Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
File: cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json)
Hash identifier: 4NxgEU/leF7y3yad62w81+VVIIYOQ3C6t6wHpNZTmmI=
Subject key identifier: 6F:09:2A:AF:5E:85:AB:BD:79:BC:35:7C:55:59:B6:A0:93:1A:06:53
Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
Certificate issuer: /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Certificate serial: 01968DA6A6A9663413C19B569A6A19F2EC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
Manifest number: 0340
Signing time: Thu 01 May 2025 21:00:30 +0000
Manifest this update: Thu 01 May 2025 21:00:30 +0000
Manifest next update: Fri 02 May 2025 21:00:30 +0000
Files and hashes: 1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: UXuuF8ovRfO4GSE2QythhVW4jAaHvh584a+jgGZewho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:a6:a6:a9:66:34:13:c1:9b:56:9a:6a:19:f2:ec:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Validity
Not Before: May 1 21:00:30 2025 GMT
Not After : May 2 21:00:30 2025 GMT
Subject: CN=6f092aaf5e85abbd79bc357c5559b6a0931a0653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:e0:38:06:d6:83:f4:4c:af:4f:52:35:9c:
a4:99:6a:e3:a1:77:87:f1:79:93:cc:be:ea:df:12:
8a:5d:b8:19:6f:e2:5a:cf:ba:d3:b1:05:13:b6:71:
fa:ef:ac:9d:38:e0:90:2d:ac:cc:8e:87:52:74:b7:
21:c1:12:61:a8:e1:b0:5d:2d:8a:b9:32:9b:be:e8:
06:8e:22:37:b8:83:25:01:a0:a6:8b:2b:ae:18:fd:
c4:bc:a6:35:4f:0a:94:d4:c5:0b:f4:79:18:71:fd:
3a:67:e2:b3:7c:ba:42:42:81:12:4b:9e:78:b8:74:
21:1a:00:1d:b3:57:2e:58:fa:1d:96:24:e3:bb:bf:
03:68:bc:9f:3e:46:fb:6a:08:28:36:31:3d:b4:3d:
08:1e:ba:a5:f8:a5:ec:e9:30:a6:91:a7:e3:db:5a:
20:ac:57:2d:f1:cb:6a:e3:23:51:ee:03:90:d7:8c:
37:a2:17:b3:24:68:67:32:49:56:10:43:d7:5b:34:
8b:f5:45:fe:15:4b:21:56:fc:3d:7b:e2:10:a0:ec:
da:74:8c:ca:02:19:2d:b4:33:1b:4f:3d:23:17:b5:
00:30:ea:8d:cf:b4:85:7f:b1:39:31:b4:6e:4b:7e:
44:4a:8e:62:e7:c6:be:75:d4:4b:9f:b6:4f:b6:1b:
6d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:09:2A:AF:5E:85:AB:BD:79:BC:35:7C:55:59:B6:A0:93:1A:06:53
X509v3 Authority Key Identifier:
keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:28:71:04:91:54:48:b2:e0:77:08:e8:82:1c:a2:ae:fc:61:
81:d9:5f:a8:3b:ec:fc:a5:e6:32:d7:43:5d:22:ba:66:40:a5:
20:a3:d2:7b:e5:cb:79:1e:1b:07:70:e2:75:ac:fb:03:97:fa:
32:4f:6b:3a:b4:a4:d1:b0:e6:38:7c:97:08:e7:96:19:34:c5:
f2:e9:f0:27:52:d1:cb:92:7b:ff:ae:4c:aa:c3:ea:0d:92:29:
69:dc:d5:d2:b7:d2:b7:a5:d4:aa:49:41:c5:5d:b2:db:4e:3d:
e9:ae:68:45:9f:1b:1e:6f:b8:06:2e:15:9f:3c:f4:2c:7b:77:
f7:0d:e3:53:09:68:55:c1:f8:07:c4:bb:70:07:e9:8c:95:be:
b2:e2:54:13:9b:4d:04:52:ba:89:42:1e:34:9d:23:c7:50:66:
ce:28:a0:ae:e6:ea:29:c3:9d:00:05:eb:71:4a:c8:ff:4d:da:
6e:5a:c5:ed:a2:31:55:20:55:33:0a:c7:74:f3:dc:b8:c1:ec:
69:6b:31:09:d0:a7:0f:a1:da:91:68:ca:cc:c3:c9:f5:08:e7:
a7:c4:c8:fd:71:8b:58:09:c2:01:2e:df:fe:90:96:e4:2a:de:
87:63:76:d5:93:05:5c:a1:de:88:d0:a2:26:0b:55:e1:cc:71:
de:af:7c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:16:47 2025 by rpki-client