Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
File: erUEHcNxgO4qD5_dX11lzWxs3wQ.mft (raw, json)
Hash identifier: 2CzD+orXEPTleL+GivS+f/p27VOIvV8bn4c0CJoVBlQ=
Subject key identifier: 79:81:A7:85:4C:D2:22:AF:95:C1:AA:4A:D9:C8:13:CF:2F:19:D9:A4
Authority key identifier: 7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
Certificate issuer: /CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Certificate serial: 0196568148B15F6D54C2AAAABACDA165C8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
Manifest number: 0FAA
Signing time: Mon 21 Apr 2025 04:00:35 +0000
Manifest this update: Mon 21 Apr 2025 04:00:35 +0000
Manifest next update: Tue 22 Apr 2025 04:00:35 +0000
Files and hashes: 1: erUEHcNxgO4qD5_dX11lzWxs3wQ.crl (hash: RI2GR4d6/NF0ZWhxhFofT9M1/qXwpbH5+EMidI91cDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:48:b1:5f:6d:54:c2:aa:aa:ba:cd:a1:65:c8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Validity
Not Before: Apr 21 04:00:35 2025 GMT
Not After : Apr 22 04:00:35 2025 GMT
Subject: CN=7981a7854cd222af95c1aa4ad9c813cf2f19d9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a1:b6:41:e6:2b:4f:ea:26:92:a7:25:28:73:
1c:77:31:97:96:af:da:f7:fd:b2:34:f4:b5:81:68:
01:78:61:3c:bc:f8:ed:8d:0a:90:fd:5a:71:44:f8:
b5:88:6e:34:cb:d3:d6:24:c0:0b:ab:47:33:c0:a6:
73:13:95:1e:15:22:61:6d:bb:b8:ff:86:76:a3:8c:
03:12:cb:cf:2d:36:3f:10:f9:3b:e0:de:24:eb:8c:
4b:62:6c:52:69:e7:df:80:45:4c:02:8f:65:e0:c1:
15:33:67:f8:ba:c8:27:4c:bb:aa:5e:88:7c:20:48:
fa:1e:36:45:8f:9a:77:68:07:4b:b4:5c:7c:99:87:
46:d6:c5:b9:d7:90:ed:f5:c6:0d:6b:2c:2c:e4:51:
b0:52:0b:ea:f8:53:d3:93:0c:3d:83:15:45:bd:98:
c3:a1:9f:cd:ca:93:61:fe:70:fa:6a:47:93:5e:10:
9d:56:39:f3:0b:aa:76:62:fb:c5:a5:26:fc:5f:5d:
5e:41:ef:75:1b:aa:f8:9a:9e:7b:a0:b5:2a:2a:89:
62:3c:cf:70:ae:d7:8a:0f:69:28:07:22:0f:22:5b:
05:60:d4:d9:77:8a:10:b2:92:96:30:58:f9:31:02:
c4:04:77:fe:15:af:60:23:22:75:c7:8d:82:16:4a:
c6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:81:A7:85:4C:D2:22:AF:95:C1:AA:4A:D9:C8:13:CF:2F:19:D9:A4
X509v3 Authority Key Identifier:
keyid:7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:51:a6:8f:f9:74:30:a2:58:28:8f:cb:66:13:df:e4:fc:04:
89:43:73:da:1a:30:10:a8:1c:6c:cc:e3:73:81:d2:18:7b:ba:
ab:7b:e5:56:9f:26:6f:46:2d:52:e1:d9:27:f2:5b:a0:c2:ec:
c1:d7:e3:b3:2c:88:ec:27:27:33:de:c9:9a:a7:67:78:42:88:
58:7d:bb:d3:11:47:37:8f:55:d8:c3:62:91:8b:40:50:d7:6c:
ba:05:eb:7e:6d:10:14:b6:7f:61:1d:00:75:aa:6b:37:9d:de:
c1:eb:63:1f:56:0d:0e:8e:78:60:06:c3:dd:4e:49:5d:50:68:
bb:d2:5d:f8:81:c0:e9:8a:bf:16:7f:22:5e:5a:ea:e3:de:6a:
ce:e0:84:51:2f:f0:6b:25:61:51:43:30:42:80:0d:0d:fb:a8:
ce:25:74:f5:a5:85:57:f4:80:59:05:be:17:7f:88:b8:f0:5d:
3f:8e:71:7b:95:23:69:6f:d7:3c:b9:d4:55:44:35:7b:7c:cf:
c0:c2:5c:af:d2:1e:46:be:ec:21:f6:c9:b2:0c:01:e1:51:a6:
b4:48:87:db:8c:c4:9a:a2:0c:83:39:7d:a7:61:9a:e1:90:62:
57:a4:00:bd:5b:58:fb:bb:b1:a2:b9:03:7e:12:1a:83:33:26:
46:cb:71:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:58:00 2025 by rpki-client