Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
File: _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json)
Hash identifier: egWh0eTBy/uTrZ/dUckVHECnbwFBh9wE4ZU9FLALeII=
Subject key identifier: C6:45:CA:91:D1:FE:C2:0E:0C:62:BC:7A:44:D9:B0:C4:D9:AD:70:27
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial: 0196410C403A95E233A2AF942B47EF67E292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 00:00:43 +0000
Manifest this update: Thu 17 Apr 2025 00:00:43 +0000
Manifest next update: Fri 18 Apr 2025 00:00:43 +0000
Files and hashes: 1: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: DFO2gM1AnbK6DwOfDarcN9bQxMSVWsogJQ+Nxe0r29Q=)
2: sKY5eWcuMLtnQDCwYINlgWrJYiU.roa (hash: CtU3txyv7ojbqzOBjkBrsZCPvN9srqKePBnH0g0kSFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:0c:40:3a:95:e2:33:a2:af:94:2b:47:ef:67:e2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Validity
Not Before: Apr 17 00:00:43 2025 GMT
Not After : Apr 18 00:00:43 2025 GMT
Subject: CN=c645ca91d1fec20e0c62bc7a44d9b0c4d9ad7027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:65:b9:ae:ea:7c:59:fb:a3:e5:17:55:d1:dd:
25:79:49:90:e7:00:d6:2d:c4:f4:89:cb:ed:d0:fe:
0a:9c:68:17:89:71:fb:a9:4c:63:25:a7:f6:25:17:
bd:36:ea:c9:6f:d3:e4:29:63:61:d4:cb:b2:32:b3:
53:32:2f:0e:c3:2a:37:d2:15:10:92:cf:54:4d:4c:
9f:fc:05:ee:7d:45:76:e0:2c:b2:26:f4:39:9b:6c:
5c:09:3d:a1:f3:d2:c2:4a:f4:da:aa:a6:5a:41:47:
27:f2:0d:ea:a8:68:c8:35:cc:eb:e2:90:17:02:50:
f0:16:85:63:e7:32:39:81:4c:8c:d4:21:a2:e2:7b:
51:3b:dc:28:ea:cc:3f:e5:c5:df:3b:36:f7:03:d5:
32:24:e8:8d:b8:7a:ec:e2:5f:50:51:2e:03:7e:58:
ef:97:53:bb:f9:9e:2d:88:c6:7d:94:70:0f:69:0f:
56:e6:87:69:d7:79:8b:07:af:4f:68:1f:24:06:b2:
8c:cf:27:0f:1b:81:8b:13:2d:d5:f9:86:48:a1:fc:
1e:25:94:01:54:5f:8f:83:85:14:04:b6:44:f4:53:
2f:9a:ab:ba:90:18:ca:49:e8:23:06:3a:c3:9f:d4:
2c:1d:d4:25:ea:1d:3d:9c:10:28:72:92:0f:c2:9c:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:45:CA:91:D1:FE:C2:0E:0C:62:BC:7A:44:D9:B0:C4:D9:AD:70:27
X509v3 Authority Key Identifier:
keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:2f:2f:8e:f7:f8:47:55:43:e0:e9:42:87:27:57:4d:f0:2c:
20:f4:8b:23:b1:c8:de:9d:85:6f:58:27:b5:1f:a2:cc:38:6b:
57:3e:e6:4a:85:07:06:d3:63:5f:a4:25:f0:20:8f:83:e1:e4:
f5:9a:ff:66:ee:38:32:0f:4d:ab:c0:72:62:68:41:9e:b0:f1:
23:72:99:01:6b:6f:78:88:69:65:34:05:62:6f:47:fc:76:9d:
20:38:87:91:06:3c:3a:38:ca:32:1f:6a:7c:8b:f4:fc:18:25:
7e:3c:9b:bb:3f:b2:b8:df:1b:d2:8b:49:68:8b:5e:60:5c:e6:
24:ef:93:bd:b9:40:e5:f7:52:5e:e8:9d:eb:73:2b:b9:f9:d1:
36:b9:c5:56:fa:ef:b0:85:61:44:f5:7d:97:e2:d4:81:4f:64:
b3:4e:4f:b3:80:af:c6:2e:bd:72:da:dd:a9:13:da:c4:cb:6b:
81:9e:5e:af:3e:49:02:0f:6c:32:b0:0a:91:21:22:19:4b:37:
3f:8d:14:d4:6f:ef:4e:40:73:78:d2:94:5f:97:e6:3f:5f:69:
42:3f:07:7b:6d:28:31:c4:ab:a4:dd:69:04:e2:68:7a:2c:41:
80:7c:cf:38:4d:f0:10:76:9f:7b:9f:58:a7:d7:0a:d5:90:3f:
58:99:d5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:58:58 2025 by rpki-client