Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: Zqe7UxbSDPInNl29byc26UWcX9dVYB+bY+cbBiBW+84=
Subject key identifier: 8A:E0:38:2C:A9:5B:DF:63:DA:BF:50:FE:BD:95:24:9B:19:A8:C4:E0
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 0196AC8D549953E3AA61574555FE3664EE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 1527
Signing time: Wed 07 May 2025 21:01:05 +0000
Manifest this update: Wed 07 May 2025 21:01:05 +0000
Manifest next update: Thu 08 May 2025 21:01:05 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: T6ONs3WhWuecAgV775ukeo+RpdTb+xMqhbt1AgRkro4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8d:54:99:53:e3:aa:61:57:45:55:fe:36:64:ee:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: May 7 21:01:05 2025 GMT
Not After : May 8 21:01:05 2025 GMT
Subject: CN=8ae0382ca95bdf63dabf50febd95249b19a8c4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:ae:4d:de:6a:1d:cf:22:af:0b:49:91:81:
3d:dc:e5:5a:04:60:a9:7a:99:dc:f0:f4:61:63:41:
a0:6a:86:4c:c7:c1:93:24:13:84:05:87:17:7b:f2:
5b:e0:5b:6a:a0:5a:5b:9e:75:56:52:13:49:14:42:
68:61:b2:35:f0:0e:52:1b:9f:de:20:da:30:bb:6a:
06:dc:94:a2:63:97:3b:3f:99:68:09:54:7a:db:7a:
92:48:f1:95:ca:c2:21:06:f3:9c:dd:9e:ab:43:53:
99:a4:52:2e:11:5d:e2:03:19:6c:bf:ea:3f:8a:d0:
a2:40:b3:dd:de:6e:6e:f7:a4:df:a9:09:48:a5:2e:
30:26:2e:8b:9e:2f:44:74:36:34:6a:ce:94:c6:82:
78:6d:ef:76:ea:82:78:18:d8:85:3f:2c:e5:fc:55:
c0:7c:a5:df:e7:9b:52:6d:72:62:eb:03:ca:f1:94:
a6:f0:d2:ab:c2:c6:a9:3f:8a:dd:a6:0a:02:76:da:
fa:c8:c6:21:96:ec:ff:cc:e1:fc:2e:0d:8b:65:ed:
2a:71:da:93:c2:91:de:fc:8f:ed:b2:2a:15:1d:82:
67:21:ce:58:ea:4c:db:d7:7c:3d:2c:1b:73:fd:ae:
57:40:27:7b:8c:9b:5e:47:bd:b7:22:d9:22:7c:70:
26:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E0:38:2C:A9:5B:DF:63:DA:BF:50:FE:BD:95:24:9B:19:A8:C4:E0
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e1:c8:0b:e5:6c:17:d0:38:5c:c8:8f:10:70:59:52:6f:1c:
b4:7b:bf:89:8e:e2:2b:84:2c:16:15:a9:e8:34:68:1d:cc:dc:
64:d9:5f:30:41:c7:8a:09:cd:a6:c7:d3:be:cf:d1:12:f4:19:
a5:e8:87:87:d7:05:be:ba:89:3d:a4:e6:88:ed:a9:fd:a2:c9:
8a:2c:86:64:c2:eb:b3:5a:19:a6:1a:b4:0b:c5:00:61:06:c2:
c3:c0:45:86:c8:b1:0a:a4:d5:f6:45:36:9b:5b:51:19:ad:2b:
69:f4:30:25:fc:67:90:0f:44:a3:22:9d:02:40:70:33:f1:81:
c2:db:69:f5:de:b0:4c:05:df:c9:ec:17:43:a3:1a:8a:b1:d5:
da:71:53:f0:81:1c:dc:a5:da:14:c2:3c:ee:f7:7c:86:81:18:
92:5d:77:4e:94:c5:c4:04:d5:80:85:03:2d:ea:68:1b:a4:d9:
aa:a6:8a:51:15:16:7f:9a:7a:ef:80:a1:bd:ce:6f:bb:82:c6:
33:2f:e5:37:0b:fb:f5:7d:fc:6b:02:d8:fa:0b:f3:0f:3d:43:
cb:1c:a2:a0:9a:04:4d:8a:59:da:ab:97:4e:23:23:a0:39:73:
9a:ba:a5:53:61:0c:7c:8e:14:a7:9c:90:65:77:cc:8a:c6:55:
7d:63:57:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:11:21 2025 by rpki-client