Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.mft
File: 58OrlrdMKsTwSuYqt-gs3xmI7UA.mft (raw, json)
Hash identifier: kr9eHI8Z6jhJA3l+ClFFnN5SN5zdKiLGVn4ycu37New=
Subject key identifier: F5:9B:CB:A1:3C:8E:77:14:09:58:52:4C:8F:70:08:21:05:69:B4:7D
Authority key identifier: E7:C3:AB:96:B7:4C:2A:C4:F0:4A:E6:2A:B7:E8:2C:DF:19:88:ED:40
Certificate issuer: /CN=e7c3ab96b74c2ac4f04ae62ab7e82cdf1988ed40
Certificate serial: 019648C568601724767480D0EAA303075171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58OrlrdMKsTwSuYqt-gs3xmI7UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.mft
Manifest number: 0679
Signing time: Fri 18 Apr 2025 12:00:18 +0000
Manifest this update: Fri 18 Apr 2025 12:00:18 +0000
Manifest next update: Sat 19 Apr 2025 12:00:18 +0000
Files and hashes: 1: 58OrlrdMKsTwSuYqt-gs3xmI7UA.crl (hash: 4y+KITVu0tzJng5Fj46jb6dxLTERWeUtHPLJpUzxHeo=)
2: tRQVAZPhSI7yY2YBf58wHloNtVk.roa (hash: x6U/gqCwfyDYCGrA4HX4YKbEtJbHihcQ4Z9Ks5Bgn58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/58OrlrdMKsTwSuYqt-gs3xmI7UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:c5:68:60:17:24:76:74:80:d0:ea:a3:03:07:51:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c3ab96b74c2ac4f04ae62ab7e82cdf1988ed40
Validity
Not Before: Apr 18 12:00:18 2025 GMT
Not After : Apr 19 12:00:18 2025 GMT
Subject: CN=f59bcba13c8e77140958524c8f7008210569b47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:5c:9c:26:2e:f8:ab:17:e3:1d:73:a6:72:
b7:da:81:b3:19:33:e7:00:7b:2f:c7:59:28:2c:12:
78:bd:b1:68:d8:57:54:a9:20:46:ad:96:03:71:ec:
24:23:47:ae:c8:05:f8:92:d8:c1:fe:bb:28:68:23:
e9:f7:1c:6c:cd:b1:15:b6:cc:62:c4:e7:82:e0:1a:
bd:fb:bd:84:85:ab:db:fa:79:eb:cf:47:95:92:c3:
dc:90:42:21:9c:96:c6:c6:e0:fc:4d:90:43:c5:65:
51:a3:3f:a8:0c:72:84:46:15:f8:f8:62:0e:59:2e:
da:76:44:b6:f2:85:30:31:e8:b4:5c:90:78:48:1b:
fd:07:ee:af:6d:b0:2a:a4:ad:92:af:ed:ce:44:8c:
e0:ed:de:df:be:0e:f2:02:89:5a:f1:88:2f:e9:20:
4d:89:18:0a:15:b0:a3:95:3d:c1:e1:ec:94:af:f2:
4c:f5:e7:f0:0f:e9:a0:78:58:c3:26:c3:92:e8:96:
af:c1:b9:ad:ab:19:d1:13:9b:67:f3:c8:19:1e:a9:
c9:1b:00:46:0c:68:b2:49:38:67:cb:ea:b3:59:d8:
5a:31:24:fa:42:df:20:d4:ad:29:27:f0:7f:b9:a7:
49:4c:e2:d2:ca:37:cc:e9:86:19:ff:61:0b:86:7d:
ec:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9B:CB:A1:3C:8E:77:14:09:58:52:4C:8F:70:08:21:05:69:B4:7D
X509v3 Authority Key Identifier:
keyid:E7:C3:AB:96:B7:4C:2A:C4:F0:4A:E6:2A:B7:E8:2C:DF:19:88:ED:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58OrlrdMKsTwSuYqt-gs3xmI7UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:be:2f:6d:96:ef:f8:7b:fc:27:36:09:85:7e:07:ab:33:8e:
ba:48:d6:98:0f:fe:41:7f:a5:1e:7f:56:61:e4:1d:6b:91:28:
b4:10:d5:bb:b3:f6:eb:7c:5f:4d:98:f2:79:12:4a:16:d0:4b:
45:08:cf:8a:3e:26:29:ce:bb:a8:8b:f6:9b:ec:2e:86:3f:07:
c2:2b:74:79:d9:15:bc:b6:aa:22:25:5e:9d:37:d8:f6:3e:8c:
b1:4f:68:e9:86:17:e1:8e:b9:54:76:60:16:4a:ca:17:88:99:
3b:a8:2c:f2:20:f2:f7:82:f0:4e:f9:25:d7:23:6c:f2:6c:0f:
6f:ca:41:08:f2:ea:a8:ef:8b:8b:bc:c5:ac:2f:e1:15:25:c5:
1d:5d:84:8d:94:fb:df:f3:aa:51:3a:74:e8:61:81:3c:cf:ad:
78:b3:d2:f8:e5:31:b3:fb:cf:5b:d5:94:fb:70:b9:b8:77:df:
ba:d6:6d:f2:10:3b:4e:06:b5:6c:7e:e8:c6:8a:7a:ae:02:ad:
44:5b:7d:cf:2b:96:7f:34:95:a9:4e:8d:ce:02:41:b8:28:9e:
b2:dc:b8:07:fe:d2:ce:91:72:db:a3:89:b0:c2:0a:47:67:47:
ef:9f:37:07:df:90:83:53:90:84:40:64:c6:c6:aa:4c:67:4f:
be:ba:f9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:58:30 2025 by rpki-client