Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
File: r06GL461X0-CVOLIWLcvQzl_4_o.mft (raw, json)
Hash identifier: aGLm3mBsM07MA7xiN6XDDOKNds0BJJxN+PdpDidWDns=
Subject key identifier: 0C:5D:37:B8:09:54:39:5A:6E:76:E4:8F:67:A9:73:5B:8F:53:99:E1
Authority key identifier: AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA
Certificate issuer: /CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa
Certificate serial: 01962ABCEDBA407D657CBB93650EFD1F3447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
Manifest number: 14E6
Signing time: Sat 12 Apr 2025 16:02:26 +0000
Manifest this update: Sat 12 Apr 2025 16:02:26 +0000
Manifest next update: Sun 13 Apr 2025 16:02:26 +0000
Files and hashes: 1: r06GL461X0-CVOLIWLcvQzl_4_o.crl (hash: EI8v225k9LT/iFk4GddwH7hUSflRuPcDyxhVW41UJ44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:ed:ba:40:7d:65:7c:bb:93:65:0e:fd:1f:34:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa
Validity
Not Before: Apr 12 16:02:26 2025 GMT
Not After : Apr 13 16:02:26 2025 GMT
Subject: CN=0c5d37b80954395a6e76e48f67a9735b8f5399e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:65:b2:62:aa:5f:6e:8c:66:8b:dc:3b:19:
e9:5e:79:c9:db:69:85:26:11:0d:af:5b:5b:e9:c9:
26:c6:7a:28:6c:b0:d8:e7:ad:ab:74:af:d4:d6:c6:
8f:85:01:82:9c:40:09:34:57:2d:24:6d:c2:88:09:
d1:97:02:dd:c6:75:59:f7:28:07:65:b9:26:be:ae:
02:57:7a:73:ef:ed:7e:51:60:f1:2b:d5:2c:32:5e:
62:c3:08:39:61:2c:62:22:2d:8b:42:22:43:e4:de:
8d:36:00:bd:0e:f3:d4:68:33:c0:e9:c7:12:39:19:
ec:95:b0:3d:ce:06:bb:8d:77:f8:c1:ee:85:06:83:
80:28:20:a1:71:a5:80:08:ff:1e:7b:95:e8:3d:86:
7e:aa:f2:d5:f8:ea:17:ba:a1:de:44:25:c9:5e:23:
9e:69:74:c7:7e:5b:11:58:6a:41:b0:45:0a:88:9a:
53:71:7b:36:9f:70:4e:44:84:2f:d3:02:3d:94:45:
a9:e9:ac:77:00:55:0b:05:d9:61:b1:82:f3:13:7c:
01:24:d2:6e:5e:68:83:55:45:c9:c4:63:49:2b:34:
13:3b:20:16:7a:a1:88:e7:76:4e:23:8e:5a:27:fe:
12:6f:6a:bd:59:8f:bd:6f:dc:31:66:bd:ce:a2:ed:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5D:37:B8:09:54:39:5A:6E:76:E4:8F:67:A9:73:5B:8F:53:99:E1
X509v3 Authority Key Identifier:
keyid:AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:53:65:ea:4c:20:22:c2:92:5d:55:62:63:75:10:74:de:4a:
83:31:06:d4:64:23:fa:8a:49:22:e8:ef:46:b6:5c:a7:22:20:
fe:a3:84:06:50:4d:6d:ff:2b:a8:d5:aa:67:62:f0:63:15:52:
51:6d:4c:c2:25:d5:1d:59:e1:5b:7e:f0:51:e6:de:13:07:11:
e7:f1:fd:cb:5a:ab:e6:4d:e0:3b:02:de:54:d1:d2:d5:70:07:
2c:93:7e:33:1d:07:29:53:3a:2e:90:37:a2:ae:2e:1f:70:1d:
ba:2a:ee:ec:9e:52:fc:f0:d7:c2:7e:40:e7:60:25:dc:56:3c:
58:fd:95:1b:30:9b:30:4f:0c:17:5d:73:0b:45:90:31:b6:16:
4d:d2:15:17:e7:ab:0f:d4:3e:4d:b4:0c:80:a8:11:66:1a:2f:
c6:6f:1e:34:02:b2:00:18:04:1e:ae:bf:24:81:57:a1:ee:7a:
2d:ea:ae:f0:a2:60:88:f0:23:8e:44:6d:94:6d:e1:aa:11:2a:
86:b7:e5:6a:9f:c6:7f:63:fc:cf:14:4d:61:47:4a:2d:8e:07:
09:17:a5:0f:b5:a3:5c:46:8f:97:2c:d4:29:3a:a6:1c:82:4a:
da:21:ac:60:a6:e9:e5:66:15:47:ca:3d:ba:a3:ed:28:72:17:
8c:7f:54:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:12:22 2025 by rpki-client