Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
File: 27s70rCfy7vfiVsOOpxaAGRW_aY.mft (raw, json)
Hash identifier: xDBxEeuXYfanesF7V/ZLxrJ4YnClNxLiadeXdBdOVf0=
Subject key identifier: 79:93:95:5E:00:20:DB:23:7E:40:F4:00:BD:F4:E9:3A:4F:DF:51:C0
Authority key identifier: DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
Certificate issuer: /CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Certificate serial: 019652A4AD80629165D7383C52C76C1DB9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
Manifest number: 0667
Signing time: Sun 20 Apr 2025 10:00:45 +0000
Manifest this update: Sun 20 Apr 2025 10:00:45 +0000
Manifest next update: Mon 21 Apr 2025 10:00:45 +0000
Files and hashes: 1: 27s70rCfy7vfiVsOOpxaAGRW_aY.crl (hash: cTbesV+4XN9D3C/ELrDHCNSO593nT/MLaqidvfGhwXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:ad:80:62:91:65:d7:38:3c:52:c7:6c:1d:b9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Validity
Not Before: Apr 20 10:00:45 2025 GMT
Not After : Apr 21 10:00:45 2025 GMT
Subject: CN=7993955e0020db237e40f400bdf4e93a4fdf51c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:99:a2:00:07:5e:f0:c6:c0:d0:ce:96:a1:1d:
01:c5:4a:2e:ed:03:5a:0c:32:c6:57:54:ad:2f:19:
4c:4d:d6:c6:8a:c0:98:86:06:dc:d1:45:74:06:85:
5b:85:ab:0f:48:01:c0:e6:b4:1c:ec:f8:89:ab:67:
a1:ab:35:1b:9c:bb:d1:62:e1:2c:a1:d0:41:47:de:
f8:df:72:65:d8:cd:7a:e1:e9:48:89:b2:d1:57:eb:
3c:54:b5:46:24:e2:5e:8d:ae:c7:5a:bc:c4:ae:68:
16:c6:25:57:16:25:b3:5b:4c:62:6b:ac:ee:64:f3:
7b:c7:6b:9b:ab:b2:5d:7c:1a:22:29:95:b4:b5:de:
c9:e0:df:a4:b0:f8:a5:d2:36:76:5f:14:a8:6e:5f:
03:91:bd:5d:3c:c1:46:49:4d:c5:6f:56:b2:8b:44:
6d:2f:bf:07:3a:67:22:ed:55:f4:10:97:ae:6a:a1:
8a:e8:87:48:c9:bd:ab:6e:21:9e:b2:8d:03:d5:eb:
e8:4c:7b:18:7d:d3:86:35:50:2a:db:7d:11:bd:41:
a9:73:fb:75:56:c7:7b:8e:d4:d0:93:cf:ed:f9:c8:
2a:5c:42:ee:39:9d:72:e9:4f:f1:c3:44:1b:5d:8a:
40:9d:e2:41:db:bd:9f:e7:aa:64:eb:b9:22:07:ab:
ee:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:93:95:5E:00:20:DB:23:7E:40:F4:00:BD:F4:E9:3A:4F:DF:51:C0
X509v3 Authority Key Identifier:
keyid:DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a5:0b:22:df:d1:d2:17:46:23:2c:29:fd:bd:a3:ac:27:71:
b8:46:64:8c:5b:1e:30:ab:0f:c0:d8:b6:75:bb:79:d9:fc:0f:
11:61:22:f9:88:95:48:56:4b:fc:3e:53:be:90:18:80:e3:c4:
7f:69:94:06:04:4c:bc:d0:6d:57:09:0f:08:7e:b7:e9:82:c5:
e7:c2:43:65:36:b2:8d:27:df:3e:57:01:5c:31:eb:38:36:7b:
1b:07:03:5b:a0:90:a4:30:30:91:1e:fe:62:38:a8:7e:8e:24:
45:bf:c7:6d:61:aa:e9:9c:3f:3c:a5:27:7b:4a:36:31:17:b8:
0c:58:b7:7e:40:15:b4:a2:ad:9c:10:24:77:d7:c7:f6:47:10:
7b:aa:0a:17:c6:16:d2:3e:2f:c6:ad:a0:ad:78:78:e9:f6:1b:
a5:f9:8c:7f:32:ba:d1:e4:37:88:c7:fe:f2:87:cd:10:95:30:
5b:45:8b:2e:45:f7:dd:4e:67:59:aa:78:a0:24:b8:9d:9e:ef:
a7:c3:36:78:b5:5d:bd:64:81:51:47:c1:9f:07:99:b4:ea:1e:
f5:4e:cf:6c:ab:ba:74:8a:b9:bb:5e:ea:e8:60:85:c7:fb:4a:
83:62:84:96:76:7f:c4:cc:9a:73:1b:0a:16:2a:eb:d5:94:be:
e9:0c:6a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:29:01 2025 by rpki-client