Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
File: 1ehGG6CEVcNE_HU6TZZtsbXexdU.mft (raw, json)
Hash identifier: gkM2sl+VG3JYmFvCqE6PuxsOQOgjUqn9fWfH+wFJdAk=
Subject key identifier: 61:DB:BA:71:70:6B:33:8C:B8:E2:44:8B:63:4E:CF:83:58:FE:6C:51
Authority key identifier: D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
Certificate issuer: /CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Certificate serial: 0196BDEEBCB5C6DFE456DC1195134C7E50FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
Manifest number: 09F1
Signing time: Sun 11 May 2025 06:01:01 +0000
Manifest this update: Sun 11 May 2025 06:01:01 +0000
Manifest next update: Mon 12 May 2025 06:01:01 +0000
Files and hashes: 1: 1ehGG6CEVcNE_HU6TZZtsbXexdU.crl (hash: RPkdvfgmQ0BlbLPSqbjdVvCZT1snx9S9TWN6rvGLbL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:bc:b5:c6:df:e4:56:dc:11:95:13:4c:7e:50:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Validity
Not Before: May 11 06:01:01 2025 GMT
Not After : May 12 06:01:01 2025 GMT
Subject: CN=61dbba71706b338cb8e2448b634ecf8358fe6c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:ef:77:1e:1c:f2:61:d6:de:52:07:c3:5e:
70:61:05:0e:e5:34:b1:b3:5b:f6:70:64:32:e9:50:
40:c8:b8:bf:b7:d6:4c:42:2a:f8:1d:ce:59:f2:6e:
9b:68:ef:bb:cc:82:b6:59:ed:cb:ab:1c:b8:c7:3a:
97:6e:ef:c0:24:9e:77:2c:5f:e7:1a:45:50:9c:c9:
5d:84:59:81:f5:94:47:47:55:2c:a3:aa:62:2e:d7:
30:90:3f:43:9d:ac:a0:55:09:6b:b8:e1:46:7c:d6:
4a:c1:f1:27:fc:d9:36:ee:1b:40:73:bf:00:c1:d4:
58:da:3d:90:34:6f:4a:c0:fb:20:d5:7c:ce:2c:ac:
72:c9:dd:33:0b:cc:29:64:3c:66:d6:35:ef:25:6c:
b5:5f:8f:41:c3:0e:84:7a:a1:19:6a:ae:d3:01:a7:
cd:5e:7f:3b:18:e5:43:47:f8:47:6b:f8:45:85:04:
b9:38:0e:d4:53:55:1b:af:68:ab:f4:9d:b9:12:ab:
79:66:30:43:5c:89:85:39:f4:0a:b8:6f:55:2e:fb:
1f:48:a1:14:38:38:08:66:48:fe:42:ef:a4:ee:4a:
46:ee:84:1d:42:13:09:5f:22:07:60:a5:fb:62:5e:
91:90:7a:de:3c:d3:4f:61:e2:2e:91:64:78:ec:78:
8b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DB:BA:71:70:6B:33:8C:B8:E2:44:8B:63:4E:CF:83:58:FE:6C:51
X509v3 Authority Key Identifier:
keyid:D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2d:6e:7e:74:39:48:30:82:24:d2:69:34:bf:e7:43:dc:41:
17:23:00:bf:0b:0e:77:15:ab:89:ea:1a:45:2c:53:cd:d1:f3:
2f:28:35:0e:a8:63:ab:2d:8f:9a:8d:74:6e:da:67:ef:77:37:
99:85:5f:33:eb:9b:09:2e:95:d7:c3:4e:eb:a0:fc:8c:bd:f7:
e7:b2:e4:ed:00:7c:68:2e:09:bb:9a:e6:7a:80:f0:b4:92:93:
9d:94:c3:13:89:b6:ff:d7:25:73:4b:f9:29:46:71:0a:b2:c8:
e0:c7:47:66:a8:43:59:c8:e2:a4:16:5e:a7:9d:27:81:7b:7f:
c9:38:c5:82:98:fd:68:d1:87:2d:f0:4d:c8:b6:a6:fc:99:a7:
d9:ee:43:7b:0a:e6:4b:90:45:97:b6:2d:77:b9:1b:d4:d3:bd:
fb:60:c6:ad:79:79:20:3e:15:36:98:22:cf:36:cb:be:74:8d:
c3:2e:dd:eb:b9:6f:89:84:90:0e:38:9e:b7:1e:f2:14:41:d5:
21:c6:4a:e8:5b:2c:45:40:f9:14:64:81:5d:fc:be:95:9b:9c:
1a:bf:46:f2:1f:76:c2:ed:cd:15:f9:a4:28:72:9d:f8:5c:7f:
a9:9c:6d:35:49:a1:00:44:4b:c6:17:56:11:b8:b3:65:3d:08:
10:e6:23:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:18:38 2025 by rpki-client