Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
File: elJNrL4CqVkxyh1u4ps8iVek7L4.mft (raw, json)
Hash identifier: Yy0KoKYWVnfAIBfgv/Y24rVIa8KqroO0pmlfpCGMSe4=
Subject key identifier: 11:6D:21:18:A5:E1:9C:F8:BB:6D:B3:7C:62:57:14:76:D9:E9:48:6D
Authority key identifier: 7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE
Certificate issuer: /CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe
Certificate serial: 0196BD49593A3D750B8A08801CFCDC18A9B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
Manifest number: 0343
Signing time: Sun 11 May 2025 03:00:22 +0000
Manifest this update: Sun 11 May 2025 03:00:22 +0000
Manifest next update: Mon 12 May 2025 03:00:22 +0000
Files and hashes: 1: elJNrL4CqVkxyh1u4ps8iVek7L4.crl (hash: UZIsxtXa8iIQo36k7bEPM63DoIWcD0R+idRE9sMGZlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:59:3a:3d:75:0b:8a:08:80:1c:fc:dc:18:a9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe
Validity
Not Before: May 11 03:00:22 2025 GMT
Not After : May 12 03:00:22 2025 GMT
Subject: CN=116d2118a5e19cf8bb6db37c62571476d9e9486d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:e9:1b:8b:1b:16:52:5b:6b:2a:d1:9d:ed:
5d:ce:d6:54:c2:37:ba:8b:10:2c:07:8d:6b:8b:a4:
8b:50:5a:ce:b3:a8:78:7c:6d:bd:dd:77:ac:5b:06:
a5:ce:ed:76:c2:84:ec:13:c5:56:73:be:f7:8f:be:
17:23:24:d0:f8:9d:cd:bf:ba:ff:0f:71:61:ec:b3:
17:da:c7:36:47:ca:b2:9e:29:9f:35:8f:e8:6e:0f:
ca:e9:03:57:b1:30:1f:d9:fc:ee:10:9e:c6:4a:7d:
63:f1:d9:7a:0e:d7:93:fc:1e:76:95:6b:83:6c:84:
38:36:c1:f7:af:85:2e:6a:04:ee:7d:b1:4d:2d:01:
a0:25:41:e3:6b:e5:95:88:ec:5f:38:59:38:13:3d:
5e:f8:94:d0:87:f9:52:8c:6f:fd:95:80:6b:11:65:
3d:b2:2a:61:80:71:c4:39:d8:cb:96:ad:2d:df:9e:
48:57:4b:92:72:d9:38:89:9a:07:b7:57:93:a5:74:
10:a2:33:a3:ec:e4:6b:55:86:fc:53:e5:e4:f3:90:
b2:1f:fb:a5:09:26:13:8c:b0:10:e7:10:08:36:4d:
a8:90:0b:ac:7e:fe:07:e1:a6:9a:7e:f0:d9:b5:d8:
36:c1:01:df:e1:ee:bd:b9:eb:c7:b2:06:c9:46:83:
63:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6D:21:18:A5:E1:9C:F8:BB:6D:B3:7C:62:57:14:76:D9:E9:48:6D
X509v3 Authority Key Identifier:
keyid:7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:94:72:cf:7a:1e:22:2e:c1:c5:d5:54:fe:d8:5c:45:3c:06:
af:a7:1f:04:47:4f:56:e2:9c:6f:fb:58:2d:63:7f:65:62:a4:
dc:e9:64:1f:49:c5:65:f5:db:5b:b0:28:00:2f:e4:a1:26:c4:
c8:ff:e9:5e:5a:cb:2f:91:e7:21:ef:51:18:c3:a4:0e:e7:ee:
8c:42:17:9d:bd:1e:73:dc:7c:1c:31:22:87:d5:c7:5b:64:cc:
8d:41:53:da:4c:b7:68:14:34:c7:6f:d7:50:c3:48:59:d6:77:
0d:56:50:46:2b:0d:54:35:4c:4c:fe:76:9c:7a:8e:ec:8d:dd:
d2:1b:cb:79:a4:5f:2f:cb:b0:86:48:65:0a:ed:ff:fd:f8:8c:
91:ff:a2:4a:c1:f9:38:dc:60:bf:76:f8:bd:85:56:e5:8d:6d:
04:67:60:8b:85:d2:03:f7:4b:44:a7:2c:d0:97:91:fc:a1:60:
e0:24:8e:32:75:d6:a7:ee:eb:25:07:fb:c9:4a:96:08:77:60:
4b:83:33:f3:cc:86:c8:2f:26:6b:6b:cc:55:99:8a:b3:64:66:
6d:4f:a5:01:5e:e3:56:b3:08:81:a3:f9:ab:29:49:32:7a:d9:
49:25:6d:55:54:39:08:94:6d:bd:ae:27:56:82:58:ea:95:49:
69:4e:d9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:47:46 2025 by rpki-client