Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File: INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier: kp4NAlvUGVgSSfRdKWuStJQKIki3ZCaYguUA5wJarEw=
Subject key identifier: 0A:AA:CF:E6:74:D1:35:54:90:66:92:F9:FE:B1:DE:30:A2:E1:F1:90
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial: 01967DC5CEFB9AD0FA9E9E21AFE50B796637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number: 150E
Signing time: Mon 28 Apr 2025 19:00:37 +0000
Manifest this update: Mon 28 Apr 2025 19:00:37 +0000
Manifest next update: Tue 29 Apr 2025 19:00:37 +0000
Files and hashes: 1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: 9JDlyKs0iCUvcb/W294TVr6bDMnk1ASR1Mm1gsy6n2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:ce:fb:9a:d0:fa:9e:9e:21:af:e5:0b:79:66:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Validity
Not Before: Apr 28 19:00:37 2025 GMT
Not After : Apr 29 19:00:37 2025 GMT
Subject: CN=0aaacfe674d13554906692f9feb1de30a2e1f190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:a9:2b:64:e8:cd:61:cd:b2:bd:9d:10:a7:
de:a7:f6:96:03:a8:f3:01:87:30:d7:4d:dc:e9:39:
93:bc:60:36:52:4d:a0:ca:6a:0c:51:5a:ae:d4:96:
ff:ed:20:48:cd:dc:36:1c:57:0e:b0:63:09:be:0e:
9a:75:25:8b:15:7d:c3:a2:3b:ac:9e:59:a1:2d:82:
f8:98:21:4b:12:14:35:cb:69:25:61:c7:4c:06:bc:
72:e5:39:0b:21:a7:5a:67:40:b7:73:02:ef:f2:5f:
5c:58:ac:bc:72:04:f9:f0:33:1f:f8:7d:ab:2a:b1:
fe:2d:f5:aa:62:7f:0f:38:72:58:db:14:6b:c3:3a:
dc:5b:d3:ba:d9:97:31:c8:3e:92:0a:b8:28:41:f4:
aa:d8:b4:4d:6a:66:08:a8:8a:1e:9e:c4:13:3e:2c:
24:fb:0f:39:86:ac:3e:d1:62:82:de:1a:93:f5:80:
fa:fa:69:de:ab:dd:98:c8:75:77:f0:40:6a:90:0e:
a5:b8:05:f6:51:07:55:09:4b:8c:83:5d:aa:03:fe:
6a:b0:a1:9d:c5:eb:f5:94:99:7c:f3:11:3f:90:00:
2f:b1:85:fd:7b:1d:57:a6:f7:3d:10:77:a7:e9:54:
5a:3d:70:4b:ae:f6:5f:81:ad:2b:55:ac:03:6a:c3:
fa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AA:CF:E6:74:D1:35:54:90:66:92:F9:FE:B1:DE:30:A2:E1:F1:90
X509v3 Authority Key Identifier:
keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:fd:8c:e6:87:c9:08:ec:c0:bf:b4:e1:00:cd:e6:fa:22:fb:
07:c6:cf:40:48:b3:63:1f:1b:f8:21:d2:34:08:86:26:d7:0d:
d4:7e:e0:25:d5:0b:f7:58:62:5a:f3:15:da:bb:b9:5d:01:72:
e9:ee:51:84:ea:b2:c3:64:29:e8:a5:fa:fb:be:0f:d0:e4:68:
31:df:2c:44:a8:39:53:fd:1a:4a:b4:88:1c:2b:cc:12:5c:5c:
ca:a7:eb:b4:2b:af:fc:eb:b7:fe:d3:9b:42:ef:3e:63:8c:35:
83:75:ea:f5:95:8e:0e:42:79:4b:83:54:2c:ec:98:fc:3e:38:
72:b8:20:87:f4:fe:89:7d:d4:82:49:bc:a6:17:37:25:76:68:
3f:2b:41:56:94:ea:1a:c0:92:0e:94:17:50:1a:54:a8:02:44:
1f:ec:cd:17:92:d6:3f:04:47:03:88:b8:2a:c3:a9:a3:50:7e:
c4:9f:b0:0f:06:e2:36:ea:82:2c:8d:b3:2a:6f:59:52:ae:85:
16:2d:9d:2a:fa:30:57:f8:2f:df:a0:0b:1e:1b:d6:cb:8f:ad:
b7:57:65:52:79:4a:e3:dc:76:e7:09:94:96:db:0f:64:31:5e:
2a:61:c8:c0:6b:e0:5d:6b:4b:da:86:0a:d7:ee:24:9f:78:69:
89:ef:5f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:35:25 2025 by rpki-client