Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
File: cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft (raw, json)
Hash identifier: OhKg+sACwT+4kYJFABJ9/li+RYQAKnJg3oe4CoaXwv0=
Subject key identifier: C9:86:96:16:D7:62:24:04:87:8C:7C:B4:06:45:D3:22:B5:CA:93:A8
Authority key identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
Certificate issuer: /CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Certificate serial: 019653EE73C6AE7102693F0BC7B15CD4CB1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
Manifest number: 05CE
Signing time: Sun 20 Apr 2025 16:00:57 +0000
Manifest this update: Sun 20 Apr 2025 16:00:57 +0000
Manifest next update: Mon 21 Apr 2025 16:00:57 +0000
Files and hashes: 1: cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl (hash: 04EpA5ScTRuyGwvAYU+3LXZ55Cc6cyz24iauFLt0N2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:73:c6:ae:71:02:69:3f:0b:c7:b1:5c:d4:cb:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Validity
Not Before: Apr 20 16:00:57 2025 GMT
Not After : Apr 21 16:00:57 2025 GMT
Subject: CN=c9869616d7622404878c7cb40645d322b5ca93a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c5:9f:49:2b:b6:0e:f3:a8:5b:52:e3:f5:b9:
ca:63:22:09:16:e0:29:2b:8e:7d:36:f8:6c:bf:ce:
d0:e9:42:51:88:fe:0a:81:9e:e4:5a:87:77:a1:93:
3d:db:3c:91:1c:f0:11:76:58:6f:38:f0:06:91:fe:
c1:61:d6:81:b0:f1:2e:3a:ec:db:6a:a1:58:e0:7e:
80:c1:96:ed:4d:b0:fb:ab:d0:64:2a:3f:0a:40:4d:
f9:4b:ae:4e:45:8d:20:fa:37:02:7a:e2:97:cb:5e:
1e:8e:1d:5c:9c:0c:bb:87:22:99:5f:93:d4:9f:6b:
75:b6:95:33:92:da:ce:3e:90:3d:fd:7f:99:6a:d3:
2f:09:94:05:ae:65:08:c8:9f:78:3b:34:ba:ad:84:
44:36:39:4a:d5:38:23:0e:ea:58:0d:f0:a9:a5:60:
ec:0f:3a:ab:93:8f:6a:54:73:40:d5:f2:31:98:d0:
de:7c:d3:7e:73:74:71:a1:16:db:3e:f5:62:1d:ad:
4d:1c:86:0f:04:79:ea:82:78:ec:8b:4d:84:1d:eb:
8c:10:0d:3e:50:4a:b8:b8:21:b0:a1:31:05:95:c0:
21:61:e0:3d:b9:e3:60:bf:c1:4d:74:d6:f6:c8:d9:
a1:71:91:25:6a:b1:a7:1e:5e:7a:24:6f:c3:ea:bb:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:86:96:16:D7:62:24:04:87:8C:7C:B4:06:45:D3:22:B5:CA:93:A8
X509v3 Authority Key Identifier:
keyid:72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9c:93:86:00:c5:5e:4e:6f:46:08:54:74:cb:f5:6c:40:3e:
b6:3b:a4:0a:2b:80:1d:cd:90:2c:09:8f:13:9d:9b:a5:4b:00:
24:78:8e:37:9f:60:2a:bd:e7:66:32:3a:d5:41:99:1f:79:03:
1c:ef:f7:e2:51:52:c7:cf:ae:5e:4e:85:a5:08:c4:04:26:75:
19:ce:b6:bb:6a:be:fc:3e:f7:eb:79:a7:8b:4b:86:9a:d0:82:
6a:70:49:6c:aa:0a:e7:2c:00:ee:7b:75:39:40:47:88:58:10:
f7:73:f2:71:8c:8e:8f:23:f4:33:0f:1a:3a:e5:57:c8:3f:ad:
f0:f1:05:39:b6:7a:f2:7d:3b:30:76:b4:23:ad:c1:32:8b:f9:
0f:94:84:ca:49:30:76:32:1f:8e:28:d4:5d:56:91:b0:12:81:
9a:f0:ac:61:d9:d6:10:19:a2:23:36:2c:ab:24:50:db:df:06:
52:83:52:3e:e5:70:9f:d3:6f:ec:e3:52:5a:4b:50:1b:64:ef:
dc:9d:ef:74:53:5e:e5:05:12:22:a3:d4:c6:89:b6:d8:b4:c0:
48:9d:e9:ed:93:57:09:dc:2e:1d:3f:f2:df:51:22:48:46:f2:
92:7d:0a:94:94:59:74:4e:01:ee:23:97:d8:2c:c6:93:b2:7e:
b1:fc:7a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:30:16 2025 by rpki-client