Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
File: rTaQk6MtG34Ou-MkRRxY10iuzUI.mft (raw, json)
Hash identifier: ne4H9NququAhUBi18NoU78E+5gRYyDMvwBtinPTo0oo=
Subject key identifier: DD:F7:26:8C:9C:57:1E:20:2A:5B:F0:3B:0D:93:CD:5F:8C:42:8B:2E
Authority key identifier: AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42
Certificate issuer: /CN=ad369093a32d1b7e0ebbe324451c58d748aecd42
Certificate serial: 01968849284E9A5B02C70F15E2725E071067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
Manifest number: 042E
Signing time: Wed 30 Apr 2025 20:00:17 +0000
Manifest this update: Wed 30 Apr 2025 20:00:17 +0000
Manifest next update: Thu 01 May 2025 20:00:17 +0000
Files and hashes: 1: rTaQk6MtG34Ou-MkRRxY10iuzUI.crl (hash: jjAsnDFf14pDcwnOuPxlncUIpmYsusb4NnwR5aLST4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:28:4e:9a:5b:02:c7:0f:15:e2:72:5e:07:10:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad369093a32d1b7e0ebbe324451c58d748aecd42
Validity
Not Before: Apr 30 20:00:17 2025 GMT
Not After : May 1 20:00:17 2025 GMT
Subject: CN=ddf7268c9c571e202a5bf03b0d93cd5f8c428b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ca:e2:6e:52:3a:19:c1:e3:05:8e:5e:7f:8b:
a8:c3:47:35:77:05:0b:43:90:66:ef:c2:b0:97:1e:
4e:f6:b1:44:35:b2:b6:e8:95:4c:da:c2:86:08:a8:
1e:71:e9:d7:42:77:4d:31:e5:ab:ca:84:02:a7:5f:
7b:ba:f3:b1:00:df:c4:70:3d:75:44:90:50:83:36:
a3:36:6a:04:a8:1d:1a:de:ce:90:32:62:06:10:d0:
6f:09:c9:ed:fb:03:4b:d9:8a:5c:3f:de:7b:6f:e0:
02:b7:7c:4a:31:d8:67:3a:a1:87:63:e2:0b:8b:a6:
7f:74:89:f9:88:18:8b:f3:7a:33:5a:39:2f:21:52:
ff:d5:50:d0:23:ae:e2:16:49:ef:2a:ff:fe:e8:0b:
36:1b:70:a7:31:40:0c:ce:d8:81:0b:ad:9b:11:dc:
88:8d:20:58:28:4b:6f:a5:55:41:0f:94:29:f2:34:
97:6e:a0:5e:0d:01:1f:55:b9:38:13:96:67:ef:b6:
20:86:9f:24:43:b5:c7:6a:57:58:fb:3a:6d:3e:2a:
6f:c8:ca:68:08:de:0a:b1:a4:ab:00:81:2b:c1:1c:
f4:93:e0:19:7c:44:12:13:37:9c:78:a7:64:67:9a:
a1:03:88:56:ae:0f:2a:90:72:94:67:93:a2:1c:d3:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F7:26:8C:9C:57:1E:20:2A:5B:F0:3B:0D:93:CD:5F:8C:42:8B:2E
X509v3 Authority Key Identifier:
keyid:AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:21:67:9e:6e:e2:df:3d:83:ae:e3:56:92:f6:15:f0:8e:47:
aa:38:d7:38:7c:ff:78:d8:68:ae:9d:43:2b:c8:04:f6:5b:bd:
56:88:b7:29:fe:13:28:b5:85:cd:eb:1c:91:cb:95:b9:da:2c:
b2:25:9e:fe:74:18:f4:32:c9:4c:80:30:61:b2:18:22:86:3b:
f6:95:d6:f6:c3:59:5f:e1:09:ab:ad:c2:c3:a9:83:79:d6:6f:
b0:e8:a5:fc:56:67:e6:10:62:72:91:42:ca:44:fc:74:dc:23:
ae:fe:06:2b:74:6a:6c:19:cf:35:46:f8:cc:58:cd:f0:24:2b:
4c:67:ae:5d:69:a1:67:8f:b6:f7:61:bb:7b:23:6f:41:04:11:
f0:17:c0:33:75:df:48:a2:a6:86:c6:2c:1f:91:fa:ab:7f:e9:
c7:be:1e:7c:73:38:06:7e:01:b4:d9:6e:8a:0a:88:53:e1:6d:
0e:ef:fe:23:23:e2:03:b1:fc:d0:e1:a0:10:4a:0b:88:4d:7c:
15:1f:fd:6c:6b:21:8e:68:80:17:08:e1:f5:a6:87:4d:40:52:
24:56:72:cf:bc:d0:11:9f:25:e4:32:5f:fb:9c:35:12:f6:91:
d8:a7:9e:55:2e:2f:f8:a0:91:ab:88:6a:cc:85:7c:55:57:f0:
37:bf:45:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:24:24 2025 by rpki-client