Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
File: a4PZKBp6UIq_xJUwSumcmMBCxhE.mft (raw, json)
Hash identifier: B9td4XKLp5909d9jPeHnNhjmW8vdwN8qBw5mXlpRQx4=
Subject key identifier: A3:91:71:98:A2:B4:C2:F1:D2:7F:05:F7:F5:55:56:B8:35:24:0F:CA
Authority key identifier: 6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
Certificate issuer: /CN=6b83d9281a7a508abfc495304ae99c98c042c611
Certificate serial: 019650116861D611BC92D0F5C092422EAC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
Manifest number: 148B
Signing time: Sat 19 Apr 2025 22:00:40 +0000
Manifest this update: Sat 19 Apr 2025 22:00:40 +0000
Manifest next update: Sun 20 Apr 2025 22:00:40 +0000
Files and hashes: 1: a4PZKBp6UIq_xJUwSumcmMBCxhE.crl (hash: 1YLRz0M4bpHS24cpL+K3wvre9k+IZqO9V8MW0e1qB7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:68:61:d6:11:bc:92:d0:f5:c0:92:42:2e:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b83d9281a7a508abfc495304ae99c98c042c611
Validity
Not Before: Apr 19 22:00:40 2025 GMT
Not After : Apr 20 22:00:40 2025 GMT
Subject: CN=a3917198a2b4c2f1d27f05f7f55556b835240fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:1b:ec:9f:6b:0f:f0:89:93:a8:ed:47:08:
27:8f:f3:78:32:fe:40:07:cd:80:90:94:5c:46:38:
e1:cd:a4:86:fd:41:31:02:3c:b2:1b:dc:c3:d8:ac:
09:91:d7:a1:33:13:d9:c9:9a:49:db:bb:96:36:8e:
d5:4d:22:41:df:c0:18:de:94:d0:9a:6e:09:93:0b:
a8:d4:65:cb:8d:cb:30:2e:a5:0a:d9:07:3c:e1:50:
e9:81:10:8f:d9:bc:4e:66:a9:c8:07:a3:83:37:75:
70:e4:81:de:8b:fc:df:cf:95:56:17:74:01:f7:c6:
af:a4:54:83:a0:e7:fe:7e:83:99:56:80:4c:60:f9:
83:4d:64:00:0e:5e:34:1b:44:2f:51:e8:34:7b:70:
cb:03:d6:f5:04:da:1e:f1:9f:9b:65:57:2f:2e:ab:
af:43:f9:98:0b:d3:5b:c9:e1:e9:ee:ba:f3:ea:d6:
23:7b:1a:0c:11:79:1e:f8:5b:dd:bd:1f:32:e1:3f:
85:dd:95:57:18:3f:d7:31:8f:ae:90:43:c7:ab:84:
28:bf:49:18:1d:0d:a2:e6:fd:d9:cd:6f:31:75:83:
19:d4:95:10:2c:1d:c2:0f:52:5f:ba:a3:54:c6:08:
fb:3d:0b:fa:d8:73:62:c1:a1:82:49:51:34:25:11:
b4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:91:71:98:A2:B4:C2:F1:D2:7F:05:F7:F5:55:56:B8:35:24:0F:CA
X509v3 Authority Key Identifier:
keyid:6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c2:f9:e5:4f:e0:04:a2:84:db:71:eb:45:47:5e:c3:4b:30:
6f:b5:a8:70:39:bc:2c:5d:9a:61:6a:12:29:ae:6b:78:dc:d3:
c5:68:fd:09:ed:25:7e:3d:72:60:2e:7b:09:49:1f:8f:aa:cf:
4f:0a:b8:84:23:09:6b:af:54:ca:e1:7f:05:b8:7a:a8:4a:aa:
b6:a4:dc:5e:5a:48:98:95:a8:f0:a5:8d:14:c3:0b:d6:da:a4:
08:10:03:08:7f:d3:65:28:f3:fb:93:28:ff:05:33:a7:8b:8f:
44:76:7f:89:13:05:fb:9e:d7:c9:b0:f3:75:d8:f3:ff:26:87:
67:10:06:50:21:25:4a:85:a0:49:fb:d6:e4:88:b1:f7:27:5d:
6c:37:6c:18:c5:5a:09:2c:39:1c:a4:22:05:f2:e8:30:ba:f4:
cc:7e:0f:b7:bf:6e:25:eb:75:d0:63:dc:d9:6b:30:42:0f:ee:
71:60:94:f5:f8:7c:f2:de:07:e8:c7:f8:ba:b8:ad:19:99:da:
86:33:39:d8:b5:80:6e:e7:bc:18:e1:12:74:e5:06:55:35:26:
93:9c:8c:43:1e:9b:9a:c1:24:7e:4c:a4:d3:f5:22:05:ab:5e:
62:d8:54:df:e0:4e:df:e5:f5:ce:36:19:58:d8:86:fb:ff:5e:
7a:b6:1c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:48:11 2025 by rpki-client