Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
File: ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft (raw, json)
Hash identifier: 8X6ZLGjFrWadc1zHOXArdYERzQmsLcjlR+VO9mXsrwM=
Subject key identifier: C6:C6:D5:E7:68:9F:C4:89:9D:02:41:AE:CA:89:76:8B:D6:C0:AB:46
Authority key identifier: 72:24:D6:F0:72:52:1A:D6:EB:3D:02:9B:18:9F:42:D2:40:A9:15:30
Certificate issuer: /CN=7224d6f072521ad6eb3d029b189f42d240a91530
Certificate serial: 0196789F30905A1B7D474ACD0FC74D06AE6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 19:00:20 +0000
Manifest this update: Sun 27 Apr 2025 19:00:20 +0000
Manifest next update: Mon 28 Apr 2025 19:00:20 +0000
Files and hashes: 1: ciTW8HJSGtbrPQKbGJ9C0kCpFTA.crl (hash: pTeOJagLmYFVpcQhB8emp21GVsLB7/O8GKTyWxwxhBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:30:90:5a:1b:7d:47:4a:cd:0f:c7:4d:06:ae:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7224d6f072521ad6eb3d029b189f42d240a91530
Validity
Not Before: Apr 27 19:00:20 2025 GMT
Not After : Apr 28 19:00:20 2025 GMT
Subject: CN=c6c6d5e7689fc4899d0241aeca89768bd6c0ab46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:8e:77:c2:22:63:29:1f:94:68:b2:83:43:
5d:14:bd:94:0a:09:04:a4:06:18:31:60:51:7d:b6:
50:40:8d:a3:73:fd:46:fe:e3:a0:01:d8:36:57:8d:
88:26:09:75:f3:63:d9:51:64:9d:4a:9d:db:6e:1e:
71:94:bd:28:e6:5d:78:9f:29:f9:f6:05:55:8f:10:
e8:7f:41:3f:1a:77:12:b4:b0:26:95:f9:9d:c8:00:
88:d4:3b:b9:e4:bd:47:e3:f0:00:da:27:c0:23:3d:
d2:56:3e:c0:6d:81:f8:43:b6:b7:89:9d:e8:d7:df:
2f:e2:2a:29:7b:ad:25:f3:45:b4:38:d0:3b:b3:1b:
58:86:2d:aa:64:a9:61:95:50:24:bd:b4:52:cd:a6:
9f:53:cb:e0:7a:20:28:37:75:3a:b8:bf:c6:03:f3:
44:61:13:30:83:71:7d:ab:48:f7:54:1a:aa:a3:8a:
23:26:7d:15:c7:99:9b:09:53:18:dc:55:c5:ba:57:
e4:40:29:9a:4f:00:ff:28:95:8e:61:53:42:c5:cb:
87:6e:14:4b:3a:ce:3e:9d:b1:34:36:43:ae:a8:10:
41:63:f3:92:b0:f1:67:5d:6a:14:89:f2:25:48:a8:
b1:45:75:08:2d:00:55:05:3e:20:b8:1c:a7:5a:37:
10:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C6:D5:E7:68:9F:C4:89:9D:02:41:AE:CA:89:76:8B:D6:C0:AB:46
X509v3 Authority Key Identifier:
keyid:72:24:D6:F0:72:52:1A:D6:EB:3D:02:9B:18:9F:42:D2:40:A9:15:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:94:34:e8:22:ac:9c:88:3f:ad:5d:23:c8:93:0c:44:cd:d4:
0b:a3:1a:13:f4:7a:7d:c0:ae:97:ff:b5:5f:31:ec:dc:8a:1c:
2a:2e:c8:77:f8:0c:a1:3a:76:09:18:96:82:b2:5f:ad:ea:cd:
92:13:ac:7f:34:ee:f0:4d:ba:f3:69:85:11:dd:13:1e:c6:32:
f7:54:1e:8c:45:76:6c:a8:24:64:11:3c:b2:a7:5f:e4:e8:dc:
ec:52:3a:da:1b:3e:3c:c3:6a:99:65:69:b0:fa:07:45:18:4c:
21:0a:d8:fc:f0:3c:29:d9:29:40:36:65:1b:89:74:86:28:4e:
b9:b6:d1:28:ab:c7:71:cd:92:80:eb:0e:f3:c4:89:6f:38:b6:
b4:56:6d:7c:7b:2e:89:a1:ec:22:aa:01:e0:6e:f5:70:4a:27:
e4:5b:e2:10:4d:59:74:67:74:ac:96:b7:6e:0a:dd:c2:05:41:
f7:a1:a9:fe:05:9c:a8:ee:11:ea:55:ba:f8:f9:96:dd:75:79:
b1:05:67:a6:e5:e8:82:b6:9a:6b:62:ae:c1:ee:19:58:a1:23:
02:05:b5:b6:87:b5:6e:f7:ba:d0:d3:77:c5:80:b9:46:5b:89:
b1:e5:c7:30:41:7d:30:14:d4:63:a2:3c:84:c5:3e:8c:35:44:
b4:95:69:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:41:59 2025 by rpki-client