Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
File: U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft (raw, json)
Hash identifier: dmUZQdT5jWv0e1QQ3C3XxNRr3Vg+3jEd2Fj/JFpWAAE=
Subject key identifier: 07:AB:21:8E:7D:10:F2:F5:26:B6:EC:FA:C6:4A:04:06:80:8E:B8:EE
Authority key identifier: 53:65:83:DE:83:6F:CC:28:E7:0B:F6:6E:AD:B8:D3:8F:3F:64:F4:E1
Certificate issuer: /CN=536583de836fcc28e70bf66eadb8d38f3f64f4e1
Certificate serial: 0196586F68B278F2D0962FA9DB1D7F1F72FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 13:00:18 +0000
Manifest this update: Mon 21 Apr 2025 13:00:18 +0000
Manifest next update: Tue 22 Apr 2025 13:00:18 +0000
Files and hashes: 1: U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl (hash: BbQHwD0oi3eaogBH10MFl1D4778NsfQiuJxYsKmozuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:68:b2:78:f2:d0:96:2f:a9:db:1d:7f:1f:72:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536583de836fcc28e70bf66eadb8d38f3f64f4e1
Validity
Not Before: Apr 21 13:00:18 2025 GMT
Not After : Apr 22 13:00:18 2025 GMT
Subject: CN=07ab218e7d10f2f526b6ecfac64a0406808eb8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:74:9e:b8:7b:4d:e2:97:e3:55:7a:5d:cc:8f:
b4:60:68:24:86:0a:f9:b9:33:30:7f:8f:a3:4c:2d:
a1:3f:39:2c:00:51:c9:28:94:4a:62:5b:9e:b8:dc:
ff:56:45:b1:c5:16:6c:39:88:9a:ac:d4:6f:c5:4a:
5e:e0:bb:e3:94:0b:7a:ea:61:3f:08:83:10:28:5a:
e1:00:85:85:fb:0c:29:8c:ad:12:a5:2a:8d:78:b4:
47:9e:d1:7d:2a:6b:40:0d:6b:1c:68:58:bc:b2:c0:
63:17:26:5a:e4:ee:bf:a6:21:1a:30:b1:37:95:2c:
be:83:26:6a:d0:6d:77:66:dd:24:ea:f0:d0:87:41:
04:43:9e:f9:12:0f:b3:de:ba:ce:bc:d4:12:0c:59:
b8:1e:db:09:cf:0c:83:91:82:bb:f3:06:a6:f0:e4:
7e:ad:81:2d:f1:b3:eb:1e:38:81:e5:d1:9c:ae:7a:
c7:2a:62:5c:ae:9a:31:23:d9:03:f2:b0:80:e7:33:
7d:18:36:41:f7:5f:18:3e:61:58:10:7c:3c:15:76:
2d:fb:5c:37:2b:ab:00:2a:c5:bc:cc:4c:ba:1d:9e:
7b:44:64:e2:60:f4:d6:f0:74:8e:13:ac:bd:98:9c:
cc:e7:33:7f:9e:41:8f:26:ec:c7:8f:57:6a:f4:b2:
83:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AB:21:8E:7D:10:F2:F5:26:B6:EC:FA:C6:4A:04:06:80:8E:B8:EE
X509v3 Authority Key Identifier:
keyid:53:65:83:DE:83:6F:CC:28:E7:0B:F6:6E:AD:B8:D3:8F:3F:64:F4:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d7:3e:81:17:38:bc:53:eb:6f:a9:c7:47:bc:17:79:ef:1d:
c5:58:d0:a4:26:92:d0:f2:8b:a7:e5:6a:a8:0d:4e:13:ac:13:
16:2c:8b:63:4e:3e:af:19:ef:ff:e9:7a:20:3b:95:c6:37:1f:
b0:c6:27:3c:f7:19:6d:74:58:6a:77:5c:29:7a:9b:15:1b:91:
79:31:a1:cc:e7:6e:fa:db:0e:37:8c:c1:1e:2d:88:9c:41:c7:
e4:8d:22:e5:7e:58:5a:e0:2c:4f:54:dd:0c:61:18:f6:f7:fd:
da:2e:4c:c0:65:2a:51:21:15:fc:ea:b3:69:96:fb:84:ad:50:
d1:ac:a7:bc:9d:c8:5d:e3:e2:cb:c7:4f:b4:dc:a9:9e:b4:28:
eb:eb:86:9f:e6:19:d8:1f:61:b8:d5:db:4e:21:89:ff:a2:0a:
58:4d:0a:66:27:8b:75:7f:90:35:4c:92:44:8f:19:57:c7:da:
b4:59:4f:b9:85:aa:fd:c6:0a:de:45:1e:a4:00:10:bc:06:1a:
0b:ea:b5:33:71:d7:58:50:ba:7d:48:e1:85:80:75:55:b1:6f:
8f:00:e6:cb:25:e1:10:82:30:e7:ed:09:51:5c:4e:e8:91:0a:
08:cf:59:2f:db:8c:23:c3:0d:ff:f1:de:cb:05:23:aa:04:2f:
f8:8f:ca:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:31:45 2025 by rpki-client