Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
File: uXhT3Vdz8qawcYefW567Dm9Ofao.mft (raw, json)
Hash identifier: ORbdYXy3ow2Y8OTgIKM9Fg/RXpt7doPTcbQJ7nhOyJo=
Subject key identifier: AC:FD:7A:A9:A5:17:8C:A9:CE:1C:7D:87:58:0A:A2:B2:50:BA:F5:36
Authority key identifier: B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
Certificate issuer: /CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Certificate serial: 0196A2E4953E72D9F849D068B7647FEE74C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
Manifest number: 14B8
Signing time: Tue 06 May 2025 00:00:11 +0000
Manifest this update: Tue 06 May 2025 00:00:11 +0000
Manifest next update: Wed 07 May 2025 00:00:11 +0000
Files and hashes: 1: uXhT3Vdz8qawcYefW567Dm9Ofao.crl (hash: KpnoC6ZxvsAsruyVAyemdlOjs51pz+g9LgAnzpoyRDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e4:95:3e:72:d9:f8:49:d0:68:b7:64:7f:ee:74:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Validity
Not Before: May 6 00:00:11 2025 GMT
Not After : May 7 00:00:11 2025 GMT
Subject: CN=acfd7aa9a5178ca9ce1c7d87580aa2b250baf536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a6:36:5e:2c:6f:a3:e7:5f:aa:48:04:4c:d0:
43:80:61:87:54:3f:b6:5c:a3:bb:40:5f:20:4b:bf:
39:7b:d0:47:18:9b:65:67:44:ac:7e:3d:37:9d:d7:
03:31:ee:20:5f:81:f8:cc:fc:c2:e9:f0:88:6c:dc:
8f:08:77:c5:96:fe:7a:e2:55:46:33:9f:82:5c:e8:
fa:49:db:26:05:5e:d6:12:00:e1:05:6c:c3:fd:5f:
4f:c3:e0:d3:f1:c5:0e:4e:02:15:9b:ce:20:9c:24:
bb:df:ae:6c:7a:14:f1:66:b4:44:6a:3a:26:16:12:
08:70:61:91:7c:d5:90:76:64:25:56:39:61:bc:b8:
75:d8:6b:fe:a5:19:ea:dc:19:00:94:02:3b:62:b3:
72:88:62:a5:6f:78:83:ca:20:97:35:bb:a0:41:37:
ff:08:a1:8e:ce:dd:3e:08:80:4f:0a:74:6f:e6:0b:
e8:a9:0e:51:41:48:56:94:0d:61:65:62:0b:78:d5:
c6:05:27:80:70:50:d1:a0:82:b4:07:6d:e0:b4:6a:
33:ed:7e:af:37:41:9c:e3:b6:c1:ba:46:37:72:a5:
26:e2:fa:15:73:81:8f:64:42:1e:6f:00:a3:31:60:
02:57:52:47:c3:4a:c5:54:15:6a:b1:37:d1:19:62:
18:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FD:7A:A9:A5:17:8C:A9:CE:1C:7D:87:58:0A:A2:B2:50:BA:F5:36
X509v3 Authority Key Identifier:
keyid:B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:28:56:d3:80:15:df:97:4b:1b:91:e3:35:a5:60:b4:e3:dc:
f3:2e:24:05:34:b4:5d:e5:a4:ef:60:e2:c4:a7:d2:de:d7:86:
e8:d1:ea:c6:1b:b1:00:f5:35:93:a9:a3:70:dd:07:b8:32:06:
7c:db:ad:f4:de:9a:ee:19:d4:84:ff:dc:63:eb:d2:95:20:4b:
31:5b:97:6f:b9:a8:1c:72:db:ff:01:b3:5f:fc:63:6a:3a:6b:
97:18:a1:6f:ce:39:4e:53:74:d2:a0:c5:36:f0:ab:ce:f1:67:
db:17:65:48:79:0e:1d:9c:24:fa:49:3f:95:f0:4c:29:e8:61:
02:94:db:7d:5d:ff:19:d9:f1:64:4f:bc:2e:ae:dc:03:03:4c:
74:ed:6b:22:cd:48:5a:04:68:fc:2d:84:ac:85:ea:22:53:24:
d7:55:c5:ac:63:88:63:08:77:71:45:68:e3:1f:0b:ce:4b:8b:
9c:32:be:d2:03:9e:c7:b5:08:9f:84:7a:2a:ac:a1:dc:5b:14:
ac:75:cd:c3:b5:e8:c6:59:1b:2e:eb:6f:db:7e:f4:d8:98:e5:
b6:11:a6:f6:f3:ec:45:76:6d:bc:a5:11:61:95:86:61:d7:20:
aa:c6:9a:3f:bc:bb:56:3b:84:80:f6:17:0a:ae:e6:47:2d:c2:
3c:69:9b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:39:12 2025 by rpki-client