
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
File: B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft (raw, json)
Hash identifier: cvNuLKD/IhKDQXr4k+h4zvwcFAbGdojiEV0DVirrJxg=
Subject key identifier: D4:50:AE:C0:23:86:F8:E5:E3:F5:FC:61:93:95:FB:6F:15:8F:AF:67
Authority key identifier: 07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54
Certificate issuer: /CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
Certificate serial: 019699AA836DBC7C22749EA8200F834E8641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
Manifest number: 151F
Signing time: Sun 04 May 2025 05:00:10 +0000
Manifest this update: Sun 04 May 2025 05:00:10 +0000
Manifest next update: Mon 05 May 2025 05:00:10 +0000
Files and hashes: 1: B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl (hash: Ntc/iYCENDTUshFaTWRQZnfFsYLDL+7aB0rEgt5D06c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:aa:83:6d:bc:7c:22:74:9e:a8:20:0f:83:4e:86:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
Validity
Not Before: May 4 05:00:10 2025 GMT
Not After : May 5 05:00:10 2025 GMT
Subject: CN=d450aec02386f8e5e3f5fc619395fb6f158faf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:12:06:58:f1:3c:41:f9:2d:e3:14:d1:fe:
99:54:dc:95:95:95:30:b4:da:4f:2a:56:6d:d4:e5:
55:68:40:ff:4b:38:6c:f7:47:19:64:e3:96:7b:14:
10:b3:3b:42:73:f9:ae:7d:92:ec:80:d6:e7:45:ae:
b8:4a:e7:b8:5c:da:4e:34:c3:85:96:11:f1:65:46:
8f:90:f3:86:c8:12:f5:5a:51:46:1b:14:3f:fe:4f:
f9:6e:b3:c3:8b:11:1a:22:28:16:c1:62:94:b8:a4:
50:e9:d1:74:fb:51:5e:74:5f:1f:aa:e7:b1:a8:23:
64:98:62:3b:ef:6f:b6:1e:f2:43:76:69:8b:43:50:
c3:2c:0c:7e:4f:f9:60:08:94:25:20:18:97:63:28:
5b:70:df:3a:9e:41:86:e5:c9:97:2c:e3:21:af:df:
ab:3f:b5:ac:d8:39:5a:be:a9:3b:94:03:96:f6:69:
ae:c6:2a:9d:d5:80:df:f0:13:8c:23:fc:7a:6f:67:
06:38:11:00:a4:5f:3d:80:a3:f0:25:87:43:49:15:
de:06:20:6d:0f:79:c5:11:74:20:2e:9e:cc:28:39:
bf:a6:62:8c:78:e6:ad:54:f6:05:32:6c:27:0e:f8:
c9:15:7b:f1:17:25:66:24:18:37:5c:18:a0:08:eb:
e5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:50:AE:C0:23:86:F8:E5:E3:F5:FC:61:93:95:FB:6F:15:8F:AF:67
X509v3 Authority Key Identifier:
keyid:07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f5:c7:a7:fa:58:69:b3:d1:92:95:2d:a2:f7:ed:03:46:be:
4d:49:18:81:8e:16:c7:93:31:1e:e0:0c:4b:c7:30:ef:6e:9a:
be:57:3d:99:36:50:38:14:d4:44:ca:76:f7:24:bb:f9:32:56:
90:1c:cd:47:ca:11:45:3b:e0:96:8c:5f:a3:69:e2:f3:0e:d6:
26:b3:c7:c2:14:d3:ec:7d:fd:a0:c7:5e:73:f4:e4:89:0a:be:
60:b5:62:a7:61:33:3a:b0:7d:6f:d6:b9:d5:d9:2b:89:78:c9:
61:2f:c7:46:e8:16:5d:c8:c3:37:8f:3e:ad:dc:ff:92:db:3c:
dd:e1:17:1b:52:be:f6:63:e7:b7:a9:39:c4:f3:fa:17:01:4f:
f7:53:9a:35:31:01:6c:5d:18:15:12:04:ff:13:33:b2:af:6c:
df:d6:bb:43:c5:0d:42:35:84:ac:12:c5:34:a5:c5:4f:aa:57:
e1:44:99:5d:20:77:3d:c5:b1:26:b6:2a:08:25:ea:6a:5c:55:
79:d1:10:f0:e7:c2:e2:b0:37:3d:e3:02:1c:88:1d:93:0c:d8:
8f:4c:bf:c0:07:7b:3a:c0:8e:dd:bd:87:13:3c:b8:a1:32:a0:
b2:97:57:9a:c7:9a:72:ac:c9:73:b1:ba:ea:d4:c2:e2:e7:92:
70:3e:fd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 09:57:42 2025 by rpki-client