Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
File: KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft (raw, json)
Hash identifier: iqxSaLBpM0W3NPxwRzW7GiP/JQpMTP8TyCYK7ld1yno=
Subject key identifier: B9:B4:37:50:EC:A7:53:99:B7:0E:07:01:9A:EC:FF:F1:13:C1:CF:2C
Authority key identifier: 2A:14:91:5E:27:F8:BF:40:5C:CF:CA:94:B6:C5:30:BD:4D:3E:54:C0
Certificate issuer: /CN=2a14915e27f8bf405ccfca94b6c530bd4d3e54c0
Certificate serial: 01965CF1C02F9FF81860F9C6AB35EE7E88B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
Manifest number: 0737
Signing time: Tue 22 Apr 2025 10:01:09 +0000
Manifest this update: Tue 22 Apr 2025 10:01:09 +0000
Manifest next update: Wed 23 Apr 2025 10:01:09 +0000
Files and hashes: 1: KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl (hash: /lv6qenlZMi/fj6PxErg9Ce8nXr6vaaCKf/IJy/hFx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:c0:2f:9f:f8:18:60:f9:c6:ab:35:ee:7e:88:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a14915e27f8bf405ccfca94b6c530bd4d3e54c0
Validity
Not Before: Apr 22 10:01:09 2025 GMT
Not After : Apr 23 10:01:09 2025 GMT
Subject: CN=b9b43750eca75399b70e07019aecfff113c1cf2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:d0:78:7f:14:c0:da:99:cf:27:ca:74:50:
a9:53:9b:1c:70:4d:9f:52:a5:1a:48:63:e1:d8:1e:
1a:98:f4:63:bb:fb:42:17:97:1f:88:6e:ff:db:84:
c1:fe:1d:67:88:18:60:41:4b:fa:22:04:df:64:7f:
47:5d:b7:b2:94:b2:63:b6:5f:ce:a4:1c:67:7d:ef:
d8:77:7b:ce:a6:de:87:d9:0b:84:d1:af:77:58:7c:
58:69:98:c4:09:49:ce:f6:54:e1:64:39:eb:0c:18:
cf:a2:b8:96:02:b6:c5:d3:20:94:72:6d:89:f8:cb:
83:3a:6a:f8:9a:61:bd:b7:cb:b5:a3:f7:cc:87:78:
5c:4c:cb:ef:00:22:bc:9f:c8:c2:9c:3d:53:a7:d2:
83:18:a1:93:7c:c6:aa:8f:a7:b3:b7:50:51:b2:cb:
dd:60:b2:47:83:47:fc:84:ac:6f:cb:f7:37:5d:e3:
be:98:8c:76:1d:f1:0a:d9:f3:f2:25:7b:4d:08:2a:
79:19:0e:c8:af:6b:3f:16:c0:82:3d:ae:4e:24:15:
8a:3e:23:e7:4a:97:b5:1f:1e:e4:e2:2e:5d:40:91:
7b:ab:35:58:d1:50:6a:88:5b:e0:7f:72:b0:41:2d:
c7:95:b2:f5:ba:49:b4:21:06:03:a7:7e:20:b2:fd:
ff:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B4:37:50:EC:A7:53:99:B7:0E:07:01:9A:EC:FF:F1:13:C1:CF:2C
X509v3 Authority Key Identifier:
keyid:2A:14:91:5E:27:F8:BF:40:5C:CF:CA:94:B6:C5:30:BD:4D:3E:54:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:97:6e:05:0a:9d:90:c1:79:2d:0d:be:8b:e2:53:96:f5:0d:
94:e3:eb:80:b3:2b:80:c2:bf:65:17:86:5e:46:99:39:9e:e7:
e3:90:be:d2:f1:23:aa:9e:a1:a4:2f:f7:bd:4d:63:af:05:ee:
08:0d:84:d0:70:f0:2d:8f:d1:48:ab:af:fd:89:30:81:09:92:
1d:ac:91:39:8b:ca:f2:c2:2b:77:34:46:4f:a5:cc:e9:e5:49:
2a:c5:61:03:5f:53:80:33:d7:d4:c3:c0:e3:10:b3:db:f6:b0:
1d:1a:25:d8:ef:a0:af:67:c9:59:9a:94:62:1c:fb:53:b9:3c:
55:0b:f0:03:d9:cc:1a:fc:14:ed:ad:ec:8c:8f:5c:53:c7:fc:
44:c4:bf:c9:48:b1:43:ba:4e:50:01:91:a7:2b:e0:4d:54:10:
0f:eb:f2:d1:bf:07:a3:c7:2a:4a:38:6c:63:5d:fa:75:30:af:
0e:98:c8:c7:42:c9:b8:1f:29:48:35:66:0f:8d:06:bb:68:2f:
d7:5e:3f:67:03:5e:e9:b6:06:ac:9f:00:66:4f:ef:f8:ef:dc:
cd:d1:c0:29:72:c1:bc:7c:fc:77:a7:cb:b6:66:15:ff:2c:31:
b8:48:b0:a9:ac:0d:61:e1:01:8a:cd:54:99:2e:4e:ea:fb:dd:
8d:6f:6a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:48:59 2025 by rpki-client