Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File: 481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier: zBNkN0qVh2ztky7bsb4654jl1d8ZPWfVXRi25++4Ono=
Subject key identifier: DE:BF:A4:1E:F3:76:CE:61:47:6C:61:70:9D:44:9A:28:20:6C:3B:CC
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer: /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial: 0196C0B86BB99508AE03B03167049E190F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number: 042A
Signing time: Sun 11 May 2025 19:00:33 +0000
Manifest this update: Sun 11 May 2025 19:00:33 +0000
Manifest next update: Mon 12 May 2025 19:00:33 +0000
Files and hashes: 1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: FhWfUuycALUgHbBGBrmnExJCUq6yzyUk5yuVYPuYXUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:6b:b9:95:08:ae:03:b0:31:67:04:9e:19:0f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Validity
Not Before: May 11 19:00:33 2025 GMT
Not After : May 12 19:00:33 2025 GMT
Subject: CN=debfa41ef376ce61476c61709d449a28206c3bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ff:4d:43:56:8d:5b:21:8c:b8:49:8b:1f:d0:
a4:e1:5c:82:a2:71:e0:79:33:07:4c:cf:ed:a5:8e:
82:e9:d1:9f:fb:dc:e6:c8:b9:8b:57:74:c2:39:f6:
7c:1f:f2:db:da:0f:c7:17:08:f5:06:c0:0b:05:fb:
64:25:6a:35:51:41:d2:6c:bb:44:e7:31:33:d3:13:
61:31:cb:57:36:1d:37:55:51:84:48:a5:dd:fb:c3:
15:53:c9:f2:bd:9b:fa:12:f0:44:29:e1:e1:0d:46:
cc:48:6e:39:57:40:74:9a:5a:28:16:39:db:46:0b:
be:15:57:1a:c6:00:00:d9:37:0e:80:81:79:bd:4a:
f3:fb:ac:18:02:2c:2e:36:80:9f:9b:7a:68:95:33:
bb:7a:28:c2:ab:a2:b3:a2:69:0a:a4:7b:f4:7f:3d:
2d:b5:60:61:e9:b1:d5:96:48:60:e0:08:05:3e:6d:
56:d1:b0:25:15:f1:3b:d5:cd:3e:68:d6:8c:ed:89:
5a:a6:b2:ef:e7:10:e5:32:fa:1c:35:1e:f5:6e:e5:
c5:fe:2a:15:44:42:11:72:6f:dc:5c:ce:2b:75:93:
ae:21:aa:07:d6:5b:36:77:09:4e:0d:19:61:a6:5f:
5a:05:84:89:d2:93:36:9e:7f:89:86:9c:91:c8:4a:
e0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BF:A4:1E:F3:76:CE:61:47:6C:61:70:9D:44:9A:28:20:6C:3B:CC
X509v3 Authority Key Identifier:
keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f5:04:61:ed:2d:e6:98:90:29:81:36:e3:95:fb:ed:7b:27:
d1:1c:68:d3:69:fb:85:5b:c0:dd:c4:fe:53:fe:1d:de:11:b9:
2d:09:71:ad:79:ff:a0:88:da:f8:b2:85:26:7d:2d:98:a4:93:
96:c3:fd:27:0c:54:c1:e0:61:45:5a:7d:cf:0e:d0:5d:14:aa:
93:16:c4:07:37:b5:15:8d:74:70:c1:fe:96:c1:f1:bf:e1:45:
d8:66:42:47:16:f5:0e:9f:ee:c8:bb:3e:2a:07:e4:e1:76:1e:
39:83:a8:e7:82:21:99:bf:ac:fd:fb:86:2f:52:99:5f:ad:94:
0c:7a:a2:fe:d8:6e:1c:52:d5:71:59:ba:01:35:7c:74:ad:3f:
f3:34:f4:ec:c9:3d:fc:1c:c2:0e:fa:c1:67:b6:9d:9a:bb:6f:
26:7a:c4:74:c8:80:03:4f:ff:db:99:55:28:2c:8c:d2:f5:8f:
81:21:cb:21:3b:01:90:5a:78:1e:f9:4b:75:b7:06:78:6c:de:
b6:2b:c4:9b:23:be:ef:dc:d5:2c:a0:80:f6:f4:04:26:fd:9f:
19:d1:0d:06:fe:28:67:5f:9d:5b:9c:2c:b3:db:fd:9a:c1:68:
fd:f5:c8:4a:ba:4d:2e:c3:bb:c8:60:34:b1:87:ff:70:f1:30:
6f:78:06:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:30:38 2025 by rpki-client