bd:91:41:fe:2d:86:8b:b3:04:ed:
cb:6d:8b:0e:79:7b:1e:91:c0:be:df:c9:33:3d:e2:
10:c3:27:2e:52:bb:b5:10:64:81:d8:0a:50:8f:c4:
34:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4E:09:63:78:89:A5:2A:CB:0C:BF:BC:C3:02:34:29:7B:32:3E:58
X509v3 Authority Key Identifier:
keyid:82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:7d:97:9a:29:f9:5a:a7:e4:a7:24:b3:eb:5a:a9:7c:45:ae:
6f:26:3a:e3:2f:64:85:05:6e:e6:ee:8e:62:bf:fd:f6:0f:6b:
13:e1:ef:d7:f0:e0:7c:01:b0:af:08:1d:06:be:77:65:96:c7:
4c:34:a3:70:cb:51:76:22:94:da:b1:d3:8f:ad:62:ff:6f:d3:
fb:b3:ad:d9:40:a0:be:40:a1:39:28:1f:97:cf:07:cc:ff:3b:
a8:2f:8c:21:72:ea:d7:55:c5:75:86:5e:7c:30:1e:2f:a0:81:
c9:27:ae:7f:9f:61:84:ec:93:87:31:dd:bb:a7:51:51:7a:14:
4b:f1:31:41:c7:01:aa:5a:d4:b5:79:be:91:1d:58:6d:bd:69:
75:fd:53:69:26:59:8d:23:bc:16:77:98:9b:d1:97:ed:e2:86:
ce:2a:c4:1a:81:95:a6:80:ea:69:ec:8c:b2:14:c8:13:2e:13:
8c:3d:60:74:94:99:3e:9d:5a:b7:d0:8b:8f:fc:2d:0f:28:99:
79:96:a9:18:9e:3d:b9:d6:cf:2d:43:ae:7e:40:89:e9:51:e3:
94:7f:a0:e5:af:ef:12:de:7a:66:10:49:82:14:11:8e:de:5b:
1b:2c:7a:35:bf:64:1f:5a:cc:b5:f6:27:1d:bd:97:2d:35:c7:
5c:69:e2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:37 2025 by rpki-client