Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json)
Hash identifier: 1Cxev7o7HE7Eblux8PmNcg2uBLUZBCU80+4w105Meu4=
Subject key identifier: 4C:CC:58:C8:4B:A0:BC:2C:15:FD:02:5D:96:84:66:EC:48:22:64:9E
Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Certificate serial: 01963EE6BEAB0DA0CFBB27F266BC0A063583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
Manifest number: 01BF
Signing time: Wed 16 Apr 2025 14:00:31 +0000
Manifest this update: Wed 16 Apr 2025 14:00:31 +0000
Manifest next update: Thu 17 Apr 2025 14:00:31 +0000
Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: Uou1+ba7Gdv4ZH3ilWjEezxM91ssJOvEdBCSC0ABCb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:be:ab:0d:a0:cf:bb:27:f2:66:bc:0a:06:35:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Validity
Not Before: Apr 16 14:00:31 2025 GMT
Not After : Apr 17 14:00:31 2025 GMT
Subject: CN=4ccc58c84ba0bc2c15fd025d968466ec4822649e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:af:2b:16:14:2f:ee:1d:d5:97:b5:b4:75:
90:b1:c0:cf:63:f9:bf:f0:a6:8b:91:ce:53:44:9b:
f8:ac:76:be:bf:11:d7:c0:49:69:d2:83:0f:18:05:
58:dc:41:b6:32:c2:96:ee:19:75:c9:d8:b5:68:07:
1c:9c:e7:e0:5a:d9:21:3f:fa:e7:d2:e2:ac:1a:d7:
89:03:8c:ed:9e:b9:31:48:6b:ee:f4:1f:7d:5b:43:
a7:29:97:b5:54:1f:2d:ff:78:0e:7a:84:bd:64:fb:
9d:6f:94:7c:22:12:c4:e6:77:a6:de:fe:92:03:2f:
25:e5:3c:cd:0d:6c:25:8c:e7:9b:42:34:a1:9d:38:
54:19:53:a2:fb:c8:9c:d4:0d:72:83:e9:5b:7c:0f:
ac:42:36:bb:8a:4d:a5:ea:ab:88:a0:1d:b1:02:4b:
d4:b8:f5:55:04:7f:d4:c0:43:25:c5:fa:91:96:9f:
81:ed:2c:bc:3f:ab:cc:6b:d8:f6:82:63:4e:e3:89:
60:23:03:5d:69:a6:a2:f0:a0:7c:00:96:71:2f:65:
fe:63:3b:ea:02:e9:93:81:d7:70:80:20:eb:00:ac:
15:73:30:da:23:ac:4d:78:02:51:64:f6:eb:65:f3:
08:7f:67:bc:0c:a8:d1:29:17:4e:50:d6:5b:c3:83:
3d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CC:58:C8:4B:A0:BC:2C:15:FD:02:5D:96:84:66:EC:48:22:64:9E
X509v3 Authority Key Identifier:
keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:eb:d2:e4:20:3b:29:6b:ee:15:4f:da:7b:aa:6e:04:9f:66:
5b:3d:36:7e:a5:04:02:03:e2:28:93:1d:dc:3e:15:00:ba:b1:
04:eb:ed:e9:01:3c:1f:61:91:0a:9d:1f:1d:c5:68:4d:42:dd:
3a:a7:f4:e8:9b:1f:82:52:8e:9d:b7:8c:df:23:a4:48:59:e6:
ef:ba:13:d4:a3:b8:0d:a8:5c:64:b5:5e:39:af:ea:00:42:c0:
b5:7a:e0:45:2f:e3:61:ba:f7:2a:b7:a0:eb:67:11:ce:e4:47:
1f:19:d1:7a:9a:69:02:a6:61:fc:4c:be:b1:13:1a:82:84:05:
9d:21:02:06:32:9a:0f:63:f1:a2:fa:45:1b:4b:1b:96:9b:42:
73:71:3b:45:05:29:f6:6c:7b:f6:14:4b:b6:e9:ae:f5:b6:e9:
f3:2c:06:be:86:c7:f1:83:38:21:de:d2:a0:e6:bd:e5:0a:8d:
cb:a1:0b:ba:c8:f1:a2:3c:ce:2f:7f:9a:4a:41:a1:13:54:02:
b0:08:2e:4c:78:66:a5:58:ee:53:fa:87:f9:17:08:2a:6d:a5:
25:0a:84:91:e8:fd:51:f5:13:a7:02:16:d4:5b:92:a9:02:a8:
32:38:0f:1a:92:cf:05:87:5a:a6:6e:32:19:ec:2d:b2:fd:6a:
76:aa:11:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 20:40:09 2025 by rpki-client