Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
File: 9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json)
Hash identifier: X5J2pbXz2bjNSH19XotH2pIo90p0aHBAzwKFvUti2oA=
Subject key identifier: 5D:7D:BE:14:56:84:BE:A8:FC:2A:17:F7:26:E9:C1:DC:F2:6F:E7:52
Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
Certificate issuer: /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Certificate serial: 01967E342E82D1450BA3AC1137F6877B66EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
Manifest number: 1429
Signing time: Mon 28 Apr 2025 21:01:11 +0000
Manifest this update: Mon 28 Apr 2025 21:01:11 +0000
Manifest next update: Tue 29 Apr 2025 21:01:11 +0000
Files and hashes: 1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: QUXDUeBrZZ/E/VI27IiUmGovtwX0tsN7cd2NX+r7jKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:34:2e:82:d1:45:0b:a3:ac:11:37:f6:87:7b:66:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Validity
Not Before: Apr 28 21:01:11 2025 GMT
Not After : Apr 29 21:01:11 2025 GMT
Subject: CN=5d7dbe145684bea8fc2a17f726e9c1dcf26fe752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:c7:5c:91:3f:3d:b3:d2:52:82:87:c8:6e:
62:23:a1:91:ad:22:c1:76:79:a0:8c:59:5d:89:87:
3b:92:75:fa:27:c8:11:0e:62:af:f0:36:1c:57:0c:
f3:bb:fe:52:ab:80:35:f8:ea:4e:cf:70:2a:4b:4a:
7a:a7:50:34:b5:ae:b3:a2:b6:63:87:57:35:5d:8d:
d5:3c:2c:2d:61:d4:35:f5:32:57:ba:92:fc:76:95:
e6:ea:c9:c6:2d:47:3c:47:90:02:f7:09:ec:60:8d:
5e:2d:e1:50:61:fe:ba:01:d5:e8:b1:74:3b:9a:0d:
21:9e:a5:d1:85:77:c0:e0:06:9c:ab:e1:1a:2b:b1:
c6:62:7f:6f:f3:78:42:b9:1e:71:e1:47:7d:43:50:
2a:56:68:62:c0:ad:f9:ba:67:db:4c:96:71:97:d2:
d7:76:c9:a0:7c:ec:54:a0:83:5e:c2:46:b0:8f:45:
3f:c1:32:52:b8:7e:72:ea:ff:99:53:15:86:c4:ff:
0e:0f:87:4b:eb:1b:e9:16:13:d5:f4:47:e9:34:04:
da:2b:7b:69:f3:f3:94:a5:83:f8:18:f3:c0:6d:6f:
e2:cd:10:30:ec:f6:5b:b9:8d:11:68:92:b2:86:fc:
ba:92:c1:e4:b4:ab:99:fa:9d:81:40:41:9b:bc:b4:
6c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7D:BE:14:56:84:BE:A8:FC:2A:17:F7:26:E9:C1:DC:F2:6F:E7:52
X509v3 Authority Key Identifier:
keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7e:db:a4:1f:8b:98:93:f8:0a:b6:8e:27:c5:90:23:09:0f:
00:1d:0e:cf:7c:03:5a:41:67:2a:26:2b:c0:fb:34:ae:66:bf:
99:0c:6d:c8:38:bc:b4:74:49:aa:aa:9f:80:1d:25:7a:c4:f5:
0f:ea:5c:97:59:b8:12:b0:40:30:de:b2:52:1d:45:7c:fc:0d:
51:ad:29:3c:32:1d:b2:64:cc:b9:21:ff:a1:ae:55:8a:f9:c6:
90:3d:b1:15:47:6f:10:d7:e5:ac:c8:88:06:0c:17:3b:69:45:
c9:8e:f3:a4:e9:76:06:54:7e:f2:8b:3c:38:47:18:62:e0:d0:
cb:c0:08:17:a1:e0:b0:e1:c9:e0:bd:08:5e:e0:17:b8:de:3c:
8d:10:f1:01:15:cf:f2:c6:1a:80:cc:5b:28:80:7b:bb:cf:2c:
db:8f:a7:54:d5:1e:7a:c1:18:00:0b:70:db:60:8a:33:54:50:
b0:70:25:fb:37:49:17:85:26:31:e3:68:d2:7d:af:c0:fc:3a:
46:3a:5c:e2:07:2b:12:8f:48:f7:34:48:aa:d9:ac:8c:84:17:
36:96:66:a5:71:ad:00:61:7f:11:47:fc:52:50:53:e0:35:8b:
3b:39:2b:2b:92:6b:7a:fc:fb:ae:bd:55:f1:bc:13:f2:06:b2:
28:87:98:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:24:27 2025 by rpki-client