Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
File: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft (raw, json)
Hash identifier: epzX4ObM8mq+76jbUJCCpk7uKVeArIMaEe2VNoqrXGU=
Subject key identifier: 4A:41:13:EB:A2:6A:A4:F1:09:2F:FC:EA:3D:CF:90:7C:82:92:5A:3F
Authority key identifier: 23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0
Certificate issuer: /CN=23f89f57d072849e0cab2195cd0baf2557935ea0
Certificate serial: 01967755BD01CC18B27E0BBFC8904B2B3E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 13:00:29 +0000
Manifest this update: Sun 27 Apr 2025 13:00:29 +0000
Manifest next update: Mon 28 Apr 2025 13:00:29 +0000
Files and hashes: 1: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl (hash: lzIsCdqeHf0AinMUjCjJwnZy7IvHs+103YD8Sa18j3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:bd:01:cc:18:b2:7e:0b:bf:c8:90:4b:2b:3e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f89f57d072849e0cab2195cd0baf2557935ea0
Validity
Not Before: Apr 27 13:00:29 2025 GMT
Not After : Apr 28 13:00:29 2025 GMT
Subject: CN=4a4113eba26aa4f1092ffcea3dcf907c82925a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:88:e0:99:58:ce:ca:4c:ad:1c:19:50:02:5b:
02:67:3f:3a:b4:d8:95:f0:4d:91:67:74:69:02:fe:
a7:c1:bc:c4:9b:a4:4f:30:3c:0a:10:d8:76:5e:5c:
ed:de:b2:17:41:e0:9a:43:2a:2d:fe:c8:7b:6c:7a:
df:b0:6e:e9:d2:61:f9:8f:85:dc:22:80:3c:70:a6:
5f:a9:0d:73:62:f9:27:0a:de:ec:ab:d2:f8:af:84:
4a:a4:8e:1e:1a:a4:46:71:2d:e8:f2:1c:e5:6a:5f:
a0:1e:28:c9:8e:67:f8:bf:19:b2:f3:d1:64:88:74:
87:3e:70:3d:1b:bb:1c:44:3d:4b:8f:b4:a7:0e:6f:
12:81:35:3e:a0:e8:d3:77:ed:34:cb:42:02:84:14:
a0:a5:b1:0a:a1:fc:8b:a2:9e:ac:84:95:9d:8f:fe:
6d:14:ee:b9:46:f1:fe:1b:db:bd:a1:2e:75:98:03:
60:94:f8:3b:f8:c1:80:0b:75:30:f0:5c:6d:15:21:
f5:74:ae:df:b3:01:56:65:b4:e4:24:eb:d2:dc:d0:
bc:e6:9e:f5:4b:c3:d9:bd:d5:1b:eb:2c:90:78:a9:
44:61:8f:24:a6:30:5a:d5:25:b4:37:64:2f:92:21:
16:84:5b:ac:15:34:4c:57:56:94:5a:d0:15:ab:fc:
d1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:41:13:EB:A2:6A:A4:F1:09:2F:FC:EA:3D:CF:90:7C:82:92:5A:3F
X509v3 Authority Key Identifier:
keyid:23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4f:1d:f3:42:5d:a8:c4:71:f6:ce:21:c7:cd:7c:59:fe:ab:
47:48:36:3a:38:91:18:e7:93:a0:50:80:e4:d6:a7:5b:0b:73:
7d:39:71:ce:87:81:db:09:05:94:5e:24:e1:3f:d7:2d:c9:f3:
71:a4:c2:81:03:28:6a:cc:59:2e:93:f3:16:c5:24:be:60:0e:
3f:de:35:d8:8c:a5:0a:ea:04:52:ef:94:e4:4f:4c:3c:32:02:
11:d0:8e:01:b6:c3:2a:a1:5f:f9:b3:4c:1f:f1:7d:08:8a:09:
69:eb:3e:4a:8b:e2:99:a4:b8:1a:77:2f:b0:e5:11:55:ae:47:
08:31:07:04:d5:34:9f:22:ca:86:26:a2:10:71:88:d1:7a:23:
40:08:cc:fb:03:7f:0b:c3:70:52:bb:93:d3:6d:6a:33:18:b8:
78:a9:c4:df:cd:2e:e5:b1:4c:6f:6d:53:73:0a:0c:a5:0d:eb:
e9:68:97:91:28:4d:88:bc:49:39:62:06:58:81:dc:ff:fb:bb:
96:79:cf:00:4a:78:86:1d:95:74:86:81:bf:62:8d:2c:05:14:
43:84:0c:af:2d:9e:8d:88:22:81:fc:72:8a:49:92:f9:74:ba:
34:5e:eb:ab:67:54:1e:b8:1b:71:b2:ca:61:2e:01:8c:33:c3:
66:f8:64:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:58:24 2025 by rpki-client