Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft
File: sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft (raw, json)
Hash identifier: +Nwcd6t1EnJqR3DQLWivsZ6THYQ4JlMjQd0g2w5my3k=
Subject key identifier: 28:06:0C:2F:F1:2F:CE:61:54:3A:3C:4E:C1:6A:B6:7A:00:3A:0B:5E
Authority key identifier: B3:19:12:6F:33:DD:C2:A2:76:E0:B3:51:72:FE:5C:DA:AB:1A:54:16
Certificate issuer: /CN=b319126f33ddc2a276e0b35172fe5cdaab1a5416
Certificate serial: 019659EFF6D67410E89F88E1E596F83AE090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxkSbzPdwqJ24LNRcv5c2qsaVBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft
Manifest number: 06A1
Signing time: Mon 21 Apr 2025 20:00:20 +0000
Manifest this update: Mon 21 Apr 2025 20:00:20 +0000
Manifest next update: Tue 22 Apr 2025 20:00:20 +0000
Files and hashes: 1: sxkSbzPdwqJ24LNRcv5c2qsaVBY.crl (hash: UbQA3AG1fZ+V0/Gsb8/VsW54QuAjHiC2aL2gsbzTGNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxkSbzPdwqJ24LNRcv5c2qsaVBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:ef:f6:d6:74:10:e8:9f:88:e1:e5:96:f8:3a:e0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b319126f33ddc2a276e0b35172fe5cdaab1a5416
Validity
Not Before: Apr 21 20:00:20 2025 GMT
Not After : Apr 22 20:00:20 2025 GMT
Subject: CN=28060c2ff12fce61543a3c4ec16ab67a003a0b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:58:28:ca:65:26:28:0f:d7:01:aa:ab:30:ec:
d6:41:ca:d7:e1:bc:a1:3b:c1:48:f9:90:66:2e:44:
c3:0d:d0:16:d6:1c:be:ba:59:1d:64:29:23:f7:57:
54:cb:3b:98:37:19:ca:19:1c:0b:6c:72:99:cd:68:
de:15:2a:17:34:6a:cc:ea:cb:0e:2b:e4:8e:46:96:
07:f0:a1:2b:1a:aa:7e:75:c7:70:54:fd:8b:16:31:
a2:90:95:08:3c:7c:31:27:51:d8:4d:a4:d0:b4:ef:
6a:63:7f:ee:ee:60:7f:e7:4d:24:bb:1a:36:a3:dd:
e4:0e:59:b2:8a:33:90:37:0a:61:e8:66:93:2a:37:
6e:44:39:43:51:d8:2a:73:1d:0e:53:96:89:13:56:
bd:08:70:03:02:3a:eb:f5:b0:6b:b5:a5:e7:84:40:
3b:7e:0d:5b:60:6b:b7:77:f0:c0:8e:47:e4:a7:23:
41:a6:38:7a:88:4f:37:60:cd:f4:8f:59:14:39:67:
f9:0a:8d:a4:3a:57:e7:8c:2a:5c:9f:54:ac:46:a7:
b6:51:cc:00:46:40:ce:4b:2b:6a:90:cf:e2:cd:d5:
af:9b:a0:96:12:f9:17:35:34:74:cb:9d:d2:b0:ab:
95:22:1b:8a:21:3c:ff:85:1b:36:73:cb:70:d7:65:
3e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:06:0C:2F:F1:2F:CE:61:54:3A:3C:4E:C1:6A:B6:7A:00:3A:0B:5E
X509v3 Authority Key Identifier:
keyid:B3:19:12:6F:33:DD:C2:A2:76:E0:B3:51:72:FE:5C:DA:AB:1A:54:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxkSbzPdwqJ24LNRcv5c2qsaVBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e9:61:81:b6:c1:46:ad:b1:88:6e:20:04:ec:57:bf:5d:96:
64:05:0c:74:53:64:07:01:aa:42:59:14:9c:2c:4e:9c:11:17:
a4:7b:a1:fe:b9:82:32:0c:56:0e:bb:aa:65:27:12:89:71:c7:
ad:30:a9:d5:e3:1d:e0:84:7a:c5:81:53:9d:85:f8:3a:30:2a:
76:56:fa:e8:02:09:7b:78:e3:85:3f:4e:98:ce:91:24:59:8d:
b6:ec:f5:b6:0c:73:6b:ab:ca:fe:6e:f6:c1:c1:54:66:be:f9:
2c:91:20:69:7d:9f:63:35:0d:f7:a0:66:8f:cf:3a:18:c4:50:
8f:0e:ec:73:21:66:e4:47:1c:7e:26:e4:ab:b9:8d:91:e6:72:
4c:47:5d:aa:79:a4:5e:f6:4a:5c:a9:10:40:0e:9c:6e:0e:0b:
1f:42:88:bf:94:6c:33:b9:b7:cd:f0:46:46:5e:63:89:a0:47:
25:ca:23:a3:11:2a:dc:83:a6:3d:a9:e0:cd:7c:7f:63:fc:3d:
69:da:e9:59:2b:af:96:2e:98:f1:dc:e2:9e:74:68:16:ed:c5:
c8:04:9c:dd:12:40:a0:20:15:83:df:a1:66:25:67:c9:bc:ae:
36:e2:8b:d6:d8:5d:69:e5:05:95:3e:cb:5e:75:60:32:80:a6:
55:fe:d9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:19:49 2025 by rpki-client