Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
File: mfL0sCJG5gTiN_N5RaOCv62hJ38.mft (raw, json)
Hash identifier: JslzzJTG3zft6dSilOb4AVk1M0Q+vVBdZj/h6ZxKfTM=
Subject key identifier: 13:91:FD:05:52:67:C6:6D:1F:2B:17:D2:5B:34:5D:C6:05:8B:1D:5F
Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
Certificate issuer: /CN=99f2f4b02246e604e237f37945a382bfada1277f
Certificate serial: 019681D940166643F70A41C3B1D86DF12A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
Manifest number: 05FF
Signing time: Tue 29 Apr 2025 14:00:20 +0000
Manifest this update: Tue 29 Apr 2025 14:00:20 +0000
Manifest next update: Wed 30 Apr 2025 14:00:20 +0000
Files and hashes: 1: mfL0sCJG5gTiN_N5RaOCv62hJ38.crl (hash: 6E/So+Pr2tX61HcgB4wE/rQWnR0JAazTvo2k39n6nzw=)
2: tD16yJgx6FslawER1Evjktr90DU.roa (hash: IgaqAI1HCcxs2x01fN4KAw3fM/ZJo5SCnC5NuJ1Z+9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:40:16:66:43:f7:0a:41:c3:b1:d8:6d:f1:2a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f
Validity
Not Before: Apr 29 14:00:20 2025 GMT
Not After : Apr 30 14:00:20 2025 GMT
Subject: CN=1391fd055267c66d1f2b17d25b345dc6058b1d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:75:07:b6:8b:15:c6:b4:ce:1b:66:f3:f9:
fd:a9:be:b1:61:20:29:c8:86:d6:57:f3:ce:3c:cb:
d9:7d:6c:07:7f:62:ec:c5:cf:a2:13:16:8f:5c:69:
4b:69:36:6d:8a:62:25:7c:73:69:e2:ed:00:9b:4f:
1e:0a:d7:39:7c:1d:ae:4a:aa:d7:aa:af:37:4e:2d:
8d:01:fa:b7:8b:4d:ce:60:d0:b8:cf:71:75:8b:47:
06:1b:00:21:45:2a:30:86:c1:ca:0d:50:7d:ad:ed:
e1:02:a0:23:d7:76:5e:23:fe:f8:fb:c7:4c:36:7b:
91:b7:87:66:91:99:c8:26:3c:03:e2:aa:08:78:25:
33:4f:12:40:7f:49:f1:ab:fa:b6:1f:e2:9e:a3:19:
94:1b:45:55:57:af:51:5b:ed:46:ce:3c:98:97:44:
74:70:9d:36:ce:e6:e9:97:93:f7:d0:1d:ea:af:35:
c4:f7:42:b1:f8:5d:64:bc:b7:6f:94:79:d6:3f:ce:
65:88:d1:30:09:47:2b:07:e4:80:9a:34:ed:e1:81:
a6:07:24:89:d3:66:6e:2b:cb:31:93:52:b0:dd:db:
42:74:50:f9:9a:9f:29:04:19:1c:ce:a3:f7:7c:e0:
77:1a:63:51:fa:65:1d:03:cf:fa:46:76:5d:36:a7:
91:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:91:FD:05:52:67:C6:6D:1F:2B:17:D2:5B:34:5D:C6:05:8B:1D:5F
X509v3 Authority Key Identifier:
keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:16:bb:68:93:db:d3:b9:7a:76:15:40:59:57:49:6a:d5:78:
b9:7a:9e:aa:dc:db:a7:8f:1a:6e:4c:03:9a:47:5e:17:0a:a7:
ac:45:f8:25:f6:6f:70:2d:b1:dc:b8:92:b6:44:06:61:22:e9:
36:c6:75:4f:0b:2a:0b:fb:af:ec:07:63:96:bb:f6:4e:79:e3:
6e:0d:7f:66:b2:25:ed:9d:90:b1:ca:ab:d8:74:94:94:9b:d9:
ad:85:75:73:eb:38:a1:7e:bb:6f:e3:51:17:df:b8:46:db:c8:
a0:25:91:40:12:c7:c9:51:4d:1c:07:5c:99:a4:6d:6c:32:f7:
3b:8e:30:db:ee:b4:80:f3:5c:da:5b:fb:e0:5f:3d:37:59:a2:
a7:1d:1f:e8:c3:5c:03:da:c8:35:3f:0b:83:20:34:5f:e9:e3:
6a:42:3a:9f:70:12:4a:20:3f:4d:65:d0:93:68:73:1f:72:ef:
85:75:a8:cf:7b:83:e4:6f:9a:88:c2:a0:8f:5d:13:99:d7:36:
71:8c:3c:dd:c9:9a:26:dd:6a:79:a7:eb:d7:99:59:fe:a8:31:
0d:2b:99:92:f5:0e:d8:8a:79:b3:ad:65:68:04:0b:40:41:dc:
de:0b:03:6c:fe:1f:94:b9:2e:f6:f9:b9:52:c1:a6:18:22:4e:
43:ed:52:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:29:08 2025 by rpki-client