Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
File: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft (raw, json)
Hash identifier: Hk62leuzGB1bJBgjM2wk67SBZs3qRrBIE4taCjATYIs=
Subject key identifier: EC:D0:B7:F9:01:4B:7B:FD:E6:3A:BD:58:F2:8C:35:60:E8:E8:83:0F
Authority key identifier: 44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
Certificate issuer: /CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Certificate serial: 0196138F757EDA0843E317A4CDE5FE0F8E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
Manifest number: 14D9
Signing time: Tue 08 Apr 2025 04:01:30 +0000
Manifest this update: Tue 08 Apr 2025 04:01:30 +0000
Manifest next update: Wed 09 Apr 2025 04:01:30 +0000
Files and hashes: 1: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl (hash: K+bwiFTOKchdLxTvGB0vCDEiCRuaFsHUKH1CJh3U0Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:8f:75:7e:da:08:43:e3:17:a4:cd:e5:fe:0f:8e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Validity
Not Before: Apr 8 04:01:30 2025 GMT
Not After : Apr 9 04:01:30 2025 GMT
Subject: CN=ecd0b7f9014b7bfde63abd58f28c3560e8e8830f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:f4:9e:ee:eb:be:66:57:1b:51:cd:d1:63:
ee:5b:c7:b6:3a:84:57:e7:76:db:04:8e:f2:87:76:
45:d4:89:a8:56:99:61:56:be:e3:a4:7d:d1:b9:62:
87:7d:a7:63:fb:6b:fd:b0:1d:eb:7b:a8:18:91:50:
f7:da:53:e3:78:b0:7d:26:a0:9c:25:5c:a7:91:c0:
7a:b4:bf:b5:85:ee:94:67:25:38:8d:11:82:d4:3b:
a1:b9:29:bd:9c:a3:b8:83:bf:f3:c6:85:ff:50:77:
37:ea:da:2d:08:92:e4:d4:cf:4a:34:cf:1b:e9:67:
56:91:28:76:d8:ce:93:04:70:ce:5d:06:18:bc:41:
20:4e:d5:49:f1:55:be:0a:81:69:d5:e4:bd:70:f5:
4f:24:6d:45:4d:52:f5:ba:86:bb:84:b9:73:f0:8f:
f6:e7:78:88:86:20:11:51:b4:7d:6f:b1:83:30:49:
62:5a:28:4b:50:27:91:28:e3:db:a4:be:3a:36:b7:
b9:2e:d1:f2:0a:72:8e:9e:9c:0a:3d:52:68:74:82:
93:f2:99:08:b3:49:7d:31:10:20:eb:c4:13:e8:c5:
73:d8:f7:7b:dc:a7:00:9b:bc:8a:8a:bf:40:e8:63:
a6:fe:1e:3b:7d:7c:6a:42:d1:39:c2:13:4e:b4:a0:
68:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D0:B7:F9:01:4B:7B:FD:E6:3A:BD:58:F2:8C:35:60:E8:E8:83:0F
X509v3 Authority Key Identifier:
keyid:44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5d:5d:c9:de:3a:34:58:8e:f2:6d:ef:64:ee:2d:75:fb:d9:
95:6a:56:b6:38:e8:04:f7:3d:a3:75:b6:a2:9c:18:df:94:4e:
c8:f2:76:13:18:88:3a:e9:ee:69:3a:8b:ff:58:c7:f6:d4:5f:
7c:bb:80:90:09:24:26:e6:93:48:49:94:4d:0c:3c:ef:22:ef:
be:5b:52:79:6f:c3:1a:07:26:80:af:85:2a:62:65:e4:7a:64:
6b:14:f1:92:42:ef:28:84:a6:92:6c:32:76:45:c8:3b:61:35:
fd:17:cb:e1:b4:ec:0d:17:29:b7:5a:96:c7:e5:11:51:97:da:
17:7f:2e:33:37:14:f8:2d:31:bd:3d:f3:aa:96:a4:cf:76:39:
be:ca:27:19:0d:91:27:80:eb:cb:62:4b:ed:55:42:70:8d:42:
ff:49:3a:ca:61:07:49:79:73:f2:a7:82:ea:0a:b0:b1:0a:06:
af:80:cf:86:77:df:83:9c:de:63:f0:0c:d3:4c:22:41:80:2d:
54:50:84:4f:02:37:53:a3:b5:f0:7e:42:0a:b5:8e:28:fd:30:
01:17:fc:ec:2d:29:dc:04:21:34:8d:e6:f9:cb:a0:ca:66:23:
5a:80:66:96:b3:16:4d:ae:58:cf:25:78:8d:0e:6c:aa:d5:57:
6f:70:51:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:06:42 2025 by rpki-client