Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
File: Vz6UxDzTSjuDpL2Kp79K4yRubak.mft (raw, json)
Hash identifier: 9HW0VCpnTY4Sl1OO+sRH2ibi1aReSlYInlnwa3axGt4=
Subject key identifier: A5:B8:5A:2F:78:BA:51:A0:C2:10:11:08:51:18:2D:BB:BC:F1:E6:76
Authority key identifier: 57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9
Certificate issuer: /CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9
Certificate serial: 019644B25D69D33477308C51DA5EBCECBB9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
Manifest number: 14F2
Signing time: Thu 17 Apr 2025 17:01:02 +0000
Manifest this update: Thu 17 Apr 2025 17:01:02 +0000
Manifest next update: Fri 18 Apr 2025 17:01:02 +0000
Files and hashes: 1: Vz6UxDzTSjuDpL2Kp79K4yRubak.crl (hash: Y2z1G+LTjaDtP2JAI5EC8oFw+R7Fn21F/OtCKcUfgiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:5d:69:d3:34:77:30:8c:51:da:5e:bc:ec:bb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9
Validity
Not Before: Apr 17 17:01:02 2025 GMT
Not After : Apr 18 17:01:02 2025 GMT
Subject: CN=a5b85a2f78ba51a0c210110851182dbbbcf1e676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e8:a9:2a:59:2d:da:4a:81:b2:34:2f:bf:6b:
2c:79:bc:22:10:77:22:85:99:25:22:95:a2:d5:99:
4b:36:8e:8e:a8:35:1f:3d:53:96:18:c7:af:dd:e2:
bc:79:78:d7:0a:c2:42:1b:22:df:aa:22:c7:86:8d:
16:9a:72:6a:ad:55:9f:89:c1:a8:e6:1a:4e:35:c7:
cf:42:bc:e5:64:1a:10:9d:db:85:31:ac:8f:96:ad:
fa:0d:d7:48:00:82:0d:f1:a7:c7:fd:1d:c7:47:cb:
e7:28:cf:ef:2a:58:f3:a1:fd:75:36:4b:b2:21:11:
30:b1:63:50:3a:c7:2d:f0:52:4e:a1:bf:67:de:34:
ab:ec:5c:00:59:53:82:a8:66:e7:cf:32:3b:85:67:
57:e1:76:84:75:1c:7f:1d:18:3f:a8:1c:1d:91:a4:
fd:52:d7:34:ec:f7:91:d7:86:f9:1b:14:77:9e:6c:
13:3d:1a:b8:5b:76:ab:ce:07:9d:35:65:be:2a:65:
b3:1c:a1:84:8f:98:ae:ea:75:9a:51:c1:aa:cf:d5:
58:ab:31:a8:31:6b:ba:34:d6:ce:20:e8:0b:89:ca:
73:ad:63:6a:fb:a3:f7:21:40:16:86:68:20:b0:9d:
d2:7f:08:6b:d2:fe:9a:b1:be:a1:69:3c:b9:07:ba:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B8:5A:2F:78:BA:51:A0:C2:10:11:08:51:18:2D:BB:BC:F1:E6:76
X509v3 Authority Key Identifier:
keyid:57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b8:2e:9e:17:0c:bd:97:fa:91:65:55:02:5e:db:12:b5:68:
b2:79:c8:0a:b4:c4:a0:2f:d6:af:09:40:65:e7:11:8a:55:d7:
f0:e4:a2:0a:c6:32:d5:bd:d8:45:18:05:4a:ae:54:76:16:d9:
00:65:00:1b:66:94:4d:5a:b3:08:52:6d:73:b6:16:5c:37:5d:
61:df:29:d6:4e:dd:68:ad:1b:5f:de:93:14:72:82:f6:be:3c:
d8:4f:77:b7:0a:27:3c:5d:cf:ca:c9:f8:ea:3d:38:4d:8c:7e:
af:dd:4a:68:40:96:a5:48:a2:15:00:4f:f9:19:0c:73:b3:76:
62:66:eb:b5:02:3e:c3:0b:04:49:08:00:5d:7f:bd:28:c7:f9:
da:76:6b:1a:9c:60:d2:e5:94:aa:6e:a4:d1:9d:70:9f:af:75:
39:0b:94:7b:9c:22:20:4e:cd:11:6d:ad:d9:db:14:63:33:e7:
09:05:04:86:03:a3:d1:9d:bd:87:4e:8d:ca:59:88:a3:1d:e7:
c7:1f:44:4c:00:07:42:03:32:53:09:f4:fb:a3:26:8e:a3:56:
1f:8d:b8:da:25:22:a7:fc:1d:dc:3a:87:03:a3:4f:54:36:3c:
ef:26:4a:72:00:9f:5e:a3:c8:4f:a1:81:e4:3c:01:7b:e7:81:
e7:35:8c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:01:15 2025 by rpki-client