Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
File: sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft (raw, json)
Hash identifier: MZ/1uC/5IyI78z8UrYMkWS8gd6aBLZw7l6N4YrOw2LU=
Subject key identifier: 5D:BB:00:BD:86:16:F9:1F:16:21:1D:CA:EB:DD:92:88:5F:02:C2:6E
Authority key identifier: B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57
Certificate issuer: /CN=b1040bc251fe02669f57fea572743a37acfbd557
Certificate serial: 019579B4635D098F4EC7509DDF0025F024EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
Manifest number: 0632
Signing time: Sun 09 Mar 2025 07:00:19 +0000
Manifest this update: Sun 09 Mar 2025 07:00:19 +0000
Manifest next update: Mon 10 Mar 2025 07:00:19 +0000
Files and hashes: 1: sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl (hash: Fr5YKBJdBZXhvfJirUKdaB9cPOt4Pf7P3fR2K3EhLJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:b4:63:5d:09:8f:4e:c7:50:9d:df:00:25:f0:24:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1040bc251fe02669f57fea572743a37acfbd557
Validity
Not Before: Mar 9 07:00:19 2025 GMT
Not After : Mar 10 07:00:19 2025 GMT
Subject: CN=5dbb00bd8616f91f16211dcaebdd92885f02c26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:ac:b4:d1:4d:41:15:f9:ba:4c:30:91:ea:
ac:4e:46:c5:e8:3c:c3:3a:c2:40:77:3c:05:f6:dd:
72:7b:a6:b2:aa:b2:7c:cb:31:f6:95:62:02:03:bb:
57:d5:ed:35:74:9f:97:2d:28:99:0f:92:ea:fb:3a:
87:6f:92:34:22:86:02:f6:2a:4c:f0:6a:84:ba:64:
83:4a:b0:fe:69:da:b3:61:86:b3:56:4b:4b:eb:7a:
50:e3:14:5e:fd:af:39:58:a1:7a:9f:50:93:eb:e7:
71:ac:01:62:05:77:f0:b9:c9:e7:50:f8:87:fe:cb:
13:d3:cc:4e:6a:89:96:2c:74:71:91:96:60:a2:94:
8c:24:4d:26:a9:35:ac:db:ed:90:26:81:36:91:bb:
2e:2e:56:a1:55:2e:14:a6:09:35:98:91:25:9d:d1:
de:bc:a8:7a:9d:6e:08:73:e8:73:f8:88:27:72:60:
8f:94:b7:f8:d6:0f:ad:83:85:b9:f2:21:19:3b:b0:
2b:3e:b3:b0:3b:e3:6b:22:dd:da:93:c2:9e:eb:ed:
58:b2:b6:66:ae:f6:76:13:51:a9:2f:ec:ea:1b:64:
ff:99:e2:aa:d2:5c:73:e3:80:5d:d0:fa:c2:27:89:
7f:f5:09:43:ef:80:b3:bf:9a:f3:2c:14:7d:ce:26:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BB:00:BD:86:16:F9:1F:16:21:1D:CA:EB:DD:92:88:5F:02:C2:6E
X509v3 Authority Key Identifier:
keyid:B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:fe:c3:bc:5e:d6:25:77:78:ca:a1:f9:74:98:c4:48:c2:a8:
23:a4:62:36:89:8c:4e:0e:1e:72:aa:94:96:e7:21:8d:5f:e8:
76:87:cc:ce:5e:13:ce:a3:e6:e4:dd:5a:d1:c2:cb:53:4d:87:
b9:40:09:14:e2:5c:44:10:43:eb:3b:fa:9c:c5:70:08:f9:7b:
e1:cb:15:a2:5e:e2:f2:33:51:50:c3:72:89:12:6c:29:08:a2:
92:60:d6:39:ca:fc:f1:39:29:85:e1:83:cf:eb:45:d2:9a:0e:
b3:d1:10:97:f2:bf:af:d3:bb:53:5c:5a:14:90:ce:d8:b9:eb:
68:44:39:c8:97:58:30:68:d3:04:9d:85:3d:c1:04:4d:5e:61:
92:d0:4e:72:e8:38:70:46:31:36:83:28:16:2c:12:e5:11:37:
17:cf:73:97:f8:6c:17:41:7c:af:50:51:49:35:bd:c7:c1:7a:
2f:45:ee:ed:3d:18:d1:2f:18:ae:33:cb:80:d5:59:67:e0:31:
29:e0:cc:c6:8c:90:29:6a:a0:f0:30:c0:23:a1:19:97:06:b9:
8f:8d:0e:58:7b:4b:e4:0d:64:8e:5d:45:f6:8a:d8:86:09:ea:
06:84:22:08:1f:a1:fe:57:36:09:d0:c7:05:55:17:54:03:b9:
fd:8f:d2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:52:24 2025 by rpki-client