Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
File: v0lCu3vSTK23SF6M6lklCaPH2vU.mft (raw, json)
Hash identifier: 4VhHrJ0+N3UfBMJO1iPDrqvBESoTapOUvkRtnrJ9XV8=
Subject key identifier: A5:71:BB:6F:08:37:90:0B:0D:A7:C8:98:D6:36:FB:2C:3A:82:6C:AD
Authority key identifier: BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
Certificate issuer: /CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Certificate serial: 0195797E03BB1B2B6DB9482171EDCB6C457A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
Manifest number: 09C1
Signing time: Sun 09 Mar 2025 06:00:56 +0000
Manifest this update: Sun 09 Mar 2025 06:00:56 +0000
Manifest next update: Mon 10 Mar 2025 06:00:56 +0000
Files and hashes: 1: v0lCu3vSTK23SF6M6lklCaPH2vU.crl (hash: M1c/dx4zGvtZGGJsbtH6GU/DeRuH2Q1UTwpoG9k4E1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:7e:03:bb:1b:2b:6d:b9:48:21:71:ed:cb:6c:45:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Validity
Not Before: Mar 9 06:00:56 2025 GMT
Not After : Mar 10 06:00:56 2025 GMT
Subject: CN=a571bb6f0837900b0da7c898d636fb2c3a826cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:f2:78:2e:6c:22:d5:78:14:96:86:c5:19:
63:d4:56:f3:ae:f7:14:15:54:b4:93:7a:54:49:cc:
45:c8:33:63:ea:1a:4e:58:10:62:e5:29:e5:2a:61:
44:f1:c6:70:ee:20:52:b3:04:2d:30:ce:9c:32:30:
f9:23:33:59:3f:25:92:df:2f:11:3b:b2:b9:5b:16:
c0:58:93:3d:1a:eb:67:10:08:b2:4c:8c:fa:99:fa:
87:5c:a4:60:5f:90:af:e8:a4:21:eb:05:e6:d7:c2:
35:6c:62:4c:f5:36:bc:2b:e0:d8:26:de:f2:ef:54:
cd:3f:76:f4:b0:0f:9d:af:d7:58:17:28:71:ac:8a:
09:a4:98:92:eb:ed:12:19:1e:fa:34:de:b3:dc:d3:
22:2d:52:61:63:b7:69:04:a3:e7:a6:47:a4:6c:99:
b3:a0:ce:11:75:65:b0:37:ec:c2:cb:ac:a7:16:d7:
92:d9:9d:80:05:dc:da:82:05:2d:68:01:f6:f2:07:
54:14:f0:ff:67:6f:60:f5:9d:67:93:a6:0f:c3:f8:
49:d4:66:76:ab:0c:ed:a4:f3:22:bd:05:72:e9:aa:
ea:0a:d3:36:48:75:9e:f4:2d:c3:ef:f5:4c:e2:a7:
8f:84:a1:4c:bc:18:d4:8d:63:20:af:d6:9c:a7:22:
bd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:71:BB:6F:08:37:90:0B:0D:A7:C8:98:D6:36:FB:2C:3A:82:6C:AD
X509v3 Authority Key Identifier:
keyid:BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:64:a3:af:20:e3:b9:2b:2f:35:bf:a3:97:0d:2c:7d:3d:9b:
7b:98:32:09:f5:34:87:0f:8d:1d:ab:1d:c9:55:93:32:06:3f:
b7:4c:2c:7b:0c:18:42:fb:5b:c3:be:b5:70:b8:9a:d6:16:8f:
a6:d6:27:1f:0f:3b:54:91:ce:d9:ce:6b:f1:80:b1:36:8e:50:
72:ba:55:e0:64:a2:d6:48:00:a5:47:c7:b7:76:66:95:47:24:
d6:ce:26:8c:cd:d7:85:7e:04:ba:8c:50:94:f0:74:c8:08:bb:
28:bc:a4:26:eb:44:73:e6:ab:3b:23:ae:2b:bd:35:b0:70:bc:
76:c1:f0:f0:80:ae:ab:38:4f:eb:36:70:0b:87:0a:b1:bd:dc:
70:5e:a8:e2:6d:b8:7a:54:b9:2f:56:b2:2c:b0:bc:f6:4d:61:
db:80:b6:8e:ee:0b:0c:7d:8f:3e:db:55:3e:a3:b8:dd:4e:33:
b7:bc:26:6b:c3:09:72:26:f4:9c:40:e3:73:48:d2:b7:93:78:
1e:e1:9b:93:50:e8:51:80:e2:64:8f:be:6b:ec:13:2e:0a:18:
5e:88:26:ff:d6:d1:cd:83:30:f8:42:9e:17:51:24:ec:25:f7:
3c:2d:d7:e4:dc:35:76:43:a2:61:86:48:36:7d:73:44:5f:33:
86:af:10:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:19:25 2025 by rpki-client