Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
File: L5FDTuFsYTNOwnDfVox3oLXeBSo.mft (raw, json)
Hash identifier: yr/0+hzrriKcxbYXjG46W/RJ8H8ynlj9n5ifmUDZwWY=
Subject key identifier: 9E:E3:D0:96:69:C4:89:CF:03:6B:D9:47:29:61:DF:E4:65:0C:EE:82
Authority key identifier: 2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A
Certificate issuer: /CN=2f91434ee16c61334ec270df568c77a0b5de052a
Certificate serial: 0196748C1545D297E01E22EC75CF1A698C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
Manifest number: 0BF3
Signing time: Sun 27 Apr 2025 00:00:59 +0000
Manifest this update: Sun 27 Apr 2025 00:00:59 +0000
Manifest next update: Mon 28 Apr 2025 00:00:59 +0000
Files and hashes: 1: L5FDTuFsYTNOwnDfVox3oLXeBSo.crl (hash: jnUWh+UCUNcFBVD7UVTQNKGQFDkWGxTnb+//1lzFq48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:15:45:d2:97:e0:1e:22:ec:75:cf:1a:69:8c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f91434ee16c61334ec270df568c77a0b5de052a
Validity
Not Before: Apr 27 00:00:59 2025 GMT
Not After : Apr 28 00:00:59 2025 GMT
Subject: CN=9ee3d09669c489cf036bd9472961dfe4650cee82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:f6:e1:03:e7:30:8a:ea:d3:68:70:91:d5:
9c:c8:c1:6c:4b:70:8d:cd:f5:65:d0:2a:d5:a8:e1:
c0:07:03:1a:05:bb:12:df:80:b3:ff:d0:fe:e9:22:
84:e2:d1:0a:9e:d3:d5:ee:f4:98:38:d5:b3:db:9e:
2f:c6:6d:77:84:0a:5a:77:34:3f:54:d8:24:10:f8:
91:7e:e3:a3:df:f3:bc:f8:64:c5:e6:13:7c:fe:ca:
0f:7b:26:9a:44:9b:ee:71:a5:f4:d1:68:af:1f:f6:
9b:ec:42:dc:f9:11:4f:2c:13:4a:8e:d5:9c:61:71:
54:6c:60:3e:6a:58:7a:f8:81:62:49:0b:75:bd:b7:
28:65:76:ae:cd:3e:32:f4:ee:6e:17:f2:d3:70:ec:
6b:9f:0c:43:12:04:f9:68:c0:fb:a5:40:28:f7:82:
68:15:e0:43:a9:bb:b0:c9:17:7f:2e:e5:10:cd:91:
8e:3b:4b:2c:45:7e:a8:e8:06:ff:e2:94:00:06:05:
ad:fd:8d:77:ab:69:70:b4:0d:9e:c4:e3:5e:c0:41:
81:52:9d:f1:88:82:c0:aa:c9:7d:77:cc:0b:fc:fd:
01:67:ea:0c:f7:93:ad:d0:4e:b8:f8:1a:e2:22:93:
7c:5e:18:85:29:42:9e:ca:cb:9c:67:69:5b:1a:82:
e7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E3:D0:96:69:C4:89:CF:03:6B:D9:47:29:61:DF:E4:65:0C:EE:82
X509v3 Authority Key Identifier:
keyid:2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:22:3c:71:2d:b6:b3:2b:3e:d7:d6:22:9a:af:ec:c3:92:3f:
2d:0e:8d:04:a6:36:0d:ea:18:08:35:5f:f9:2b:bc:39:2d:14:
8e:16:28:9c:17:ad:f9:85:23:df:fa:43:88:65:fc:39:33:b4:
bd:64:5a:22:47:74:cd:fe:72:00:8d:8d:8c:8e:db:cf:4d:14:
bf:b6:4f:60:2b:3e:9d:b7:46:c4:c3:77:e1:07:48:3e:0d:48:
80:d5:32:89:12:ce:53:91:b1:e4:33:0b:c4:eb:85:cc:e9:bd:
25:c7:63:4a:7b:d8:8c:b9:3d:9c:ee:cd:f2:e3:92:ef:47:91:
0b:49:42:cc:53:0c:dc:9a:96:15:05:5b:fc:ef:6f:05:38:9a:
d6:59:fa:3d:c3:ed:8f:26:21:7f:f4:11:0e:7d:48:d6:f4:c7:
64:3f:b4:e1:ba:96:5b:e3:78:51:6f:68:f5:08:03:8e:60:5d:
5e:81:13:3a:cf:5c:f7:ff:6f:2e:dc:83:0f:fd:be:6c:e5:08:
16:dd:af:7f:77:94:b8:a5:bc:c6:1c:fe:bb:51:77:32:a2:e5:
98:e4:56:3d:a0:23:a4:79:1d:24:6c:39:77:ec:6a:a3:b0:5b:
2c:67:73:b7:d1:c3:66:a6:0b:12:d1:78:1d:47:19:ce:f9:f5:
18:7d:d7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:40 2025 by rpki-client