Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
File: l4axG6O9mY3t75gTwTPEJkI0lV4.mft (raw, json)
Hash identifier: zGGITTFNknpU5zlZbh9MZz48u6MG4lVxY5Hmzun6iCY=
Subject key identifier: 00:B2:68:C2:72:F3:E4:96:3D:88:65:8E:47:AD:DB:04:D4:DC:5E:4C
Authority key identifier: 97:86:B1:1B:A3:BD:99:8D:ED:EF:98:13:C1:33:C4:26:42:34:95:5E
Certificate issuer: /CN=9786b11ba3bd998dedef9813c133c4264234955e
Certificate serial: 01968A383F41462D9A8F843BCFD886A2A044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
Manifest number: 36
Signing time: Thu 01 May 2025 05:01:04 +0000
Manifest this update: Thu 01 May 2025 05:01:04 +0000
Manifest next update: Fri 02 May 2025 05:01:04 +0000
Files and hashes: 1: l4axG6O9mY3t75gTwTPEJkI0lV4.crl (hash: eXAg4UQ0IoKtWkdodGv6uU4VzkJH5eyBKXRM9uIYdhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:38:3f:41:46:2d:9a:8f:84:3b:cf:d8:86:a2:a0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9786b11ba3bd998dedef9813c133c4264234955e
Validity
Not Before: May 1 05:01:04 2025 GMT
Not After : May 2 05:01:04 2025 GMT
Subject: CN=00b268c272f3e4963d88658e47addb04d4dc5e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:45:d7:dd:df:95:34:95:44:00:c8:08:36:ac:
a3:b7:73:18:0e:fd:0b:86:44:70:68:67:5a:ff:02:
d0:2b:86:e4:03:84:5c:7d:9e:06:82:f9:db:99:8b:
3d:a0:81:32:3d:b7:9f:87:a7:f6:e0:64:e0:e7:91:
e0:1a:83:13:72:9d:45:4f:17:d2:db:5d:d1:79:d3:
e0:68:07:d6:a5:c8:1b:1b:2c:24:3e:79:b1:23:ff:
23:17:2e:62:a6:21:a9:c1:8c:d6:aa:9d:80:1b:a8:
fb:e8:03:52:47:1f:2d:ff:eb:4f:0d:94:7f:43:76:
98:3f:7a:6e:ee:c4:b5:f1:bf:f4:d5:0d:dc:e4:0f:
f8:55:03:fb:cb:6a:20:7d:33:86:c7:a9:46:3e:44:
c1:4d:ae:91:45:c1:d7:62:99:e6:7d:22:f3:17:1c:
c0:48:b2:a2:d6:db:3c:dc:f6:be:6e:65:08:7f:ef:
ac:d9:22:e6:89:43:53:56:fa:5d:8c:b5:fe:fb:b9:
df:57:d7:a8:10:10:04:7e:46:25:0e:4e:8e:e4:1d:
a6:cb:0f:0f:29:78:7c:e7:f3:53:0e:7f:c4:43:a2:
2a:b9:5f:11:72:65:6d:ca:6e:a3:35:eb:69:0e:9f:
07:2f:6e:db:df:71:cb:10:4d:04:93:b1:74:c6:16:
bc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B2:68:C2:72:F3:E4:96:3D:88:65:8E:47:AD:DB:04:D4:DC:5E:4C
X509v3 Authority Key Identifier:
keyid:97:86:B1:1B:A3:BD:99:8D:ED:EF:98:13:C1:33:C4:26:42:34:95:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:48:b2:fa:e1:19:72:cd:b9:9d:d2:7f:ba:56:6c:96:47:fe:
24:1f:36:82:87:9d:30:3e:b5:9f:76:27:7d:e8:0f:00:61:63:
a5:05:e3:dc:6c:20:25:b5:f6:d0:dd:5f:4f:35:f7:a7:62:2a:
9d:23:27:37:d7:46:18:03:e1:1a:40:cf:6d:d4:a5:fd:40:f2:
b5:18:55:ba:21:b8:84:21:68:ea:fe:45:4f:b8:4c:4d:89:52:
db:05:7d:63:ae:1e:39:81:ce:90:f2:a9:7c:63:2c:a3:58:85:
59:e8:25:28:04:45:d4:e8:df:d1:b0:93:95:43:79:98:74:ee:
eb:a5:e0:91:ed:b9:20:7f:d7:e6:e8:8c:91:c9:57:c7:56:e7:
4d:1e:d0:bb:1e:8a:3e:f7:2b:44:b2:c6:e3:ad:a3:a6:16:ac:
d3:2e:3f:92:9f:2e:df:8f:7f:88:00:44:b3:de:ad:29:f7:b8:
b5:e2:39:0e:a2:33:54:7d:71:dc:7c:a6:2e:5a:ec:53:87:9a:
e1:96:af:6c:dd:9b:92:76:bb:9a:21:0d:0f:a6:e5:da:db:5e:
39:97:53:f2:41:0f:1d:28:86:82:8e:e4:a6:fd:95:44:c0:ca:
aa:32:29:71:d5:fc:9c:81:a3:c7:70:86:90:4d:73:12:f2:41:
a7:f9:13:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:59:40 2025 by rpki-client