Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
File: d-Sz2VlinaKIrNim3gA-zgyTTbE.mft (raw, json)
Hash identifier: es2bLjvtVXgDB8ykka2sAWGHobSJhh7bDFMcB5n7z1k=
Subject key identifier: C3:C0:71:10:91:CC:02:1A:DC:AE:7B:DF:E1:7B:8D:C6:15:2D:51:25
Authority key identifier: 77:E4:B3:D9:59:62:9D:A2:88:AC:D8:A6:DE:00:3E:CE:0C:93:4D:B1
Certificate issuer: /CN=77e4b3d959629da288acd8a6de003ece0c934db1
Certificate serial: 01965E716D218854872ACBB135A4E6DD3FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
Manifest number: 039E
Signing time: Tue 22 Apr 2025 17:00:13 +0000
Manifest this update: Tue 22 Apr 2025 17:00:13 +0000
Manifest next update: Wed 23 Apr 2025 17:00:13 +0000
Files and hashes: 1: d-Sz2VlinaKIrNim3gA-zgyTTbE.crl (hash: kCMjl/NqMNFmRG7OWy0m7/XH4WLCzPCGkV7tX01nKmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:71:6d:21:88:54:87:2a:cb:b1:35:a4:e6:dd:3f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e4b3d959629da288acd8a6de003ece0c934db1
Validity
Not Before: Apr 22 17:00:13 2025 GMT
Not After : Apr 23 17:00:13 2025 GMT
Subject: CN=c3c0711091cc021adcae7bdfe17b8dc6152d5125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:29:ff:2d:3d:4d:1c:46:77:ce:9c:ff:cd:
1f:ed:0c:61:3a:73:c9:b3:32:a7:ef:92:77:d7:53:
91:f6:5e:b9:ed:86:12:5c:6c:fb:b4:7e:5f:ff:33:
ee:be:a5:bd:94:b5:dd:b1:36:69:f7:ea:eb:26:60:
bc:57:13:60:23:eb:1e:f2:b9:e3:7c:2a:d4:49:9a:
53:34:c9:52:2d:f6:3b:4b:9d:5d:56:a4:a0:ce:23:
07:a2:20:6c:fd:fc:de:c7:6b:38:37:90:00:8a:b0:
67:b9:d5:1d:7a:4c:7d:c0:56:f9:ad:de:27:6d:7b:
8c:34:87:18:ed:c6:b5:1a:63:05:7f:e8:fe:9c:fa:
83:b8:b7:99:c8:72:17:be:45:d9:55:6a:a2:e4:92:
6a:96:ff:c6:c0:71:d4:f0:b0:3c:59:86:90:f9:77:
90:f9:8e:b2:99:70:3b:af:de:0d:32:1b:03:1e:a0:
aa:71:c3:47:84:39:cd:d2:8f:7a:0d:42:e1:9f:c3:
27:4d:33:a8:86:9c:52:9b:da:a1:8d:6d:32:7e:e8:
eb:f0:72:56:38:4b:f4:e1:fe:dc:21:ac:f3:a7:e9:
32:6b:26:6c:25:a6:55:14:e0:73:bf:38:c8:4d:f4:
3b:db:43:58:fe:51:86:33:2e:b4:84:3e:87:00:92:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C0:71:10:91:CC:02:1A:DC:AE:7B:DF:E1:7B:8D:C6:15:2D:51:25
X509v3 Authority Key Identifier:
keyid:77:E4:B3:D9:59:62:9D:A2:88:AC:D8:A6:DE:00:3E:CE:0C:93:4D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c6:f5:e6:47:ce:20:48:2e:5d:1c:10:df:f3:f9:a7:1a:34:
15:04:73:52:28:53:d7:0b:84:93:b5:66:ee:cc:db:26:44:8b:
3e:cb:70:c8:ba:88:23:37:94:4e:6e:ad:ac:b3:c2:82:b3:e1:
6b:3c:be:10:b4:2d:cf:5a:a1:7b:5c:e5:a3:9a:3e:30:eb:4a:
35:07:aa:2d:4d:db:81:4a:a9:80:39:c7:65:a2:b6:bc:f6:28:
1d:59:8a:db:3b:67:12:40:af:8b:95:ec:4c:06:2d:5f:c7:b9:
72:33:c1:18:01:7a:7e:f8:5f:f9:2e:a6:0a:9a:e3:0c:72:eb:
bf:6d:67:59:e0:5a:8e:d9:33:26:55:a5:fd:d9:84:b3:1d:58:
e2:c1:23:4b:6c:43:6d:13:a5:51:86:76:8f:23:f3:a9:74:cf:
de:80:8c:b6:1b:4a:6f:53:6a:8b:e2:62:a7:e5:1a:a3:f5:8b:
05:87:4f:fa:10:8b:44:83:c5:8a:98:a6:38:da:72:a7:7c:29:
34:76:58:a3:5c:97:62:da:23:1b:b2:82:30:a6:34:a9:38:3b:
f6:8f:46:da:2f:c9:c8:7d:17:1a:2b:0c:80:f2:2d:22:4c:37:
04:8b:d3:4e:8f:86:ba:86:ae:47:e5:f3:75:55:0c:d1:1c:74:
ae:6d:77:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:52:15 2025 by rpki-client