Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
File: 6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft (raw, json)
Hash identifier: lukiaWR/AfL0GaOyVMIsX8SPTa0CUfvXJ2XGsjvisI0=
Subject key identifier: D8:15:BA:1C:EE:A5:CE:FF:F6:3B:52:4F:2B:31:0E:A4:D6:AE:51:B6
Authority key identifier: E9:27:F4:EA:ED:92:1C:A3:7D:63:EE:24:BA:F7:1E:4C:7F:FA:07:7A
Certificate issuer: /CN=e927f4eaed921ca37d63ee24baf71e4c7ffa077a
Certificate serial: 01965D969966CF84B3ED5BF9E211789B6537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
Manifest number: 0844
Signing time: Tue 22 Apr 2025 13:01:12 +0000
Manifest this update: Tue 22 Apr 2025 13:01:12 +0000
Manifest next update: Wed 23 Apr 2025 13:01:12 +0000
Files and hashes: 1: 6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl (hash: XkzojchmY248jcoIX2dE/mtgmKxDQ5imzVMlXqkRIBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:96:99:66:cf:84:b3:ed:5b:f9:e2:11:78:9b:65:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e927f4eaed921ca37d63ee24baf71e4c7ffa077a
Validity
Not Before: Apr 22 13:01:12 2025 GMT
Not After : Apr 23 13:01:12 2025 GMT
Subject: CN=d815ba1ceea5cefff63b524f2b310ea4d6ae51b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d7:ec:60:f5:81:c5:58:c5:f6:b5:f2:06:71:
f5:51:3b:fc:04:41:ae:78:ec:a9:45:0f:fe:d5:5e:
c2:a5:33:0e:05:95:b8:7c:fb:8d:73:a5:4f:2b:b2:
32:df:d0:47:52:a3:ab:06:2c:b3:32:f5:11:37:a0:
75:34:51:3b:13:bc:fa:d3:48:77:df:4a:94:0c:c1:
86:05:d2:a7:91:f7:ca:91:37:97:77:5b:01:fb:2f:
ee:94:02:ba:63:9f:40:7f:9f:9a:0e:ae:16:56:6e:
da:ff:d6:25:c7:73:85:b4:03:83:b3:a0:55:fb:13:
08:b9:a3:cd:7f:21:ac:e3:cc:e1:cd:f0:c8:56:59:
d5:b5:dc:c4:67:9a:99:64:19:20:4a:ce:d7:05:5e:
51:a2:f2:49:33:48:4e:eb:57:87:ae:6c:ca:7e:56:
6b:1e:d7:c1:68:3a:d6:71:b2:7b:32:dc:8b:52:52:
37:27:a0:93:ca:51:cb:5c:e0:73:ae:d1:a4:2f:52:
62:08:a4:dc:51:2c:90:d6:7a:e9:3a:80:b5:17:a4:
1f:0d:d6:ef:55:3c:08:a7:2e:f3:43:25:1c:2a:32:
23:99:44:7e:ab:da:54:ba:35:f5:0d:da:0a:9f:75:
d5:40:c9:13:d9:ac:7f:29:8b:ab:f9:4f:bc:8e:76:
62:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:15:BA:1C:EE:A5:CE:FF:F6:3B:52:4F:2B:31:0E:A4:D6:AE:51:B6
X509v3 Authority Key Identifier:
keyid:E9:27:F4:EA:ED:92:1C:A3:7D:63:EE:24:BA:F7:1E:4C:7F:FA:07:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2f:c2:2a:c4:20:f7:f7:0f:0d:35:fb:f9:2f:54:b9:5f:8c:
01:e4:b4:99:97:6d:fd:de:57:09:dd:49:b8:c5:bd:ed:20:78:
4c:1f:ab:93:5c:e0:6b:70:b2:ec:fc:28:cd:d0:16:1b:3b:30:
af:27:ea:d1:73:94:c1:dc:00:6c:20:ce:1a:c7:b7:b0:45:d5:
a3:4c:ac:0d:f6:35:6e:8a:e4:37:08:9f:49:4a:6a:64:a6:37:
97:4c:03:0d:e0:54:b8:11:fa:01:e1:ba:0b:a5:c7:cd:0e:f6:
9c:a4:c8:b0:0c:20:34:e7:24:e4:32:97:ce:bf:02:a9:69:a9:
8e:c2:41:33:d6:64:9c:80:e7:92:69:e0:ea:08:88:22:fe:e0:
c8:eb:e2:51:ef:e0:ce:de:0c:f6:88:1c:99:da:2f:b8:58:fe:
62:fd:4e:4c:2f:34:db:6b:14:4b:56:7a:68:02:4d:19:43:27:
ca:12:c0:db:c3:6e:b8:1c:b5:55:ca:7d:db:76:f1:13:f7:25:
64:41:c2:ea:1f:f2:85:5e:0f:1d:b6:ac:c9:24:e0:90:dd:67:
9e:a8:9f:68:c6:9d:ee:32:b3:b2:21:c7:b7:ca:ce:f4:9c:e6:
2e:98:e4:d6:98:25:52:c6:5f:56:5e:12:ca:81:da:77:45:98:
7e:5a:ad:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:56:41 2025 by rpki-client