Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
File: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft (raw, json)
Hash identifier: hVKjndiTv3aBEX94hzcPwLMZPu/8Bn9ablMoBFTFa9U=
Subject key identifier: FA:F2:D5:A0:EC:55:2B:E8:7A:5A:B0:A1:8A:49:BA:34:43:5E:9C:66
Authority key identifier: F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
Certificate issuer: /CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Certificate serial: 01967C4529BB0C5EE14ADCFEE0E7C167278B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
Manifest number: 150E
Signing time: Mon 28 Apr 2025 12:00:29 +0000
Manifest this update: Mon 28 Apr 2025 12:00:29 +0000
Manifest next update: Tue 29 Apr 2025 12:00:29 +0000
Files and hashes: 1: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl (hash: 8uAsVy2u0koH3rLbQGOxmbyqNBKzIANyTMgNjcvYUtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:29:bb:0c:5e:e1:4a:dc:fe:e0:e7:c1:67:27:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Validity
Not Before: Apr 28 12:00:29 2025 GMT
Not After : Apr 29 12:00:29 2025 GMT
Subject: CN=faf2d5a0ec552be87a5ab0a18a49ba34435e9c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7f:aa:c9:ab:09:45:f3:78:18:1c:2b:83:5b:
b3:c3:69:ea:bf:44:93:09:e9:a5:c0:86:f8:b8:b5:
78:0b:d2:79:ac:cb:7b:cf:20:ea:7e:94:ae:9e:46:
96:f6:c5:dd:b6:e5:3b:48:d1:60:c0:2b:78:80:6a:
36:9d:d8:7a:29:0b:07:ae:fd:3c:f8:fb:11:78:7d:
c9:62:0f:6e:07:01:96:a3:73:66:34:a5:25:c3:d2:
ee:84:93:7e:bf:b9:15:b8:94:18:66:b2:49:70:92:
bf:52:62:af:cf:cb:e0:14:67:d8:b3:d2:9f:a3:e3:
29:a6:17:bc:ab:db:8b:b2:bf:6f:37:20:5e:85:68:
e7:eb:d8:2b:89:12:18:15:2b:89:0d:eb:bc:8d:66:
d0:11:44:62:e2:1b:95:f1:a1:b5:3c:89:59:23:2b:
5c:df:6a:b2:e1:07:5e:bf:ac:84:49:00:da:20:7a:
b3:52:95:3b:d1:d4:16:9d:c1:7a:73:e1:f4:25:4d:
ce:b1:10:a5:7e:54:51:1b:c0:aa:13:fa:43:45:09:
1c:87:15:9a:67:bf:4d:1e:83:b4:89:34:2e:d9:66:
7c:34:a1:15:33:72:b4:93:1e:e2:03:02:6b:27:9b:
94:80:57:d7:fd:cf:0f:eb:4b:53:fa:84:fe:c1:8d:
b8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F2:D5:A0:EC:55:2B:E8:7A:5A:B0:A1:8A:49:BA:34:43:5E:9C:66
X509v3 Authority Key Identifier:
keyid:F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:96:63:b6:76:da:79:f0:b4:b3:36:c1:73:c8:61:af:c8:c1:
51:fb:be:7c:36:e1:58:44:e0:1e:c0:25:66:91:f0:01:15:58:
c2:73:4a:04:b5:20:5f:dc:d9:36:f3:84:82:3f:a0:06:f2:59:
76:e7:dc:9f:fb:d7:f5:7e:d0:d6:ca:bd:6a:f2:77:c5:4c:58:
0e:0f:a3:01:e2:12:e7:cb:0e:02:3c:09:46:b3:31:99:fd:35:
d1:e2:d7:cc:1f:40:d7:64:d3:99:0f:3f:3c:49:bb:de:79:f0:
17:2c:7a:f3:b9:bc:da:60:a0:78:40:d9:26:35:fd:16:fd:38:
c3:9a:01:0b:df:11:a0:8e:0c:a8:3d:25:29:2d:d0:ef:af:fa:
36:a7:e0:3e:d2:01:9a:c2:dc:41:6a:30:db:15:ed:80:12:09:
77:61:b2:ac:ef:33:89:b5:56:b7:17:24:73:0c:01:23:65:1b:
45:e3:42:34:dc:3b:0f:0c:31:d0:16:d7:db:ea:dc:a7:0c:7c:
f1:0d:b2:f2:c8:cb:88:c7:bd:ac:6a:8d:1d:2a:1d:6e:b0:e4:
ed:69:ec:d4:b5:fe:a1:23:ac:40:e1:b8:76:15:5c:85:3f:d1:
c3:ed:ae:e3:76:0b:21:f2:c5:87:b9:e1:d2:12:ae:24:16:ec:
48:be:c7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:53:18 2025 by rpki-client