
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
File: SVfItkDqWWxdEac7PSZu54w_Cds.mft (raw, json)
Hash identifier: 5S4aUYB8tcqsKIfKPipQ9zE4W3rjzB4qnoJ31yp/vvE=
Subject key identifier: D4:C6:6E:11:B5:D3:58:E5:59:4C:DE:08:3B:5B:35:3D:14:07:F7:C4
Authority key identifier: 49:57:C8:B6:40:EA:59:6C:5D:11:A7:3B:3D:26:6E:E7:8C:3F:09:DB
Certificate issuer: /CN=4957c8b640ea596c5d11a73b3d266ee78c3f09db
Certificate serial: 01968BEF6F3B7F426E0A3C180B40C2FAA060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
Manifest number: 07A8
Signing time: Thu 01 May 2025 13:00:46 +0000
Manifest this update: Thu 01 May 2025 13:00:46 +0000
Manifest next update: Fri 02 May 2025 13:00:46 +0000
Files and hashes: 1: SVfItkDqWWxdEac7PSZu54w_Cds.crl (hash: 4C8nl/xiquTesTZqSIMht452iNgbN/mqU6gH9nhFxgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:ef:6f:3b:7f:42:6e:0a:3c:18:0b:40:c2:fa:a0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4957c8b640ea596c5d11a73b3d266ee78c3f09db
Validity
Not Before: May 1 13:00:46 2025 GMT
Not After : May 2 13:00:46 2025 GMT
Subject: CN=d4c66e11b5d358e5594cde083b5b353d1407f7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:96:a6:36:75:56:3c:65:0f:e2:c1:7f:96:
1d:9e:61:1f:29:7a:f0:77:1b:e4:11:97:66:ee:b7:
ab:79:45:8b:24:0c:b2:60:10:c4:c4:9e:c3:31:22:
4f:6e:77:a4:26:ab:a3:8d:7d:47:5e:01:f9:22:77:
5a:24:43:e9:15:e2:70:30:90:c4:6a:3c:80:77:26:
10:3a:26:db:e6:5b:50:f8:0c:2b:e7:fc:30:e2:df:
db:00:35:98:ee:fa:08:f3:91:84:8b:9b:23:25:2f:
66:b2:48:14:ab:e2:34:06:dc:c6:eb:f2:3c:96:94:
ea:14:9d:2a:85:47:59:d8:ee:83:52:a0:87:f9:fa:
89:cb:12:5b:57:73:57:fd:9c:e7:53:92:61:24:06:
12:04:d7:d6:c1:9b:0a:76:18:e3:1d:10:bc:fe:32:
f6:59:5e:61:76:95:86:35:b7:8f:d0:e4:50:5a:57:
0c:e4:eb:04:f2:68:0d:00:1e:e7:e3:5e:8b:f3:f2:
60:40:69:13:db:ac:c9:0c:90:d3:b3:a4:0b:b5:e1:
0b:9c:04:d0:ec:33:fc:e6:6d:8e:c1:fe:12:9b:f2:
8c:43:47:2a:f6:3e:e5:50:05:c8:56:75:72:a2:5c:
7d:3f:36:18:32:df:15:f9:02:5d:1d:f5:6d:8d:07:
70:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C6:6E:11:B5:D3:58:E5:59:4C:DE:08:3B:5B:35:3D:14:07:F7:C4
X509v3 Authority Key Identifier:
keyid:49:57:C8:B6:40:EA:59:6C:5D:11:A7:3B:3D:26:6E:E7:8C:3F:09:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:81:a7:e1:72:2c:d8:25:91:d7:e1:41:7b:a3:6c:09:3f:70:
cc:cf:66:58:d1:c8:c1:6f:3d:16:cc:d0:a4:bc:3e:63:a2:68:
3b:2a:dd:3e:c7:1f:06:4d:5e:e8:12:c0:13:fb:2a:2f:7e:41:
2e:ee:e0:aa:11:92:86:95:7e:dd:62:40:e9:96:64:69:6e:0c:
fe:7a:33:93:b7:b6:f4:9e:fe:d7:13:71:4a:b2:76:dc:f3:ac:
64:c4:d5:32:0f:23:43:35:10:e9:e3:d1:2d:5f:98:13:58:b3:
78:24:13:98:ae:c4:25:b4:c6:0a:fe:36:cd:2b:f7:76:24:5f:
06:64:ca:11:70:82:51:bf:d0:fb:c9:66:cd:e4:d0:e9:26:ff:
39:8c:2a:a0:e8:73:ce:f7:26:bf:e4:e5:39:ff:bd:38:56:5d:
6f:54:21:f5:67:5b:aa:4b:0d:bb:7e:a6:ef:25:8d:f5:e4:86:
f4:f9:80:e0:ef:12:84:64:2b:a6:41:89:fc:68:99:51:5d:60:
34:71:e1:5d:e5:c2:e1:f0:bb:1e:22:da:b2:0c:e8:e6:5d:05:
e9:8e:38:6f:f3:18:89:75:41:aa:3d:a8:52:72:27:b2:a3:ba:
dc:64:51:d5:c3:14:3d:c2:69:14:40:51:68:43:44:a5:21:42:
6b:44:ba:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:56:00 2025 by rpki-client