Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
File: gqSUodrlSHPfot61bQMTNAdqyVs.mft (raw, json)
Hash identifier: hw+UAZlux4t3C6knzX1VthceYnu+LrPozjh1GnIOzFw=
Subject key identifier: E2:4C:3C:46:3D:E7:50:A7:44:E9:B7:BF:23:4A:44:3F:C2:1E:BC:7C
Authority key identifier: 82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B
Certificate issuer: /CN=82a494a1dae54873dfa2deb56d031334076ac95b
Certificate serial: 01958EF3204C9860B5912AF25C18404DAB90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
Manifest number: 0642
Signing time: Thu 13 Mar 2025 10:00:52 +0000
Manifest this update: Thu 13 Mar 2025 10:00:52 +0000
Manifest next update: Fri 14 Mar 2025 10:00:52 +0000
Files and hashes: 1: gqSUodrlSHPfot61bQMTNAdqyVs.crl (hash: fL9JHAeQOlgezyLJA2kWTjpPfrsCUFrbZc45GX3RWv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:f3:20:4c:98:60:b5:91:2a:f2:5c:18:40:4d:ab:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82a494a1dae54873dfa2deb56d031334076ac95b
Validity
Not Before: Mar 13 10:00:52 2025 GMT
Not After : Mar 14 10:00:52 2025 GMT
Subject: CN=e24c3c463de750a744e9b7bf234a443fc21ebc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:77:23:bd:e8:1e:fa:8b:36:5b:f0:58:41:
34:f8:a7:07:cb:73:40:6b:8e:a8:46:c2:df:ca:9a:
1c:08:c4:9b:0c:56:c8:d6:b0:8e:92:d5:f6:2b:84:
2b:66:68:74:54:a4:54:bb:4e:f7:dc:f3:4b:06:71:
19:ab:6c:88:51:0b:ba:5d:ec:57:9b:23:9b:db:73:
08:ad:1c:58:f4:c8:26:2a:fe:8b:17:ff:19:52:ba:
33:fb:9f:fa:8e:5e:a5:82:b1:2b:a4:84:40:b9:b9:
0e:d9:44:9c:e1:f6:a4:34:d7:71:da:65:5e:c2:20:
6e:23:bc:25:eb:ad:bf:ca:55:34:90:f9:cd:09:aa:
6f:82:5e:e4:a9:3d:ca:98:13:b5:80:3a:85:a7:f9:
e1:1c:24:46:26:90:b8:b2:21:26:09:0e:10:e4:53:
be:f6:cc:37:ef:10:38:a7:5f:fd:4c:8a:ad:3c:16:
68:d1:fb:4b:04:d7:20:45:ad:b2:94:48:72:10:61:
6d:95:43:a7:49:0e:ef:9a:ab:62:d5:a9:4a:a3:55:
11:2c:da:6e:c6:07:b8:23:d1:eb:99:5f:ca:8c:79:
42:0a:5d:33:85:17:fc:2e:15:ac:16:82:9c:99:1a:
7c:e2:95:21:f7:50:8a:82:f7:00:32:a3:f8:92:06:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4C:3C:46:3D:E7:50:A7:44:E9:B7:BF:23:4A:44:3F:C2:1E:BC:7C
X509v3 Authority Key Identifier:
keyid:82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7a:32:81:25:17:12:d9:be:46:41:e7:4a:04:c4:a3:cf:02:
93:35:9c:47:52:28:da:8b:70:60:8e:b2:65:0a:37:f5:ca:15:
cd:7e:03:9c:50:5b:5c:d5:fb:23:b1:34:b4:cb:72:43:97:7a:
00:f8:ab:55:48:ce:fe:89:f4:1d:2e:88:25:1b:d9:db:45:26:
c9:73:8a:8a:dd:02:50:12:02:47:ee:13:24:b4:bf:06:1e:c7:
f0:0e:8a:50:89:d0:db:94:79:09:90:46:0e:a8:79:da:a1:df:
7b:72:67:79:08:8d:34:93:26:d2:8a:e4:e5:bd:e2:cf:1a:21:
6c:d5:b9:f1:81:9b:02:de:fc:a4:35:eb:19:b9:c6:6a:62:37:
95:dd:f1:4f:dc:92:7f:12:d0:3e:5b:1b:4a:ff:27:71:ff:46:
7f:4d:e9:5d:58:91:61:20:c9:5f:28:12:13:8a:6f:18:0a:03:
38:f5:a9:e3:a0:55:86:34:21:2b:51:fe:45:6c:12:a8:a0:73:
fb:5e:cb:35:38:e4:ff:0d:6f:9d:31:7e:56:a4:f2:1a:fc:b8:
87:cf:94:93:e9:ea:61:64:2b:63:47:6b:d1:07:9e:3b:aa:1c:
f1:28:d5:5e:38:17:47:e4:b6:b9:54:c0:7f:66:50:ba:f4:27:
58:04:7d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:08 2025 by rpki-client