Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
File: T9a30KYwNXvDweDN2gbcqIo0Y-w.mft (raw, json)
Hash identifier: lf+5f5pt2FWUieSF5TlRGfd3czy5yP5/wVOO14waJvU=
Subject key identifier: 58:CA:F5:9A:EE:29:EF:F4:24:E8:21:49:3E:11:5D:11:F5:5B:69:66
Authority key identifier: 4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
Certificate issuer: /CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Certificate serial: 01968C25FA5390A0FF703197FA7363DF4A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
Manifest number: 0409
Signing time: Thu 01 May 2025 14:00:21 +0000
Manifest this update: Thu 01 May 2025 14:00:21 +0000
Manifest next update: Fri 02 May 2025 14:00:21 +0000
Files and hashes: 1: T9a30KYwNXvDweDN2gbcqIo0Y-w.crl (hash: rA3yarKanItHOI41RVc43s8FemOJ3mVrDK3XsN0eVLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:25:fa:53:90:a0:ff:70:31:97:fa:73:63:df:4a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Validity
Not Before: May 1 14:00:21 2025 GMT
Not After : May 2 14:00:21 2025 GMT
Subject: CN=58caf59aee29eff424e821493e115d11f55b6966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:83:c3:fc:ca:a0:ee:4a:07:f7:c8:73:91:7b:
d0:ad:ed:56:24:82:fe:12:c1:24:b8:e5:a4:7c:e1:
62:d7:4d:ae:2f:5f:ab:7f:60:0d:f2:da:7f:7e:e3:
5c:8d:fb:81:78:1b:2e:f4:3c:8a:03:67:c6:46:c4:
01:7f:89:35:78:cc:11:7a:dd:f1:15:8f:c6:e0:3d:
bf:49:b1:41:db:5a:80:70:6c:9c:3c:0c:db:2e:84:
04:37:d3:5e:cc:cc:f5:a2:22:8d:20:28:a4:58:ee:
7b:8d:d3:e1:16:d6:2b:91:5c:ab:ab:f3:a8:13:62:
6c:33:0b:96:cc:98:04:cd:c7:30:eb:31:4a:5a:f5:
d7:cc:83:b3:db:5c:c1:ab:d9:05:4f:33:5a:fa:57:
89:3c:a0:b8:6b:36:da:d0:98:f1:8a:1f:c9:a3:2f:
20:ec:91:94:b2:5c:7c:75:a6:46:8c:a1:cd:aa:c5:
2a:52:3e:0f:d0:06:a1:58:d9:cf:73:a0:df:d1:57:
bb:7e:6f:fa:8b:4a:61:0c:5e:c9:4a:55:08:fe:86:
6d:cc:24:51:15:6b:88:bd:84:75:c0:00:5a:a8:64:
c9:83:e4:70:15:d9:c5:95:4f:af:4d:9b:c4:3d:2e:
e2:63:7a:cc:cc:2d:89:ec:00:46:3e:c3:2f:95:a2:
67:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CA:F5:9A:EE:29:EF:F4:24:E8:21:49:3E:11:5D:11:F5:5B:69:66
X509v3 Authority Key Identifier:
keyid:4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:86:62:a9:55:6e:4f:d0:ef:b5:c8:db:c7:83:12:10:8b:78:
39:29:cc:4e:90:1a:fb:db:de:11:28:b5:e8:5c:6c:ac:22:21:
a0:b9:08:8a:99:dc:99:4a:f8:9d:bc:b4:f1:2f:cb:db:15:c7:
0d:c7:79:18:95:90:ff:e9:a2:48:63:5e:7d:2c:c5:2e:e1:a2:
2a:61:40:5b:b4:f4:71:76:0e:e3:b4:47:c9:cb:b7:82:13:68:
f3:2c:e4:88:68:3a:d0:07:12:8d:a5:83:d2:93:eb:f7:f7:d9:
58:7d:d8:e2:33:04:78:7e:3b:03:5c:a9:28:71:ac:af:bf:5e:
0c:24:48:4c:ac:44:39:07:fd:0d:7d:27:4b:9d:5c:9e:68:0f:
fc:22:34:ca:06:04:05:05:04:ba:05:5c:d2:23:be:64:21:ef:
a2:5c:8d:65:64:61:22:77:90:6b:13:08:71:90:7e:8c:aa:26:
46:ab:24:81:be:3f:10:86:a7:b2:71:46:43:c7:13:25:6f:cb:
3a:7e:05:74:1c:19:11:8d:53:15:e7:92:cb:cc:72:fd:fe:29:
3a:31:fc:18:eb:42:bb:b9:ce:5e:3f:63:39:5e:8d:8a:35:39:
d1:3f:1c:02:aa:fc:69:31:5a:6f:96:81:0d:94:40:de:44:6d:
5c:bf:14:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:47:59 2025 by rpki-client