Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
File: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft (raw, json)
Hash identifier: adJ7VB/IuMJ085QMOBYeAuZWtVaL7Nopj0ccqFtkDtY=
Subject key identifier: 86:ED:6D:67:95:B4:03:CD:EF:4C:D2:56:18:19:0C:09:E6:D4:51:07
Authority key identifier: 44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
Certificate issuer: /CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Certificate serial: 01963FC28C207EF5A6EF3D8EA7D4A5A3DCCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
Manifest number: 02AC
Signing time: Wed 16 Apr 2025 18:00:36 +0000
Manifest this update: Wed 16 Apr 2025 18:00:36 +0000
Manifest next update: Thu 17 Apr 2025 18:00:36 +0000
Files and hashes: 1: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl (hash: OrcnH3vFzlH7w5tRmpmCkQYD2A1reR4v0p7p5chB82s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:8c:20:7e:f5:a6:ef:3d:8e:a7:d4:a5:a3:dc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Validity
Not Before: Apr 16 18:00:36 2025 GMT
Not After : Apr 17 18:00:36 2025 GMT
Subject: CN=86ed6d6795b403cdef4cd25618190c09e6d45107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:db:0d:81:bb:38:42:fb:39:05:2d:6a:59:12:
47:52:2a:52:33:32:e5:d8:22:76:22:d1:50:89:08:
a6:3d:dd:53:de:6a:c7:3c:3f:da:9f:41:ce:c5:55:
3b:03:05:43:22:40:fa:a2:f4:63:44:f4:e8:6b:03:
fa:ca:34:f4:65:56:f6:6d:0e:72:6b:01:56:9a:41:
f0:96:8f:bf:7c:a1:e2:f5:de:90:55:35:8a:dc:ff:
c8:a3:d5:aa:36:3b:8a:a3:0d:d7:16:19:a9:66:15:
33:10:d2:75:a6:53:15:40:71:5d:b6:d2:9a:19:51:
42:d7:b3:c9:aa:f7:ec:7b:78:06:66:3c:bb:d1:f3:
95:84:f1:e3:ea:f7:74:94:6a:e7:8c:f8:3a:9f:c2:
a6:c3:1b:c4:81:21:3b:13:97:83:3d:e7:bc:55:a0:
dc:ce:b7:1f:0f:03:9a:af:7e:36:ef:7d:43:6e:14:
a1:6c:8e:e7:a9:a4:57:cd:43:5f:81:35:80:c4:71:
f7:0a:95:f6:a0:2a:d2:3b:99:7f:6d:e0:6e:56:ee:
3b:60:d5:a7:24:78:a6:0b:97:bb:bf:96:7a:e3:04:
53:84:64:b4:dd:7b:11:7e:8e:6a:e9:a9:d0:ab:2a:
27:7f:9f:c4:8e:04:31:6d:0d:d6:68:70:1f:2f:cb:
ed:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:ED:6D:67:95:B4:03:CD:EF:4C:D2:56:18:19:0C:09:E6:D4:51:07
X509v3 Authority Key Identifier:
keyid:44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c6:52:9a:8f:f7:af:0b:ef:50:f6:7b:3f:17:8f:26:7f:69:
21:05:16:1c:90:50:9b:18:df:fb:84:46:e0:29:69:f8:b6:98:
be:f0:42:36:87:2f:5a:22:77:73:58:d3:24:6e:d3:7d:22:6e:
70:7f:39:4f:a2:13:9f:1d:16:5f:d9:12:e1:e8:5f:8f:6a:43:
1d:01:e6:e5:b7:90:27:6e:b2:47:f2:f0:bd:31:dc:c1:3e:71:
e3:d0:f0:8b:9c:b2:bb:ba:43:fc:6a:1a:54:74:bb:3f:db:aa:
a7:e3:8f:da:6b:7f:a4:fe:69:a8:4c:7b:24:66:31:c2:7a:6d:
01:44:66:dc:61:6a:1e:bc:2b:5c:dd:3a:77:a4:0b:0c:3f:fe:
0c:0a:95:d6:00:7f:64:94:e5:fa:10:80:29:63:2f:8d:e3:6f:
cc:f5:7d:4f:03:a1:07:6e:8e:32:9b:cd:a5:5d:a0:b4:5a:7d:
cd:37:3f:0d:c3:3c:cd:11:37:d1:16:a5:f5:d0:b0:4d:7f:53:
26:9e:b4:3b:b8:69:7e:92:a5:bf:b5:ec:fe:77:53:77:33:70:
2b:b5:11:e5:48:40:11:d4:94:e1:0f:33:db:d4:df:2e:01:a2:
99:2f:f1:71:b0:77:3c:a9:18:e5:92:95:da:10:c2:01:39:a4:
8d:c0:a7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:12:57 2025 by rpki-client