Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
File: C4K9iLuhoX0siu9h3sHaxmFe75A.mft (raw, json)
Hash identifier: cpNqrd5vb+odRxrHB4WV/aT7yZ0G6U1YDOZnVl+V678=
Subject key identifier: 94:3F:4A:5E:52:C4:99:F9:2B:D8:55:33:B2:D9:9E:8B:2B:30:92:F6
Authority key identifier: 0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
Certificate issuer: /CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Certificate serial: 019645C583C30537420670C2E2A1F523DECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
Manifest number: 14F3
Signing time: Thu 17 Apr 2025 22:01:34 +0000
Manifest this update: Thu 17 Apr 2025 22:01:34 +0000
Manifest next update: Fri 18 Apr 2025 22:01:34 +0000
Files and hashes: 1: C4K9iLuhoX0siu9h3sHaxmFe75A.crl (hash: 5KkcFxg5Mtn8Y0SEG7unTxb6I8K7PXrA5fT5JDSVgFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c5:83:c3:05:37:42:06:70:c2:e2:a1:f5:23:de:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Validity
Not Before: Apr 17 22:01:34 2025 GMT
Not After : Apr 18 22:01:34 2025 GMT
Subject: CN=943f4a5e52c499f92bd85533b2d99e8b2b3092f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:8f:71:31:af:69:79:92:f3:e1:44:76:83:
d3:2a:94:e8:49:b7:68:76:9a:ea:89:14:75:86:4c:
54:04:09:42:a3:95:58:42:a4:ea:34:4f:23:c8:97:
9d:30:0b:38:e7:7d:2b:9f:52:d6:f6:6e:8f:f0:21:
8a:17:91:d1:f5:b3:f7:58:ca:95:63:02:a6:74:6e:
27:a6:d4:46:bf:d9:e6:17:f2:c7:a9:9e:d9:dd:3f:
a6:5a:f2:10:7c:0b:e2:05:55:28:71:1e:66:eb:15:
2a:83:93:de:f7:bc:a7:f4:39:97:f3:12:6f:84:c5:
de:b6:89:d4:0b:b6:de:ae:78:44:06:6e:94:72:3f:
49:c4:fb:ee:7b:62:d5:d6:a5:f9:23:cc:29:6a:d3:
46:d6:8a:04:52:92:d6:86:b7:5c:37:f4:2a:05:fd:
f7:53:a6:ca:d8:13:bd:1c:bf:f3:8d:db:c2:cd:1b:
c0:39:d0:24:7c:32:76:bf:4a:6b:96:4f:ff:5d:18:
67:f8:ce:86:ac:61:ed:22:b2:b0:16:6b:ef:da:b3:
c5:29:63:e0:1d:96:38:2d:9a:e3:20:38:5e:05:82:
fe:53:d3:72:98:47:28:49:9f:69:1a:a3:92:55:61:
0d:07:fc:76:13:0f:87:87:aa:0e:bc:a2:30:38:6e:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3F:4A:5E:52:C4:99:F9:2B:D8:55:33:B2:D9:9E:8B:2B:30:92:F6
X509v3 Authority Key Identifier:
keyid:0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:93:ed:01:e8:f3:57:db:26:b7:f0:45:bc:1d:c5:f2:27:54:
2a:ab:ca:2c:4d:4d:4b:5a:91:ab:ec:0a:b4:9f:92:6f:3f:24:
f6:8d:47:ee:97:a1:07:84:58:5e:dc:71:44:2c:da:39:a5:bd:
7c:cc:99:b7:1b:dc:94:2e:a2:2e:72:1a:56:6c:ba:7d:1a:7a:
d2:6e:8d:48:03:dd:0d:83:47:ae:7e:81:66:1d:bc:35:6d:90:
36:31:37:5c:1e:8a:7f:14:65:65:a2:ca:d3:9c:64:93:a7:ec:
42:50:ab:99:47:ad:f2:ed:ff:10:8b:7d:b0:e0:85:c9:f1:9f:
35:8f:df:96:fc:bd:a2:86:0a:72:2d:cc:f2:25:76:38:9a:29:
8e:60:f3:7f:51:5a:4c:38:81:e2:42:7f:c7:12:a0:ae:c1:c0:
e9:e5:52:74:ab:8d:9b:97:5b:e0:b1:2e:1f:5a:08:6d:ac:77:
96:ff:9c:dd:0c:f3:da:90:a5:3a:83:ae:84:7a:be:02:d0:38:
05:c5:3e:5b:65:04:f0:89:5b:43:13:6d:81:24:a2:e9:43:6c:
b2:5b:24:84:86:83:ec:a9:4a:b5:c8:b0:86:b0:99:8a:f1:cf:
78:11:9a:8c:8f:1d:13:99:7b:c0:4f:78:12:13:bd:37:2f:7e:
df:74:03:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:42:40 2025 by rpki-client