Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
File: 5tM83lfaCcfZM3ce6hQllAdvmiM.mft (raw, json)
Hash identifier: d3vb/gAqYutN1eTDPbbOZRbdnk4eaOJezDcOazczYZc=
Subject key identifier: DF:94:DE:36:8A:9A:14:9E:99:B7:82:92:FA:40:2B:74:2A:D4:95:3F
Authority key identifier: E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
Certificate issuer: /CN=e6d33cde57da09c7d933771eea142594076f9a23
Certificate serial: 01964CD9C3E58CCF568A054D5B58D6F1A003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
Manifest number: 14F6
Signing time: Sat 19 Apr 2025 07:01:01 +0000
Manifest this update: Sat 19 Apr 2025 07:01:01 +0000
Manifest next update: Sun 20 Apr 2025 07:01:01 +0000
Files and hashes: 1: 5tM83lfaCcfZM3ce6hQllAdvmiM.crl (hash: qinv7A4QsZ4Au1YP/CTC//ME4YG8JzmpiEswdpegIx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:c3:e5:8c:cf:56:8a:05:4d:5b:58:d6:f1:a0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d33cde57da09c7d933771eea142594076f9a23
Validity
Not Before: Apr 19 07:01:01 2025 GMT
Not After : Apr 20 07:01:01 2025 GMT
Subject: CN=df94de368a9a149e99b78292fa402b742ad4953f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:c7:3e:2c:d2:48:1e:d0:f9:85:3d:35:a3:
3b:8e:fe:f5:6c:4b:dc:50:7d:f6:24:5e:1a:09:94:
9c:81:40:47:0a:e0:e9:df:26:82:6d:1a:07:04:da:
3b:69:c3:98:48:d7:3f:76:96:20:e3:80:fe:8b:2f:
60:1f:f7:04:c5:45:3d:ed:8f:cf:78:b9:66:07:3a:
53:54:a7:68:d8:d2:d7:7c:84:21:8d:2b:4d:5a:1b:
69:29:70:77:fd:63:c8:2e:eb:ac:a0:fa:22:01:ed:
80:b9:3a:58:e2:02:27:58:59:93:c9:1a:b8:4f:47:
c8:a6:9a:4d:ec:32:d3:fb:f3:c9:2f:94:1a:55:3f:
e1:08:e0:7a:7f:fa:80:1e:e8:1a:74:37:d6:11:23:
f6:b0:26:b0:b9:63:27:df:45:dd:85:9e:68:0b:b9:
04:f3:b8:e0:01:ac:25:1d:1b:ea:db:2c:ec:b6:29:
aa:99:4f:56:89:95:8b:ba:7d:cc:9b:70:8a:59:e3:
86:1f:10:25:50:70:ae:2f:ef:e5:0b:4d:79:ca:9b:
4b:c0:3b:84:91:34:eb:12:37:2a:1a:c1:5e:93:7f:
ca:99:85:93:66:d1:d9:58:ed:e3:f4:4b:20:4e:1b:
fb:d3:71:cb:ef:1d:05:79:a9:b6:fa:56:f3:a1:81:
fb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:94:DE:36:8A:9A:14:9E:99:B7:82:92:FA:40:2B:74:2A:D4:95:3F
X509v3 Authority Key Identifier:
keyid:E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:35:6e:04:a7:62:35:ef:26:b2:b2:55:3d:44:8c:e5:89:7f:
ab:27:ad:5c:42:c7:69:14:83:4d:5c:0f:b8:31:d8:25:8a:c3:
e0:fb:ce:8c:72:23:21:00:5a:0d:e5:ae:93:ce:92:26:e9:30:
18:05:a8:98:05:ab:52:01:ec:d6:e2:f4:ce:bc:4b:3c:6f:4b:
9a:a6:3a:48:0b:f2:c0:88:77:4f:3e:f6:10:fd:d4:00:88:63:
ed:f8:86:81:90:cc:12:49:44:8e:ce:51:f0:54:92:5e:24:5f:
f4:23:b9:d4:f4:8f:eb:b5:4f:86:94:28:31:40:0b:96:9c:4a:
ff:fb:83:50:70:ef:8f:9c:ef:23:0e:b8:87:83:ee:0d:e6:48:
2e:9a:7d:70:18:02:49:d4:77:cf:e3:8b:3f:7f:d0:53:65:ad:
16:38:7c:6e:84:2b:69:3c:f6:20:7d:e5:27:ff:01:7b:41:88:
95:af:69:cd:e9:85:02:84:9e:44:fd:27:b8:38:91:5f:85:72:
8f:3f:6f:47:b9:21:73:7f:c6:db:a2:1a:80:67:eb:b3:11:2a:
4f:56:60:76:8b:fe:67:3a:ab:eb:df:39:9d:4d:3a:fc:6f:8f:
da:6f:5a:1e:70:67:dd:df:7e:8d:75:9a:e2:af:5f:52:6e:24:
13:51:c0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:00:23 2025 by rpki-client