Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
File: C53uHUCq19-1viY4ApT04HcD14Q.mft (raw, json)
Hash identifier: KftWXwSHjO0dFxGBn9eKmu3pERbV/YjkRZpFAHxBPxk=
Subject key identifier: 54:BA:71:09:E2:29:67:A0:F4:79:F2:D2:2B:B5:90:DE:41:11:9A:3B
Authority key identifier: 0B:9D:EE:1D:40:AA:D7:DF:B5:BE:26:38:02:94:F4:E0:77:03:D7:84
Certificate issuer: /CN=0b9dee1d40aad7dfb5be26380294f4e07703d784
Certificate serial: 019633517B12E6AA89226B60CD0044C1BBB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C53uHUCq19-1viY4ApT04HcD14Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
Manifest number: 14E9
Signing time: Mon 14 Apr 2025 08:01:39 +0000
Manifest this update: Mon 14 Apr 2025 08:01:39 +0000
Manifest next update: Tue 15 Apr 2025 08:01:39 +0000
Files and hashes: 1: C53uHUCq19-1viY4ApT04HcD14Q.crl (hash: be8OTRzqJFGaE0OhQ7v1OLL9OwuChvBFx6Skd7jDfsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/C53uHUCq19-1viY4ApT04HcD14Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 08:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:51:7b:12:e6:aa:89:22:6b:60:cd:00:44:c1:bb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9dee1d40aad7dfb5be26380294f4e07703d784
Validity
Not Before: Apr 14 08:01:39 2025 GMT
Not After : Apr 15 08:01:39 2025 GMT
Subject: CN=54ba7109e22967a0f479f2d22bb590de41119a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6d:1f:af:38:f5:42:26:aa:47:86:fc:36:12:
c2:67:4d:61:c0:44:60:6b:3e:b1:67:18:7b:79:81:
92:d3:1c:c0:be:3d:a6:8e:db:f8:96:d5:75:bd:c4:
0f:9c:2d:ba:ef:ba:fb:45:a2:e4:93:2d:4d:95:3f:
07:54:87:70:58:df:a8:0a:5e:84:c7:42:ae:3b:50:
86:c9:f6:26:89:ce:e3:cc:bf:4f:43:8b:8c:ad:36:
3a:40:f3:bf:43:f6:e8:d9:ed:55:01:9f:8e:d5:89:
75:35:fc:55:4d:6a:c3:7e:c0:28:b3:4c:07:5e:af:
7d:3f:2a:c8:fd:f7:88:32:ac:dd:e1:1e:78:a4:c5:
49:fd:e9:8f:bd:85:26:a5:af:89:bc:a9:ef:7d:12:
bf:d8:a9:ba:a7:8b:dc:32:23:c4:84:fe:e3:ad:0d:
de:dc:e5:fc:18:e5:bf:a2:e2:e0:be:47:38:db:f6:
00:b3:93:96:65:80:b6:9d:80:9d:7a:49:70:0a:57:
54:a4:59:90:df:ab:1e:25:80:ec:d0:3d:3b:29:9f:
63:59:4c:bd:96:1a:ee:4e:24:4e:80:a9:28:81:21:
1e:13:26:c4:b6:e6:81:c9:00:e9:0a:6d:6e:9a:13:
2b:a1:2a:80:ad:34:e2:d4:5d:be:a3:b2:16:46:36:
4b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BA:71:09:E2:29:67:A0:F4:79:F2:D2:2B:B5:90:DE:41:11:9A:3B
X509v3 Authority Key Identifier:
keyid:0B:9D:EE:1D:40:AA:D7:DF:B5:BE:26:38:02:94:F4:E0:77:03:D7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C53uHUCq19-1viY4ApT04HcD14Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a5:75:4e:72:b8:82:b7:b4:ed:cd:f5:5a:22:d9:5b:84:48:
1b:f6:f5:cb:24:a6:7b:2a:ee:b6:8d:ac:60:66:bc:e0:a7:a5:
af:2c:c8:81:51:23:23:e2:cb:fc:ea:71:a6:48:d1:a5:5d:4e:
28:24:b2:7c:e0:92:2a:c9:2a:ca:5d:d3:e6:b7:7b:6d:05:1c:
7b:fb:37:7c:26:8f:cb:38:35:05:f1:d0:c8:57:a8:5e:9a:54:
ae:50:52:8a:52:b8:36:cd:6f:83:61:7b:6b:f7:9d:57:b5:7f:
94:38:8a:a5:3b:20:d0:71:12:f1:94:0e:1a:c7:a4:be:23:26:
7e:94:99:7c:87:19:77:7f:dc:35:82:3e:36:3e:a8:dc:77:a7:
e8:ea:d2:71:64:7f:ee:0d:0c:ce:c4:8f:16:99:4a:ba:b7:e6:
f3:d2:7c:b6:07:95:e2:4b:d1:b4:c7:df:cf:bb:17:dd:ec:ff:
65:fa:c1:48:38:64:8b:6a:00:67:22:d7:60:69:70:38:97:09:
db:92:e0:f4:1d:47:c5:76:44:fc:70:ec:15:45:d3:4b:b7:3a:
70:6f:aa:ff:f9:79:b8:e6:e7:ef:55:77:f7:b6:ff:d6:1f:b5:
42:a9:76:4d:cb:36:fb:00:72:3f:45:d8:7a:f4:33:65:22:d3:
5e:4f:43:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:02:24 2025 by rpki-client