Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
File: ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft (raw, json)
Hash identifier: wrwHSjk//MYe4gipNN1aTifei51v9pGNRSZTMs36o5A=
Subject key identifier: C9:B3:BD:63:D3:04:C2:43:A6:B3:96:BB:3F:F3:C5:9B:21:6B:94:35
Authority key identifier: 72:20:2E:64:5F:72:CD:70:AA:81:43:B7:3B:CC:0D:DD:93:BF:E9:1A
Certificate issuer: /CN=72202e645f72cd70aa8143b73bcc0ddd93bfe91a
Certificate serial: 01967F7D1DC4309BAF773726B8374A558E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
Manifest number: 0263
Signing time: Tue 29 Apr 2025 03:00:28 +0000
Manifest this update: Tue 29 Apr 2025 03:00:28 +0000
Manifest next update: Wed 30 Apr 2025 03:00:28 +0000
Files and hashes: 1: ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl (hash: Y4jDLSTf3HfVzxRJpqJdwqYQ7Jbkk0X7e0+ag7eGRcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:1d:c4:30:9b:af:77:37:26:b8:37:4a:55:8e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72202e645f72cd70aa8143b73bcc0ddd93bfe91a
Validity
Not Before: Apr 29 03:00:28 2025 GMT
Not After : Apr 30 03:00:28 2025 GMT
Subject: CN=c9b3bd63d304c243a6b396bb3ff3c59b216b9435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:82:d3:06:f5:61:08:56:01:d1:39:7f:7b:
cf:f1:d9:20:63:6a:e6:15:6b:6a:a9:33:db:02:72:
50:17:8d:5c:2c:5d:6c:bb:74:4c:0c:2c:68:c1:74:
4d:91:74:8c:06:57:f7:d7:c4:4b:0a:d7:2a:f6:49:
19:35:cf:cc:65:19:f8:7b:5f:c0:66:e6:d0:00:7c:
d7:54:51:20:62:d7:87:d4:7f:96:d1:80:fd:00:65:
00:9f:3b:46:cf:79:9e:94:10:3a:12:6e:99:9d:a1:
b3:fd:91:e9:16:47:89:b8:99:2b:6e:2b:b7:a8:57:
84:95:09:f9:3a:14:fe:24:0a:17:52:65:83:8e:b0:
e7:e5:dd:6b:ee:97:d8:79:02:1e:7f:a4:4b:fa:be:
a8:33:ce:e1:9a:8f:b4:60:3e:dc:5b:a9:40:8f:8b:
5b:dc:ae:6f:a4:dc:6d:b2:a1:85:68:9a:52:3d:03:
87:25:3b:a8:e8:7b:a3:05:61:1e:e0:5c:43:bb:1e:
a5:6c:0e:e3:2c:30:36:98:f2:26:6f:87:94:bf:68:
4b:d4:74:e5:3b:45:96:72:b4:fa:15:d5:aa:c7:5c:
a0:54:ef:c7:72:f2:cb:90:3a:e3:c2:91:be:80:39:
58:75:af:0d:61:8a:d5:63:b2:93:b2:85:86:ff:4e:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B3:BD:63:D3:04:C2:43:A6:B3:96:BB:3F:F3:C5:9B:21:6B:94:35
X509v3 Authority Key Identifier:
keyid:72:20:2E:64:5F:72:CD:70:AA:81:43:B7:3B:CC:0D:DD:93:BF:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:07:02:d3:da:5f:f1:30:33:50:05:a4:ae:5e:55:8b:43:f9:
2d:7c:c4:0e:65:fc:79:45:ec:fb:8c:de:3b:fd:af:bb:91:c7:
8b:aa:59:d0:55:43:a6:1c:4f:05:e1:6e:f3:58:0d:dd:5d:ec:
1d:4a:86:67:c3:30:e6:d8:22:4e:f6:11:85:a4:f4:21:23:07:
fa:04:99:22:0b:25:3b:7f:26:46:e9:73:b9:d4:05:3a:e0:cb:
0d:23:a3:c8:b9:89:fa:82:b3:ca:a6:a7:60:5f:9d:56:b7:65:
4a:db:69:9a:68:f0:05:5a:b6:56:59:ce:c0:1c:0d:18:db:a1:
e8:cf:1c:6b:29:28:62:54:99:5c:50:db:75:cb:33:a2:c4:2c:
b8:5d:a9:7e:17:5b:db:21:37:87:b3:90:58:93:83:85:cf:35:
bc:81:78:01:3b:93:f9:ea:49:3f:fb:f0:c4:3a:7b:aa:36:c7:
ab:2c:74:60:7a:11:6f:85:ff:2e:69:31:af:e7:57:93:2e:75:
98:2a:a8:d9:06:aa:4e:e7:48:57:f0:a2:ac:6d:24:b5:80:8a:
b6:3b:4c:78:47:f4:08:48:27:eb:49:56:09:a9:81:88:6b:2d:
6b:ea:f5:42:dd:bd:ee:1b:d9:94:a1:a7:92:b5:c8:35:58:85:
af:fa:a9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:36:30 2025 by rpki-client