Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
File: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft (raw, json)
Hash identifier: nYEjI7UKncI/+CTBwFkSF89H8tPtVM2+HwPeAy9d4ak=
Subject key identifier: 71:C9:64:5C:43:EF:90:53:A2:77:74:85:68:9B:83:D6:92:22:D3:21
Authority key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
Certificate issuer: /CN=73d85f8438d73b5668e89cc692646f9487965fa9
Certificate serial: 01968736DC62D3DADA20931FE22E0035A6C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
Manifest number: DB
Signing time: Wed 30 Apr 2025 15:00:41 +0000
Manifest this update: Wed 30 Apr 2025 15:00:41 +0000
Manifest next update: Thu 01 May 2025 15:00:41 +0000
Files and hashes: 1: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl (hash: qkE0atMHHRQobr4gPXmuDNrTShbQD/u3Gm3POWkrFwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:36:dc:62:d3:da:da:20:93:1f:e2:2e:00:35:a6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d85f8438d73b5668e89cc692646f9487965fa9
Validity
Not Before: Apr 30 15:00:41 2025 GMT
Not After : May 1 15:00:41 2025 GMT
Subject: CN=71c9645c43ef9053a2777485689b83d69222d321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:d6:17:0f:9e:37:dc:fe:62:ef:ed:8d:e9:
d0:3e:21:e6:e8:8e:b2:71:43:64:14:e8:b2:70:fe:
d5:de:4b:e1:2e:6d:a4:35:9e:71:df:b4:c1:30:62:
e1:16:f3:96:7f:41:f7:e9:6f:4b:a3:33:f0:be:2e:
f5:90:1e:04:31:05:8f:19:71:34:79:d3:22:40:1b:
a9:93:8f:df:47:4e:1d:67:c9:29:28:4b:b6:53:0d:
96:93:f1:78:2c:5b:52:ec:83:41:8b:63:f1:19:53:
fe:20:6a:a2:cb:b2:e8:4a:73:8f:52:90:de:6c:ec:
cc:5c:93:24:1d:bc:ce:d9:43:f2:fc:95:86:4c:d1:
b5:c9:2e:ef:db:96:d1:80:87:7b:b0:53:39:d0:ee:
ae:87:37:e7:b0:aa:f5:17:30:8e:b8:f7:53:12:60:
5c:30:3c:1d:7d:66:8a:9d:64:19:97:12:1e:c1:8b:
14:61:2d:de:72:ba:42:1f:12:b0:ad:00:80:73:28:
d7:bd:16:6f:cf:f6:cb:78:5b:52:09:d9:66:f5:a7:
ca:60:c9:a6:4b:fe:44:83:de:7f:df:43:06:24:e1:
98:79:e4:ce:a2:1f:b4:61:8c:56:df:98:9e:76:6a:
f4:49:63:d4:aa:d1:be:fe:de:05:f4:3b:0f:44:1f:
a7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C9:64:5C:43:EF:90:53:A2:77:74:85:68:9B:83:D6:92:22:D3:21
X509v3 Authority Key Identifier:
keyid:73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:15:46:36:fd:ef:59:a0:7d:63:35:59:30:fb:8f:05:31:b7:
e8:1e:c6:2c:e6:b4:e5:3b:3b:d6:7f:30:0b:92:44:b8:c1:6b:
9d:f6:bc:ce:26:85:08:ec:ad:08:9e:1a:db:2b:e2:60:bd:ff:
16:42:06:d8:69:9f:cf:25:33:b8:74:1c:74:c6:b8:10:1e:61:
4b:a5:8a:66:df:61:01:82:3e:45:18:e6:44:55:ee:c9:e8:0e:
ae:8e:2d:ec:6b:fb:87:d7:34:53:61:bf:fb:fb:a8:aa:29:23:
8e:04:34:5d:63:e0:b8:a1:38:58:79:71:47:cd:eb:ba:15:99:
20:89:66:cf:03:a9:86:98:2d:47:7c:5f:1c:b1:20:e1:ed:10:
fc:7c:47:18:49:46:68:73:82:e0:eb:51:65:54:da:21:42:b6:
41:33:f3:e0:a8:3d:fb:d8:32:45:f0:53:e1:1d:1f:7a:b5:f2:
b5:5d:c8:21:a5:6f:08:7b:b6:7a:bd:91:a4:54:4d:43:be:bc:
f0:b6:97:46:13:e9:ae:ac:ef:f0:55:c3:b6:eb:a3:cd:73:52:
da:ea:c5:ac:09:4a:6f:63:db:50:3d:ac:08:6d:c0:27:d8:b4:
c4:37:97:b6:ad:21:25:34:25:ed:2b:87:5a:13:a4:f1:3f:06:
f8:04:e9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:25:54 2025 by rpki-client