Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
File: afY2pbazoordg_l0Rtewg7lMPa4.mft (raw, json)
Hash identifier: id1qXerM1Yw06UBj975/okXjB/FDpzTVrf7oJeqaC6A=
Subject key identifier: E3:D6:76:37:25:FD:C2:35:AE:F4:72:38:D5:8C:D7:3E:67:3C:B0:BC
Authority key identifier: 69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
Certificate issuer: /CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Certificate serial: 0196C984CDCCACBA55F61F78B40B43A77706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
Manifest number: 0508
Signing time: Tue 13 May 2025 12:00:45 +0000
Manifest this update: Tue 13 May 2025 12:00:45 +0000
Manifest next update: Wed 14 May 2025 12:00:45 +0000
Files and hashes: 1: afY2pbazoordg_l0Rtewg7lMPa4.crl (hash: zAMFpL/XmLcPO38Sz2TdFvtmDDQzCHXukFWQXgsbQV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:cd:cc:ac:ba:55:f6:1f:78:b4:0b:43:a7:77:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Validity
Not Before: May 13 12:00:45 2025 GMT
Not After : May 14 12:00:45 2025 GMT
Subject: CN=e3d6763725fdc235aef47238d58cd73e673cb0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3f:e7:b7:9b:0b:8e:cb:6c:71:65:84:a5:76:
47:02:87:3d:03:60:ff:45:15:cd:bd:7a:83:27:58:
4e:41:17:4c:0d:c1:ec:16:3b:93:f6:2f:a5:42:03:
f9:90:5d:29:85:52:fb:ae:3d:da:8d:8e:f6:05:b3:
70:7b:ea:8c:f6:8f:12:c2:9b:a5:c2:d0:16:c3:10:
50:a6:5e:2b:54:bf:cd:41:34:69:78:55:b3:0f:8d:
73:98:86:9b:4b:7b:2d:9e:78:45:5c:fe:bd:c5:90:
1c:67:0f:5b:81:76:77:f1:eb:cf:8c:80:51:44:6b:
d6:86:ca:fc:bb:3d:95:bb:0a:36:27:2f:e0:96:96:
e5:2d:9b:0e:95:bb:ab:89:1a:64:b8:c6:33:cf:f2:
c7:70:f3:31:56:04:d9:ae:1c:48:77:e9:b0:e5:d2:
0d:3e:4c:e7:ac:b6:a5:4e:b5:f7:ce:d5:9c:43:da:
11:f8:0b:fa:7d:9a:85:b3:46:f7:d7:b5:8e:6c:7b:
ad:c9:a3:42:d9:5e:ec:eb:3e:66:1c:02:60:d9:28:
d2:eb:c8:75:c5:60:db:18:b2:25:fb:c3:ad:ec:27:
3e:e7:09:e6:b5:f7:0a:fd:4a:ee:8c:a9:4d:11:8f:
3f:c5:b5:8a:a3:ff:1f:fd:23:aa:d5:de:ce:7a:1c:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D6:76:37:25:FD:C2:35:AE:F4:72:38:D5:8C:D7:3E:67:3C:B0:BC
X509v3 Authority Key Identifier:
keyid:69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e8:2e:b5:c5:df:72:c5:73:d8:78:b3:d0:24:22:f8:57:68:
0b:75:c6:bc:29:34:5c:26:d3:8d:ab:44:2b:5a:38:00:9b:76:
78:bb:9d:66:03:d5:2d:7f:11:8b:ff:3d:cf:31:d0:04:39:d3:
66:62:33:a5:79:92:5c:09:aa:ef:c7:41:25:7e:e5:17:49:f3:
26:cf:b0:ab:01:33:84:50:b9:90:09:99:30:03:bc:18:83:be:
4b:dd:c7:46:4a:18:3c:54:08:a2:02:58:fa:14:09:0b:6a:a8:
b0:52:1b:e0:b5:30:08:6b:b2:d4:60:e4:00:27:67:d7:f1:0d:
a7:a4:35:97:f7:21:87:ad:be:ed:17:91:d9:6b:ec:91:bd:aa:
5f:20:99:0e:5d:4e:32:2f:86:d6:e9:dc:44:b4:51:2b:f5:6e:
29:30:87:b8:4e:2e:6f:c7:ac:80:bf:d3:a0:07:a7:bb:1c:3d:
a8:ae:59:52:52:f0:8d:ca:e6:d4:de:84:5e:41:81:ba:71:84:
a6:00:55:25:61:52:ed:03:12:06:89:90:a5:e3:39:dd:d7:99:
96:0a:79:5d:4e:f1:c4:ee:91:a6:df:f4:50:6a:b3:31:e0:ec:
50:bb:dc:62:54:a4:61:10:76:aa:ac:72:53:d1:dd:8a:98:3f:
ed:63:25:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:11:42 2025 by rpki-client