Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
File: 0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft (raw, json)
Hash identifier: LLeskPdBGhzQfYkSGdth4OKQlhpPcqOJ10vJ7TCqfWY=
Subject key identifier: B8:F0:80:E7:76:5B:41:46:64:F1:50:71:05:5D:4F:FE:4F:F0:8E:A3
Authority key identifier: D1:49:7B:32:47:76:7D:34:99:91:E9:96:CA:B8:AF:7D:49:94:2A:F4
Certificate issuer: /CN=d1497b3247767d349991e996cab8af7d49942af4
Certificate serial: 01964AEB56E561D2142201B1550AB3592936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
Manifest number: 1489
Signing time: Fri 18 Apr 2025 22:00:59 +0000
Manifest this update: Fri 18 Apr 2025 22:00:59 +0000
Manifest next update: Sat 19 Apr 2025 22:00:59 +0000
Files and hashes: 1: 0Ul7Mkd2fTSZkemWyrivfUmUKvQ.crl (hash: bltvqtBIbG3B2VgaH5NErIQmSgakY7jCtFYI+GddKLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:eb:56:e5:61:d2:14:22:01:b1:55:0a:b3:59:29:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1497b3247767d349991e996cab8af7d49942af4
Validity
Not Before: Apr 18 22:00:59 2025 GMT
Not After : Apr 19 22:00:59 2025 GMT
Subject: CN=b8f080e7765b414664f15071055d4ffe4ff08ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f8:cb:fb:d3:d3:47:71:67:46:7d:82:9a:17:
b0:4f:a0:68:b9:06:d9:da:e2:b4:e5:92:38:b8:51:
72:4e:fd:4d:78:e7:02:44:5c:ba:28:61:b7:65:59:
0e:9b:4e:15:ee:01:e5:10:ca:e7:e7:5d:fc:bd:fb:
91:10:26:8b:99:ef:91:c1:94:97:e2:92:dc:9f:67:
7d:66:51:17:6e:87:0e:0b:58:60:e7:66:ee:7e:e0:
72:21:72:3a:53:3d:f8:7d:b4:7e:0b:94:de:59:46:
57:ae:1f:87:15:13:0a:ba:cf:6f:08:52:df:ea:7c:
67:d2:2e:ca:06:59:b9:33:ae:d3:dc:ee:f7:a3:16:
8d:1b:98:72:c3:ea:4a:bc:78:ab:c8:7c:80:c6:7e:
bd:17:58:55:87:84:09:a1:59:f5:58:c1:52:c2:3b:
45:18:dc:e7:b4:fc:16:2c:f9:c6:51:07:9b:c8:24:
e1:11:ce:a6:49:9a:07:0a:b4:6e:cf:7a:5a:42:6e:
5c:53:06:7f:14:e4:ba:e0:73:1b:ec:63:d9:57:18:
ba:81:98:85:bf:72:7b:a2:07:05:e7:3c:ca:0d:0e:
54:ec:d6:a6:d2:82:4c:6d:d4:87:1f:10:69:4b:78:
fc:6b:86:af:11:cd:c1:aa:92:0e:cb:88:44:27:58:
a7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F0:80:E7:76:5B:41:46:64:F1:50:71:05:5D:4F:FE:4F:F0:8E:A3
X509v3 Authority Key Identifier:
keyid:D1:49:7B:32:47:76:7D:34:99:91:E9:96:CA:B8:AF:7D:49:94:2A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:03:ed:c4:a8:e6:b7:06:79:b0:15:b6:b7:58:d4:4d:93:e9:
6e:0a:2b:bd:cd:5e:43:9b:aa:18:37:3e:51:51:7d:07:07:4b:
06:2c:6b:d7:43:af:54:67:f7:a9:7f:66:a0:24:71:fc:7c:14:
7b:ef:b8:60:4a:bf:94:8d:14:c6:2e:1f:7c:34:ca:ef:7e:db:
b4:c1:87:70:6b:70:ce:45:73:89:64:82:8f:6e:cc:8d:05:03:
49:a4:b4:e1:72:b8:a7:cd:b0:94:5e:cd:5b:0b:d9:4c:34:2f:
90:b0:a5:65:5e:7a:69:ba:d1:c3:c1:f9:58:49:5f:24:bf:7b:
e2:00:fa:8d:aa:92:c3:57:d2:a3:8a:0b:71:64:31:3d:32:c3:
bc:37:9f:31:ea:a9:8e:d2:99:97:27:30:32:42:8a:7c:dd:5f:
3a:59:ed:9c:0a:16:63:62:92:07:45:e7:c9:2e:5f:1d:c0:8b:
41:e2:20:46:4d:ca:54:66:1d:4d:61:89:d0:3d:55:09:90:cd:
bf:8e:5e:a2:e0:0c:49:69:7f:b4:8c:2e:c4:5f:16:be:16:36:
d1:d0:86:23:6c:56:41:82:51:a1:c4:47:16:4c:54:02:c3:c9:
6a:15:72:3d:b8:bc:8e:99:04:ae:5d:fb:06:59:f8:b1:94:1a:
98:c0:88:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:51:50 2025 by rpki-client