Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
File: cnPNrMHijwIT37KPPf2LnL3Txi4.mft (raw, json)
Hash identifier: HT278Yy+r5P8szHhGKWrMfZFvDBS4INe4UjMUd/r1H8=
Subject key identifier: 35:28:ED:99:68:B5:CC:E7:9F:64:09:66:D0:6D:7B:1D:EC:E3:8F:5A
Authority key identifier: 72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E
Certificate issuer: /CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e
Certificate serial: 01963EAFD17A3F1C76C2C9D24B76516F3D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
Manifest number: 044E
Signing time: Wed 16 Apr 2025 13:00:31 +0000
Manifest this update: Wed 16 Apr 2025 13:00:31 +0000
Manifest next update: Thu 17 Apr 2025 13:00:31 +0000
Files and hashes: 1: cnPNrMHijwIT37KPPf2LnL3Txi4.crl (hash: i+wv4CFUlVtAvKVCzJe9KY9EViv2MOQ5NksWch2CIks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:af:d1:7a:3f:1c:76:c2:c9:d2:4b:76:51:6f:3d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e
Validity
Not Before: Apr 16 13:00:31 2025 GMT
Not After : Apr 17 13:00:31 2025 GMT
Subject: CN=3528ed9968b5cce79f640966d06d7b1dece38f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cb:8d:a8:aa:4f:e6:a7:86:49:11:68:d6:eb:
e6:a2:c6:1f:8a:b8:21:ac:74:08:9a:e9:9e:a6:b8:
0b:2b:98:00:47:00:68:ba:79:25:fb:a1:68:c0:e4:
97:01:29:97:98:d6:b9:7f:31:9d:57:91:e4:40:b4:
fe:ee:d6:7b:d4:01:00:32:51:40:8c:58:d7:02:5e:
5d:66:bf:1b:31:21:f4:2e:1a:6c:55:84:60:fd:d1:
66:09:f9:28:43:5a:7e:be:92:d5:f9:4c:37:16:8c:
8f:29:4e:82:23:33:59:44:fe:24:06:13:a1:de:59:
83:55:e2:66:3f:8b:65:24:7f:49:a6:55:14:2c:11:
5a:b1:8f:27:34:e1:b1:fe:18:65:98:2d:e2:f4:b2:
cc:47:52:b8:9d:6a:7b:8a:57:66:e7:c3:ae:b6:32:
3c:c4:b4:ae:cc:50:92:74:dd:87:4c:e5:da:93:6e:
1a:7c:8e:b7:7a:f7:a6:b7:87:11:83:c6:43:df:69:
e6:32:da:5d:9b:2f:59:0a:b5:7a:c5:86:8a:0b:70:
be:b5:d3:a5:3a:83:fb:ec:d4:63:2f:dd:db:d6:55:
3c:16:69:fb:e9:38:bf:83:df:be:30:01:3c:c6:94:
ba:33:9d:ba:05:b3:f9:db:2b:ed:15:12:83:b2:90:
f2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:28:ED:99:68:B5:CC:E7:9F:64:09:66:D0:6D:7B:1D:EC:E3:8F:5A
X509v3 Authority Key Identifier:
keyid:72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:76:b5:17:74:3e:41:da:3d:0d:aa:4c:53:19:08:d9:cf:d3:
ad:ec:a8:40:e8:d4:87:04:59:81:dc:5b:2d:0a:0c:82:01:45:
dc:ae:4c:40:5f:68:ed:ff:7a:8c:e4:d2:77:c4:4d:5b:6a:63:
88:79:cb:d3:4e:05:25:9c:89:72:b6:90:f6:8a:68:06:cf:94:
a8:14:12:3e:c8:7a:6d:39:3b:a8:16:f1:59:7b:2b:78:c8:20:
30:69:07:04:41:d3:54:67:c4:17:2e:6e:5f:17:2f:ed:ee:f0:
5b:44:f9:7c:4b:77:dc:40:29:b4:be:29:46:6f:d8:14:dd:be:
db:ed:38:20:2c:f9:8e:e2:42:8b:46:0f:3d:d7:e5:ef:d5:c4:
c2:50:a3:47:7d:2a:0f:35:87:42:85:1f:42:b6:f4:b1:e7:bc:
2e:b7:8f:8e:eb:b4:a0:35:2a:25:ed:d6:3a:e2:29:2d:54:0b:
0e:bc:d5:32:79:55:84:07:3a:0b:bd:8c:29:dc:90:53:3c:86:
ea:7d:de:86:82:16:ef:58:85:a3:99:57:fa:bc:9b:22:68:87:
1a:5e:23:e1:30:81:9d:97:a4:1f:66:9a:3b:5a:9d:8f:77:57:
e6:97:0d:26:54:5e:30:26:c8:57:10:f7:3d:b8:6a:52:57:b8:
f1:e7:7e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:07:06 2025 by rpki-client