Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
File: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft (raw, json)
Hash identifier: mtrDJ++texKM+svVAK4Fjk9giBys0yuwsvWHBBkiYQc=
Subject key identifier: A4:FB:8C:B2:13:47:A0:0E:CA:64:F6:34:49:29:7D:38:5E:9F:19:E4
Authority key identifier: D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
Certificate issuer: /CN=d6107622fd26072e2b9936caf275704350226ca0
Certificate serial: 0196760CF990B6B1E141BBB31CB59CAA6029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 07:01:23 +0000
Manifest this update: Sun 27 Apr 2025 07:01:23 +0000
Manifest next update: Mon 28 Apr 2025 07:01:23 +0000
Files and hashes: 1: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl (hash: 9eBnbE4CQMh9VNPAMii/vZ559ZWOHkJVpdDykCFEJ1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:f9:90:b6:b1:e1:41:bb:b3:1c:b5:9c:aa:60:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6107622fd26072e2b9936caf275704350226ca0
Validity
Not Before: Apr 27 07:01:23 2025 GMT
Not After : Apr 28 07:01:23 2025 GMT
Subject: CN=a4fb8cb21347a00eca64f63449297d385e9f19e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:26:08:31:5b:d5:ac:74:59:21:7f:3c:04:
a5:2a:ac:5b:88:dd:48:cd:30:ee:5a:30:13:fb:06:
ab:13:2e:4a:69:ef:c2:d2:b2:99:b7:43:7d:2a:6d:
a4:1e:4c:e3:ec:65:9b:93:d3:c1:e4:e0:a2:e9:45:
91:77:e7:84:16:73:ae:f9:33:67:43:e1:09:a1:c4:
93:14:9a:cc:4f:03:94:6c:ea:13:d7:3f:2b:3c:ea:
9a:32:59:cf:1a:57:be:bc:60:ba:ca:b8:b5:cf:20:
f9:01:0f:59:6f:11:ff:e5:c2:c6:88:d5:b3:0e:4c:
01:34:46:7f:cb:c3:63:f4:29:34:ca:29:08:20:b2:
73:f2:66:3f:1c:30:33:98:d3:4f:e6:1e:2f:67:82:
16:50:1e:aa:95:ac:4e:90:d1:5e:3d:05:2e:d6:21:
11:ab:5a:d6:06:94:54:1b:f4:1b:52:6b:44:f7:ef:
c0:1d:94:74:6f:e3:92:76:d3:79:34:f9:4c:c4:7a:
59:b6:7e:d4:77:63:23:ae:16:b1:1c:4d:c5:3c:dc:
fd:ae:3e:c4:f7:e8:0a:e2:03:ef:5c:7e:6b:b4:78:
18:26:65:71:e6:43:df:8b:68:44:92:a2:af:35:68:
1a:2d:aa:d6:91:c3:e3:3d:48:77:85:75:c0:14:b8:
ed:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FB:8C:B2:13:47:A0:0E:CA:64:F6:34:49:29:7D:38:5E:9F:19:E4
X509v3 Authority Key Identifier:
keyid:D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ce:83:f2:2f:53:bb:a7:bc:f4:7c:c0:5d:15:69:9a:5e:aa:
01:ca:37:60:46:8b:30:b1:f6:b6:d7:d3:2d:74:ed:34:04:8b:
3c:be:c4:2a:30:bc:d9:f1:0d:bb:0a:6c:18:4e:7d:1b:77:a0:
c1:2f:3d:bc:69:31:9c:9e:70:8c:10:31:d6:d8:1b:03:a1:2b:
8f:da:8c:61:ae:23:4b:ea:2b:8d:89:70:91:78:2f:83:f1:56:
f7:b9:03:a7:c6:48:f3:58:96:76:d6:77:df:78:67:39:78:f1:
a8:04:38:81:71:66:7a:b5:e6:de:d4:80:3d:6c:9d:2c:21:8b:
7b:f2:e9:38:8f:2e:2c:7a:a2:1a:bf:22:ba:ef:60:1a:58:63:
c7:b5:99:ab:46:bc:58:89:c5:4a:8b:f3:0d:57:32:e7:db:48:
80:d0:e1:e3:ed:7d:0e:b2:f4:b6:1b:22:7d:f2:2a:7e:eb:98:
6f:4b:58:b4:ae:d8:7a:92:c1:a7:ed:f4:74:ff:1c:5e:a0:7c:
d0:9e:4d:8a:70:fa:80:82:e8:81:55:b7:0c:12:3f:05:b6:a3:
f2:c1:d3:60:99:66:84:85:c5:73:46:55:35:5e:ea:a0:9a:d9:
3b:53:a5:4b:ee:c2:e2:cb:37:bc:ad:8f:d3:5a:a2:8b:b6:2c:
ae:d3:75:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:23:55 2025 by rpki-client