Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
File: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft (raw, json)
Hash identifier: RcUzg2E3DIUwlaZxV4MGviB+8druGzFd5ZbV14/takE=
Subject key identifier: 83:E5:AA:62:AA:0E:B4:8E:91:04:5C:11:B0:6C:39:14:65:74:3E:8C
Authority key identifier: D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
Certificate issuer: /CN=d09ef2093da15eec90efb837b950164669f6198b
Certificate serial: 01968B4A3048EE54B1EA5AB46ED81A7FC2BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
Manifest number: 04D1
Signing time: Thu 01 May 2025 10:00:16 +0000
Manifest this update: Thu 01 May 2025 10:00:16 +0000
Manifest next update: Fri 02 May 2025 10:00:16 +0000
Files and hashes: 1: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl (hash: eEYTvU0EYfKtinNmew6x7m+SJ5of9xcAZVtfrZpQGX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:30:48:ee:54:b1:ea:5a:b4:6e:d8:1a:7f:c2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09ef2093da15eec90efb837b950164669f6198b
Validity
Not Before: May 1 10:00:16 2025 GMT
Not After : May 2 10:00:16 2025 GMT
Subject: CN=83e5aa62aa0eb48e91045c11b06c391465743e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:85:be:f6:d3:77:2a:bb:5c:56:59:9d:2c:
ce:11:61:3c:20:e1:f9:49:41:9b:dc:52:3e:29:45:
d0:84:7a:e5:dc:65:40:a2:28:23:3f:03:1c:d5:4a:
ba:27:e4:db:7b:de:bd:6f:8c:52:a5:83:5b:81:dd:
ec:2c:16:92:6e:b1:7b:e5:2b:8d:5c:09:5c:90:09:
49:d7:83:80:00:82:26:a9:13:81:f1:e6:3b:2c:f9:
19:af:2c:63:18:c6:44:dd:4d:e6:a4:f3:23:a2:0f:
4e:00:6e:7a:de:2a:21:87:d4:cf:2a:12:76:a9:ce:
fd:c5:e6:60:07:89:a2:9e:76:89:38:f7:26:57:8c:
15:1b:ac:8c:af:33:82:0d:77:fb:e8:c3:f1:a1:dd:
dc:26:75:a1:3f:fe:53:77:fe:47:35:71:19:41:28:
28:6d:d3:22:55:24:58:a2:3e:a7:84:a6:46:cf:72:
48:18:bc:e1:4f:dd:da:09:7d:c8:b4:aa:e7:f4:0a:
fd:9f:5b:78:0d:65:82:c3:ee:c0:bf:74:5a:5d:1b:
b3:7f:76:ec:e0:5e:19:e3:e1:b2:42:ea:a3:18:36:
b4:b9:78:a1:2b:36:0a:e9:fb:d8:17:c4:63:04:89:
7c:48:ec:f4:b8:13:e5:31:33:ce:e4:1e:fd:d7:9f:
30:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E5:AA:62:AA:0E:B4:8E:91:04:5C:11:B0:6C:39:14:65:74:3E:8C
X509v3 Authority Key Identifier:
keyid:D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:18:9a:f1:66:2d:65:ae:c1:c6:9e:89:2f:70:5e:d9:cf:10:
9d:0d:8e:4f:2b:c0:2b:97:5c:f0:db:b8:80:91:21:07:4d:d3:
ff:b1:74:18:cf:d9:58:ec:a6:75:fd:8b:a7:a2:30:3f:12:e0:
96:d0:ed:ba:46:74:fd:fc:54:80:6f:e4:4e:45:58:d1:80:8e:
83:75:fb:6f:00:b6:da:27:cd:33:c5:09:7a:f2:28:70:84:cd:
26:8c:e8:88:c8:00:e0:d5:21:14:98:75:48:64:80:25:00:d2:
89:5c:e2:8f:1a:3d:68:15:39:c5:ce:9a:28:c0:7a:34:bc:b1:
da:7a:ce:d0:d9:9a:6c:e8:57:de:8a:5a:97:19:6f:15:c2:63:
c7:ce:76:7e:1a:26:c9:00:8c:e9:a4:c6:17:c1:70:ca:d5:12:
3a:8b:77:fa:c7:08:c9:a3:1d:46:d3:23:46:05:3b:bd:7f:ab:
df:c5:42:53:86:d5:c0:87:0f:d5:26:47:c9:0c:72:e0:69:b7:
7d:be:00:91:7e:a0:41:c0:d9:23:40:fc:73:bf:0a:35:a9:c9:
8e:f3:3a:0e:a3:97:bf:09:fc:7c:86:c3:e9:8f:3e:42:22:04:
f3:11:f5:87:09:c9:60:bb:45:c0:6d:61:13:0e:e2:ae:14:b6:
a7:c9:65:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:59:53 2025 by rpki-client