Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
File: Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft (raw, json)
Hash identifier: 2zAJ6nv2G/aXrpOQQ35CaJr1EfcTeW6nvygHyXb1YHM=
Subject key identifier: A2:25:C0:64:CC:97:8C:C4:CC:E5:26:16:60:A3:88:D7:6C:46:AE:05
Authority key identifier: 45:CD:81:F4:98:66:18:0F:CB:DD:3B:77:5E:79:D6:19:BF:DB:57:E6
Certificate issuer: /CN=45cd81f49866180fcbdd3b775e79d619bfdb57e6
Certificate serial: 019641E8DF1E6F6E9B45BE5AA7950A69BBBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
Manifest number: 0F28
Signing time: Thu 17 Apr 2025 04:01:42 +0000
Manifest this update: Thu 17 Apr 2025 04:01:42 +0000
Manifest next update: Fri 18 Apr 2025 04:01:42 +0000
Files and hashes: 1: Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl (hash: fEXSA4WY1LWrTrRbAw9MurVFIETmsh7/9imi6nqAFGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:e8:df:1e:6f:6e:9b:45:be:5a:a7:95:0a:69:bb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45cd81f49866180fcbdd3b775e79d619bfdb57e6
Validity
Not Before: Apr 17 04:01:42 2025 GMT
Not After : Apr 18 04:01:42 2025 GMT
Subject: CN=a225c064cc978cc4cce5261660a388d76c46ae05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:24:49:74:23:89:fa:3d:95:33:ed:53:de:79:
7f:4d:4b:43:c4:b4:88:63:86:1f:24:24:16:a0:38:
b3:d1:6a:3f:1d:57:db:a4:15:08:97:6f:ca:5f:ad:
9e:5a:9f:ef:c2:99:c6:d5:5c:34:91:df:49:ad:39:
70:39:31:7d:c6:51:8e:1f:d8:68:54:a7:a2:67:46:
0b:26:cc:c6:7e:80:74:dc:7b:af:bc:e3:e6:40:aa:
66:28:d8:4d:92:3e:e2:e8:22:55:7a:c4:2e:55:e7:
a1:d7:1a:d8:87:a0:5c:e0:04:84:dc:6f:f9:06:0e:
86:9c:23:ed:0d:e9:9f:4d:a6:8d:01:9a:e3:f4:8b:
b0:54:e7:30:06:9a:48:d3:6c:73:80:71:75:20:de:
0b:9e:fb:eb:ec:9b:ae:14:7e:3c:da:10:c3:03:dd:
01:36:cc:08:af:f2:89:04:99:fa:a4:0f:1b:88:2c:
53:4a:68:a7:29:a7:51:94:5e:c5:68:58:d2:c4:4c:
fe:20:35:fb:cf:02:af:5e:23:33:6b:32:8c:3e:15:
ed:fb:71:75:f4:e8:8d:b5:08:a5:6a:2a:72:1f:6c:
37:e1:32:24:d8:2e:d1:73:2b:63:bd:70:39:b5:03:
06:98:df:1f:84:ba:fb:7a:66:7e:bb:93:67:60:8c:
22:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:25:C0:64:CC:97:8C:C4:CC:E5:26:16:60:A3:88:D7:6C:46:AE:05
X509v3 Authority Key Identifier:
keyid:45:CD:81:F4:98:66:18:0F:CB:DD:3B:77:5E:79:D6:19:BF:DB:57:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:97:58:be:eb:57:60:24:aa:b0:74:96:4a:ae:2d:da:37:ef:
a2:48:57:89:9e:dd:17:57:ce:e9:96:96:8f:fd:db:bd:6a:1d:
68:bf:da:e4:57:b2:d2:2e:ae:c7:4f:3a:ee:c8:27:d4:dd:bc:
93:9a:44:f8:c6:9d:e8:fd:c7:0c:04:55:83:94:ea:21:29:3b:
05:1e:19:cf:83:cf:79:7f:aa:1a:7c:a8:8b:1e:67:c5:6e:9e:
b8:1c:69:db:56:ca:77:81:3b:ac:2d:12:3d:75:27:39:47:c6:
de:2f:dd:06:74:ad:ef:74:73:94:4f:9a:39:36:c7:c4:49:02:
00:98:27:cd:26:66:bf:b5:d8:3a:e6:5b:57:1b:45:30:fe:4e:
01:f9:cd:73:da:c5:a8:1d:0b:04:bd:66:d7:47:b0:b4:2b:e3:
18:74:01:42:54:da:f3:c7:ef:a2:42:71:30:5f:22:e8:44:f5:
dd:8c:37:f2:e3:53:ac:d0:e8:a3:53:31:d5:cd:0b:6b:32:f7:
9a:81:bd:e3:16:03:c5:cd:a6:77:f1:05:eb:da:33:47:69:70:
97:bb:61:b0:19:3a:56:a9:09:48:d0:0d:1a:72:60:91:b6:f6:
f6:24:3d:59:f4:7d:8b:01:e5:b2:95:53:d5:96:bf:c5:9a:22:
26:d5:a9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:48:18 2025 by rpki-client