Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
File: b0dz8kDNYmnCUbZRcKp-KYroxB8.mft (raw, json)
Hash identifier: vgUo5rNSoVynqXDt6U7fmwT438wIaCJwUd1FXQ/Qzrk=
Subject key identifier: F1:97:C6:B8:16:8E:07:FF:2E:7D:E0:DF:16:B8:17:F4:1D:D5:5C:00
Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
Certificate issuer: /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Certificate serial: 019681A32F3047F3A7593F7C637AB77D2B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
Manifest number: 09EF
Signing time: Tue 29 Apr 2025 13:01:17 +0000
Manifest this update: Tue 29 Apr 2025 13:01:17 +0000
Manifest next update: Wed 30 Apr 2025 13:01:17 +0000
Files and hashes: 1: b0dz8kDNYmnCUbZRcKp-KYroxB8.crl (hash: 70THNfbj2MsWjCcE62MTOwvutKeHSaBF2560ONmutDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a3:2f:30:47:f3:a7:59:3f:7c:63:7a:b7:7d:2b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Validity
Not Before: Apr 29 13:01:17 2025 GMT
Not After : Apr 30 13:01:17 2025 GMT
Subject: CN=f197c6b8168e07ff2e7de0df16b817f41dd55c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f8:45:56:f8:32:48:06:a6:a1:fa:a4:47:81:
83:cd:2b:86:9e:a8:6d:09:ae:49:f9:96:94:67:db:
d8:ec:63:79:69:c0:36:10:75:87:b5:c4:20:8d:27:
4b:a7:a6:02:21:4b:ce:08:2f:04:5e:6e:c0:68:82:
fb:f7:88:21:c6:ec:ec:5c:ec:81:b5:60:ab:f0:d8:
db:fc:d1:c8:75:10:c2:bc:d9:49:00:1c:e4:02:d8:
b6:f5:40:11:a6:27:d3:f7:f9:82:7c:29:ee:9e:7c:
93:53:fd:4d:3d:be:fb:04:cf:0d:84:13:fc:ee:f5:
07:b1:48:a4:01:39:0d:89:2f:44:b6:1f:8e:63:1c:
e8:d4:2e:4b:52:15:68:2b:88:73:2e:80:2e:c2:8f:
9e:c4:e6:c0:c4:2d:7c:36:73:9e:2d:53:25:3a:70:
95:ac:d2:70:0a:40:cb:a0:ec:14:bb:33:8f:d0:a1:
63:f2:17:3f:6f:e5:d4:f2:02:19:83:45:e9:a3:27:
1e:32:c4:3c:c5:04:d1:09:29:ff:50:b5:bf:a0:de:
c3:91:5a:24:ce:d2:fe:cf:8e:92:10:ba:36:24:16:
d3:ca:7b:83:2c:05:bb:08:c3:24:9d:e3:0b:d6:7a:
d0:7f:45:7c:3b:79:08:f2:8f:58:d7:d3:57:de:cf:
3d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:97:C6:B8:16:8E:07:FF:2E:7D:E0:DF:16:B8:17:F4:1D:D5:5C:00
X509v3 Authority Key Identifier:
keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cc:6f:16:14:0f:7f:cc:d0:3c:5d:19:00:3e:f9:ef:53:fc:
7e:28:99:d2:5d:a6:0b:b2:89:50:85:c3:10:c2:39:27:16:81:
5d:1c:af:16:0e:25:4c:eb:54:13:e6:0b:32:d4:f6:10:12:3a:
9e:b0:74:bb:ac:7f:6c:3f:60:98:d8:fc:2c:d5:d9:30:05:53:
c8:60:10:a6:ab:61:7b:63:15:e8:6f:e0:b0:6b:77:70:ff:10:
d3:8f:39:59:7a:ac:7f:d7:7b:30:0d:68:d9:4d:6e:e6:3d:9b:
22:be:66:ef:fb:4a:6e:84:f9:00:10:fc:ab:55:b7:df:97:a3:
61:52:ae:2b:b8:d1:1c:e4:b4:9b:b3:a4:47:f8:28:d2:e8:92:
8d:d8:73:bd:2f:6d:5a:02:e1:0a:3d:a2:8e:ed:ef:98:1a:3e:
4c:53:6c:01:03:43:7e:e9:05:04:9a:0e:1b:fa:64:b2:12:ac:
ed:dc:4b:67:24:c4:ff:79:93:f0:dc:f6:a3:78:eb:ac:93:dd:
ed:a5:5b:dd:53:99:a2:80:10:fb:d5:ff:e3:5a:b2:39:78:bb:
41:1e:e9:dc:28:18:43:a3:99:77:31:fc:3b:36:67:07:73:de:
44:bb:24:77:9d:93:88:ad:fd:f7:58:90:17:5f:d1:1d:68:9f:
1c:b3:d7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:28:15 2025 by rpki-client