Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
File: dBkW6TW7TmhYsdIjYVrONp7SaB4.mft (raw, json)
Hash identifier: aWHO2TSqQ4nuWXT6mMDioKC3IyphJJAYb48MtgdqK78=
Subject key identifier: 92:A6:0C:8D:08:A5:A0:56:6D:61:41:95:56:36:64:4F:DF:EB:F3:A7
Authority key identifier: 74:19:16:E9:35:BB:4E:68:58:B1:D2:23:61:5A:CE:36:9E:D2:68:1E
Certificate issuer: /CN=741916e935bb4e6858b1d223615ace369ed2681e
Certificate serial: 0196900305DFD8BDB8B5FB23EF633097A113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
Manifest number: 151A
Signing time: Fri 02 May 2025 08:00:39 +0000
Manifest this update: Fri 02 May 2025 08:00:39 +0000
Manifest next update: Sat 03 May 2025 08:00:39 +0000
Files and hashes: 1: dBkW6TW7TmhYsdIjYVrONp7SaB4.crl (hash: wzivYz5jrFukvXV/18UKc4XkSUr1mVPxQqA8op3Vy00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:03:05:df:d8:bd:b8:b5:fb:23:ef:63:30:97:a1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741916e935bb4e6858b1d223615ace369ed2681e
Validity
Not Before: May 2 08:00:39 2025 GMT
Not After : May 3 08:00:39 2025 GMT
Subject: CN=92a60c8d08a5a0566d6141955636644fdfebf3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8a:5b:4a:3b:0a:7a:06:90:49:78:ea:0a:8e:
f8:8d:6f:b6:58:96:08:25:7c:0f:f6:3d:36:87:a8:
24:7e:40:78:56:55:11:4a:30:c0:65:f4:97:64:b4:
d1:4e:71:14:4b:5e:de:8f:f6:f9:4a:9b:32:b1:e1:
ad:8c:4b:a3:45:a6:bf:36:fc:d6:b8:7a:be:40:01:
e2:fe:01:91:75:6f:b5:e5:ea:99:fe:73:db:06:3d:
0c:a3:4b:51:5a:cd:1e:94:c8:69:58:db:82:47:62:
74:55:f5:13:e6:22:68:eb:d5:6e:d7:de:9a:94:a1:
53:e2:d4:d9:08:fd:80:e8:ab:5e:d6:99:96:d3:51:
a9:f5:aa:16:11:6f:c3:91:e8:69:f0:e9:17:be:2d:
66:d4:7d:88:d7:68:58:c7:02:78:19:29:59:ed:83:
14:ab:07:7c:5c:d5:a6:13:c2:fa:de:16:53:11:8b:
30:4a:db:ca:35:6d:0f:45:31:2a:c2:40:ae:4a:d3:
af:f6:68:f4:ea:f1:34:bb:ae:5d:a6:74:43:6f:42:
8f:99:0b:8a:c4:d6:8b:86:5e:e8:9b:3b:2b:c0:2d:
dc:ba:91:11:21:d4:a0:32:e2:57:1a:cc:24:5f:66:
db:c2:0f:22:b9:1a:c9:3f:64:fc:79:de:ff:73:57:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A6:0C:8D:08:A5:A0:56:6D:61:41:95:56:36:64:4F:DF:EB:F3:A7
X509v3 Authority Key Identifier:
keyid:74:19:16:E9:35:BB:4E:68:58:B1:D2:23:61:5A:CE:36:9E:D2:68:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ff:10:c8:c7:07:2e:1c:f8:60:84:9c:8f:28:96:f4:76:86:
e2:48:9e:4c:3d:6b:3e:9b:2b:a3:97:2e:9f:c1:0b:0e:5f:e2:
ed:b0:9a:60:83:aa:d7:a4:67:84:62:ca:25:e5:17:85:2d:58:
6f:62:87:05:05:b0:8c:41:b8:32:1a:22:f4:48:27:25:36:db:
a2:70:23:35:74:7c:27:c2:2b:6b:e0:31:6f:18:a4:51:3b:2f:
7f:a6:27:ce:c5:e3:4d:62:b3:ca:7c:4a:d9:e3:4b:4b:b6:d4:
c7:62:55:c7:19:9c:44:a6:49:ff:eb:9a:8f:e3:54:f8:76:bc:
89:62:1c:3c:8f:31:52:c2:f3:60:09:fc:6b:47:a4:ff:c5:34:
55:55:32:f2:9a:2b:42:fd:cd:65:6f:b0:f3:e8:f5:58:dd:96:
3e:a2:e3:4a:3f:60:00:5d:89:a0:eb:8d:97:95:35:33:08:60:
44:0c:30:af:b3:e9:37:63:8b:86:48:f9:50:a1:e5:78:7a:be:
af:40:77:cd:8a:ee:e1:c4:3a:35:2f:2f:76:5b:ff:a8:bd:03:
32:42:44:0a:33:35:fc:e1:5a:b8:55:00:e7:fa:fe:17:27:72:
69:0e:a9:95:40:b4:80:90:0b:17:7d:74:49:2f:4a:7a:90:ff:
91:cf:11:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:11:17 2025 by rpki-client