Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json)
Hash identifier: 7AIYFW9kaoq7CnqSIGcKGrDBHnRRmzpll9wBwXC7o9I=
Subject key identifier: 68:50:1D:68:DE:12:55:2C:9C:53:37:FD:53:08:13:63:EB:86:AC:6D
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 019613213F111CEF5F0658E4870D17539F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
Manifest number: 117B
Signing time: Tue 08 Apr 2025 02:01:07 +0000
Manifest this update: Tue 08 Apr 2025 02:01:07 +0000
Manifest next update: Wed 09 Apr 2025 02:01:07 +0000
Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: M7JL9LUx2NwhqbW6jzRnLHmfWo7OQpymw3jT8yDN4sQ=)
2: uyTAYMzc27HPC3St2DUdxuZl0vQ.roa (hash: nhOGHiWnpfS9y1HiircEbA65FySC+R6VBPodKzedGIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:21:3f:11:1c:ef:5f:06:58:e4:87:0d:17:53:9f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Apr 8 02:01:07 2025 GMT
Not After : Apr 9 02:01:07 2025 GMT
Subject: CN=68501d68de12552c9c5337fd53081363eb86ac6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2a:26:19:a3:94:66:ae:0b:48:5d:99:5e:9e:
16:1d:23:be:d3:85:92:8e:2e:e2:0a:35:bc:a1:64:
b2:81:0d:d0:55:23:da:d4:9c:d2:46:67:a5:d6:04:
00:ef:50:c3:c2:02:c1:91:96:2f:49:80:fe:29:d3:
66:b9:06:4b:70:e9:27:01:8f:18:56:0c:94:b9:ad:
b0:86:db:06:bf:8d:02:5c:27:92:18:17:31:29:1a:
36:f5:77:2c:75:59:3f:15:de:04:23:90:73:5b:72:
28:76:0d:12:5c:58:ad:0b:ac:7e:e7:bc:6a:81:26:
34:56:25:c6:12:3b:3f:a2:26:18:f0:3f:70:53:f8:
07:2d:ff:c5:a0:69:6c:87:55:47:ef:dd:05:29:0a:
a4:a3:fe:ab:37:3f:07:33:a9:db:85:ee:c9:29:d7:
8a:f9:04:0d:15:2d:24:33:ed:89:55:f3:a3:10:20:
ff:4a:81:38:7c:97:3d:aa:65:f5:c9:11:9c:da:45:
ed:78:f7:dd:02:63:ab:e2:e1:7b:19:ee:80:d6:5b:
7e:2c:13:5a:a5:b7:69:25:0a:3c:fe:ff:59:92:85:
26:eb:a2:30:60:f9:1a:56:0e:58:de:4a:ff:a9:e2:
58:37:92:38:b6:d2:d5:ea:d5:78:37:20:19:2e:b7:
a3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:50:1D:68:DE:12:55:2C:9C:53:37:FD:53:08:13:63:EB:86:AC:6D
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bf:ca:49:5f:c2:af:32:49:26:fe:ca:ab:c8:7b:e5:6f:93:
45:04:05:80:2c:ba:78:67:89:c1:a0:55:3a:2f:6c:09:37:6f:
6e:60:a6:8e:f5:0c:71:91:7b:bf:fa:90:32:8a:8c:ae:c0:24:
55:f9:21:0d:9f:1a:64:72:3e:73:c5:c5:9e:ab:6d:99:77:f3:
06:37:06:c0:4e:9f:35:42:3e:4f:8c:2e:b0:05:ef:4b:f9:01:
ae:0a:18:9c:20:00:3c:ff:22:75:26:d3:cc:5b:cf:71:aa:7b:
54:1e:5a:cb:eb:d2:5a:0e:ea:b0:6d:f7:d8:2a:71:14:94:6e:
69:73:ad:b5:8b:db:1b:03:31:65:df:8e:4e:31:6a:a2:7a:c1:
fe:1e:21:fc:b9:57:e4:d5:8f:f5:2e:32:4f:a4:a6:de:2e:b5:
2a:d0:8a:21:1e:89:91:df:83:f9:5b:71:36:1a:58:ce:b0:c2:
9b:3d:91:c6:ba:79:9e:53:e4:b0:63:bb:fe:7b:fe:8b:23:7c:
48:d8:f3:0a:dd:71:b4:a2:2b:4a:29:e6:5f:a4:23:08:87:c1:
1b:74:be:f1:d6:86:fd:c1:09:df:4b:9f:58:1e:26:93:fe:ca:
23:f5:66:c8:ad:e8:68:2f:57:4b:1b:85:2d:fe:13:f0:78:6a:
f4:3f:36:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:51:34 2025 by rpki-client