Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
File: Rg7_G6LS91kqRNITPSB7KT4kGsI.mft (raw, json)
Hash identifier: jV9cZXU1CZJ1YAOfw7Sodvd58BhEsTypYtsDF5CAho8=
Subject key identifier: A5:B7:38:DD:17:0E:99:2B:2C:93:E1:2A:6D:08:DD:7B:D2:9F:EA:B5
Authority key identifier: 46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2
Certificate issuer: /CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
Certificate serial: 019652366FE8A4D1776AD0C838974373799C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
Manifest number: 0A03
Signing time: Sun 20 Apr 2025 08:00:21 +0000
Manifest this update: Sun 20 Apr 2025 08:00:21 +0000
Manifest next update: Mon 21 Apr 2025 08:00:21 +0000
Files and hashes: 1: Rg7_G6LS91kqRNITPSB7KT4kGsI.crl (hash: 0Kd/nvaf4NGgLPZBolwZOH6j17yfh4z9pberamLiJfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:6f:e8:a4:d1:77:6a:d0:c8:38:97:43:73:79:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
Validity
Not Before: Apr 20 08:00:21 2025 GMT
Not After : Apr 21 08:00:21 2025 GMT
Subject: CN=a5b738dd170e992b2c93e12a6d08dd7bd29feab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bc:5a:39:a1:91:bd:82:6b:90:54:b0:93:be:
dd:16:ac:87:c8:34:d9:00:5b:b6:eb:78:12:10:42:
e2:71:4b:e4:5f:7c:f9:72:34:77:99:f3:29:13:76:
05:fd:6a:d7:b9:92:0e:fb:39:78:0b:dc:12:87:5c:
8d:26:b3:41:7a:1d:b1:4a:c5:de:75:1a:18:2d:88:
29:3a:41:07:80:5d:6d:b2:b2:08:46:7b:17:7e:48:
35:83:5e:69:5e:3a:12:7b:06:79:52:f1:79:ab:6f:
d1:da:0f:ce:ab:b6:5b:65:d7:8d:61:cb:9a:c3:72:
06:af:09:78:57:43:d3:39:77:2e:bd:20:f5:fa:41:
df:ea:0e:05:f9:eb:94:6f:5b:b8:a8:fc:a0:10:42:
58:74:5f:bc:5b:5c:41:ba:f1:1d:9e:87:04:21:b3:
ff:2d:60:e3:3c:c8:90:d7:c5:3f:5f:99:15:e8:1a:
20:a0:12:eb:5f:41:f5:b8:74:46:c2:0d:56:92:f4:
e3:95:a6:7c:bb:03:6f:b1:10:e2:ea:51:fc:2b:19:
90:2f:4e:9b:54:98:0e:71:02:20:cc:9d:ed:72:03:
f9:60:f5:e9:44:5b:81:3b:96:4d:df:73:50:bd:75:
19:ef:ff:0b:16:94:a1:f6:96:2f:19:ab:32:89:14:
be:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B7:38:DD:17:0E:99:2B:2C:93:E1:2A:6D:08:DD:7B:D2:9F:EA:B5
X509v3 Authority Key Identifier:
keyid:46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2c:39:f3:17:54:23:57:2a:7d:01:93:be:f4:2e:24:09:e7:
25:6c:a9:18:dc:aa:9d:f0:b0:d5:31:3a:61:d6:b7:3f:10:5d:
89:cd:9c:1e:21:a3:8e:b5:da:f7:45:ac:41:96:bb:e1:96:37:
40:c9:ed:8b:fa:53:84:38:2d:b7:9a:ab:9b:2c:d7:21:03:cb:
e1:6b:0e:8b:75:03:c0:71:3a:36:45:d3:b3:b9:d0:fe:9e:f9:
d6:2e:34:ff:b7:99:ae:cf:a1:ff:fe:c0:20:0b:84:31:05:8f:
53:50:a8:52:cc:a1:9a:48:81:e7:eb:fe:2d:50:5c:19:f5:a4:
75:ff:2a:7b:94:97:ca:4a:b1:93:2b:84:25:b3:a4:3b:5e:30:
93:69:88:ae:e0:9a:52:66:61:c3:ad:cf:1f:e2:89:a4:5b:39:
06:18:0b:d5:11:39:bd:d3:14:a4:d8:d8:ca:09:8a:9d:b5:0b:
d5:6b:55:64:a3:6d:45:19:89:bf:2e:6e:48:ef:c2:1d:e8:cc:
7d:57:0a:e5:c3:80:00:a4:e8:b7:8a:d0:96:ca:e0:69:19:cb:
e6:a8:9a:5d:d9:b3:18:b7:a3:3a:48:86:82:26:62:df:e0:a1:
ef:1e:e6:b1:8f:ab:da:7c:af:f5:64:9f:60:8e:78:02:7a:49:
60:f8:f8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:45 2025 by rpki-client