Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
File: 9bJzfl2X4RCOsEmQTemxbzauseA.mft (raw, json)
Hash identifier: hbSVYo18XlZD3OzqKQNG+0hyzwOVabU0C8FN1L8PFJE=
Subject key identifier: 92:DA:D2:31:A2:0D:04:C0:0C:C7:6B:04:00:BD:E5:33:6E:39:FA:50
Authority key identifier: F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0
Certificate issuer: /CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
Certificate serial: 0196760CBB5A93B5CABFB45DA6CC91C41F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 07:01:07 +0000
Manifest this update: Sun 27 Apr 2025 07:01:07 +0000
Manifest next update: Mon 28 Apr 2025 07:01:07 +0000
Files and hashes: 1: 9bJzfl2X4RCOsEmQTemxbzauseA.crl (hash: NHWpHa162QRycYYB8tvfyrCcJd+TRhqBU7YIdAQLQj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:bb:5a:93:b5:ca:bf:b4:5d:a6:cc:91:c4:1f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
Validity
Not Before: Apr 27 07:01:07 2025 GMT
Not After : Apr 28 07:01:07 2025 GMT
Subject: CN=92dad231a20d04c00cc76b0400bde5336e39fa50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:86:f4:d1:24:f4:34:74:f0:95:43:14:68:
dc:2d:45:bb:89:3d:e9:b7:04:df:fa:92:67:77:98:
8e:e2:73:88:97:46:7f:25:06:2c:a2:c8:4c:11:0a:
18:4a:b0:49:dd:63:10:4c:29:d5:02:ef:86:4b:50:
ce:f7:75:ee:a2:ff:d8:64:c5:7e:4c:49:04:85:f7:
49:31:59:27:df:c5:b9:a3:d7:40:5a:06:88:16:4c:
e8:20:fa:31:14:02:0a:d3:19:9a:b3:94:d6:6f:f2:
4a:b1:7d:e5:39:18:0c:27:5d:7e:4f:48:55:c4:9f:
03:de:a0:e7:e8:05:a6:93:4e:74:b2:a5:b2:b6:f3:
74:bc:1e:d8:1b:0f:e3:6f:cd:26:60:b6:5e:52:4e:
b7:94:7e:4c:8b:e3:85:88:31:54:18:47:88:4b:c7:
37:27:13:fa:ed:b5:f6:a3:fd:99:6d:64:b3:09:54:
8c:97:ed:c5:6a:0d:77:24:ab:b2:48:bc:78:78:9e:
a1:82:ad:9e:d1:ae:c6:dd:31:a8:38:3a:34:ee:9b:
dd:07:39:21:e0:b0:4c:90:b7:01:6d:c7:e2:c1:5d:
c1:ed:55:7e:33:3d:d8:55:99:d0:dc:b0:b4:43:ea:
d9:2e:10:34:e1:43:4a:f4:61:26:41:1c:da:a7:e2:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DA:D2:31:A2:0D:04:C0:0C:C7:6B:04:00:BD:E5:33:6E:39:FA:50
X509v3 Authority Key Identifier:
keyid:F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:e0:5e:90:92:76:69:65:d2:65:95:3c:ad:09:aa:e4:1f:0f:
1d:7c:d9:21:b0:e2:54:41:d2:57:cd:90:a2:29:44:e5:cb:b1:
a0:b0:60:aa:3c:0c:f5:c8:92:42:ac:bd:0d:fe:cb:9c:84:92:
ba:51:e4:5e:39:6f:6f:23:8f:80:82:5f:6f:a8:ba:61:ab:19:
42:da:f4:f2:77:87:a8:e1:20:78:8e:71:18:72:d4:76:42:1c:
e6:d6:3e:b4:cf:1a:74:47:07:61:96:bb:37:14:a0:51:2d:48:
f4:60:48:4e:b9:2d:b0:83:8c:2b:f3:17:c0:ff:63:86:25:be:
21:46:f6:6f:94:43:c9:08:62:e7:f9:f2:15:9b:f2:ea:b6:b2:
0c:e2:31:f3:f0:2e:58:e3:69:13:ad:8d:8a:34:83:80:65:67:
31:cc:9f:8d:9b:17:ec:63:02:55:ac:b7:db:2a:30:02:02:ea:
00:18:19:fe:8c:ef:ec:e5:13:29:40:b9:12:a1:e1:d6:dc:3a:
f2:da:2e:48:44:ae:68:05:93:41:d6:2d:45:c4:c5:77:22:a1:
3d:ae:e2:6e:5e:49:f4:91:0b:74:09:bb:96:92:e9:20:fd:81:
3e:62:91:b4:35:1a:62:d4:1f:d1:17:4d:7f:f2:53:33:e2:9f:
51:0e:31:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:04:53 2025 by rpki-client