Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
File: vUltYJRIpG2YZUJqjp7aWICI0Fc.mft (raw, json)
Hash identifier: LEZ+SfpoOvHpXR5qBK4qyq3NuYn+mwJA5TvvqwbVHrM=
Subject key identifier: E6:9C:CF:DE:97:B3:A5:68:CD:B7:40:37:4E:7C:C5:A0:39:0B:E5:4C
Authority key identifier: BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
Certificate issuer: /CN=bd496d609448a46d9865426a8e9eda588088d057
Certificate serial: 01964F6CCD8FBD86DAC8C7FA970357BB7BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
Manifest number: 112F
Signing time: Sat 19 Apr 2025 19:00:52 +0000
Manifest this update: Sat 19 Apr 2025 19:00:52 +0000
Manifest next update: Sun 20 Apr 2025 19:00:52 +0000
Files and hashes: 1: vUltYJRIpG2YZUJqjp7aWICI0Fc.crl (hash: 3yiyVYQ+JviZYQi6FXPGnmtZLZePQL3boZUHEZABBsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:cd:8f:bd:86:da:c8:c7:fa:97:03:57:bb:7b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd496d609448a46d9865426a8e9eda588088d057
Validity
Not Before: Apr 19 19:00:52 2025 GMT
Not After : Apr 20 19:00:52 2025 GMT
Subject: CN=e69ccfde97b3a568cdb740374e7cc5a0390be54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0b:94:10:79:70:c3:e8:3a:75:43:d2:4e:e9:
25:c2:d2:7e:13:39:33:50:f2:6f:1a:3c:7f:f0:c1:
74:10:5b:82:db:f6:4e:33:1d:1d:18:14:04:e3:1a:
dc:a2:4b:14:a8:3a:1e:dd:c3:47:48:b6:5d:7a:92:
4d:4b:1b:f6:9b:ee:36:bf:5d:7a:c1:5c:ea:f9:5b:
68:d9:92:2f:1c:09:38:07:89:0e:9c:21:ef:64:55:
26:a7:c0:f9:88:36:c1:7d:36:e8:56:03:31:94:f1:
aa:f3:9f:6c:5b:59:52:3a:7d:6d:b5:9f:8d:bc:c9:
e4:19:5d:11:ae:6c:49:e2:b2:5e:03:ba:e8:9c:0c:
61:8a:c9:08:bc:9a:6a:8f:95:80:69:fd:2d:7c:71:
20:29:9d:b2:73:2f:6e:9f:23:ea:e1:31:3d:87:5c:
a5:2a:48:79:05:c1:90:87:43:94:29:55:9b:7c:ca:
73:97:79:72:63:89:d8:1b:ea:d6:8d:63:4c:e8:4e:
aa:d2:e6:04:36:43:96:5e:7f:a3:01:a1:d6:a6:ba:
18:84:1f:21:e2:5d:4f:6d:4e:71:1f:7b:72:cc:2a:
03:84:fa:c4:b1:bd:ad:b9:f4:55:17:33:91:49:7c:
5a:57:92:3f:0e:60:35:dd:07:8f:a6:d8:93:67:50:
39:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9C:CF:DE:97:B3:A5:68:CD:B7:40:37:4E:7C:C5:A0:39:0B:E5:4C
X509v3 Authority Key Identifier:
keyid:BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f1:38:a4:55:38:b3:b6:18:98:de:21:29:4c:da:09:51:95:
81:5c:39:98:bc:d2:89:b3:46:7b:b0:08:a7:a9:93:53:a1:d3:
cf:2d:58:38:f6:c5:af:0e:e7:bb:25:1e:7b:d0:67:4d:1c:7a:
b3:ef:99:32:53:c2:1a:10:36:2a:39:81:9a:82:96:3e:5a:ef:
0a:8a:82:c2:23:7e:46:23:17:bd:46:73:0d:6d:97:f1:fe:98:
0c:3a:37:d8:09:17:de:ab:c4:35:5c:7c:8c:6d:a0:46:de:01:
1c:e1:ef:09:45:0d:f5:61:c3:dd:79:92:55:28:88:99:56:19:
7a:83:14:73:2c:c4:d3:17:d9:2e:54:6e:c1:86:c9:7f:5c:80:
b1:05:9d:68:28:e8:c6:d7:28:e4:87:d7:fc:00:2d:e0:7a:1f:
78:ea:da:7f:6f:9a:02:3a:fc:7f:50:34:60:92:12:07:3b:50:
0a:f7:f3:f5:52:e6:21:fb:00:f0:3b:51:26:7d:da:35:58:0a:
2a:3e:1c:d6:d3:b4:d0:c1:27:fb:a7:05:3f:fa:20:95:4e:d6:
bb:f9:21:53:e9:c1:c6:be:3b:90:af:5a:53:01:d7:01:89:47:
23:91:44:1b:d0:fd:15:81:34:26:75:d7:a8:52:31:4b:61:ee:
0a:5f:39:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:19 2025 by rpki-client