Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
File: k8QjPQuo54YYoJpyVh3M0GSYyE4.mft (raw, json)
Hash identifier: PAbZ4uTt8Stn7q8DDIUu69QD3PIvFjKQg4u9wFyTCro=
Subject key identifier: 99:CF:04:9B:52:85:3F:6D:17:72:E0:EC:D0:70:A1:7E:F5:E4:4F:1D
Authority key identifier: 93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
Certificate issuer: /CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Certificate serial: 0196839113D9F7C542A79D9AD82AE3A7B8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 22:00:45 +0000
Manifest this update: Tue 29 Apr 2025 22:00:45 +0000
Manifest next update: Wed 30 Apr 2025 22:00:45 +0000
Files and hashes: 1: k8QjPQuo54YYoJpyVh3M0GSYyE4.crl (hash: SSWvvlUqEABWGrISHWtO6nD/VwyUaxFz/YNqLmTheCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:13:d9:f7:c5:42:a7:9d:9a:d8:2a:e3:a7:b8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Validity
Not Before: Apr 29 22:00:45 2025 GMT
Not After : Apr 30 22:00:45 2025 GMT
Subject: CN=99cf049b52853f6d1772e0ecd070a17ef5e44f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c8:ad:3d:17:75:a5:89:e6:77:5b:85:9d:a6:
b0:6b:9c:1e:0f:f5:56:bd:79:12:2a:0c:d5:76:d8:
8f:a2:91:ff:7b:82:62:a4:df:33:b8:39:07:cd:7b:
8a:69:34:a5:50:8b:a9:56:f5:77:25:b2:64:cf:e9:
f4:6a:42:8b:1a:22:e6:f5:9a:a8:9b:7b:d1:90:fa:
47:2a:70:54:4e:15:b7:60:ec:42:8f:a7:d2:73:ad:
66:22:db:83:66:7d:60:23:92:b3:39:c7:1a:fd:d3:
4a:2b:3c:45:9c:46:c5:84:c2:43:59:d6:7e:65:ca:
ea:9c:f5:c3:4c:09:62:78:9f:52:46:57:46:fd:51:
35:5d:04:43:d2:21:5a:34:c4:63:bf:3a:81:4e:68:
92:ab:ac:fc:ea:7e:e4:59:3b:a7:25:97:ea:a4:43:
40:f1:b8:17:41:96:83:32:cc:ed:fb:79:fb:59:a4:
48:2a:f0:64:a8:4c:40:63:2b:a2:55:71:ec:7f:3a:
75:95:82:5b:51:0c:49:85:a1:ad:74:c8:b4:19:81:
b7:94:0b:86:6f:15:38:6b:05:18:e5:a5:2f:a6:78:
1e:aa:6d:29:a1:43:32:90:52:9a:6c:af:88:0f:0f:
7d:14:35:3a:d7:2f:cf:c9:f3:de:6c:da:d0:10:54:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CF:04:9B:52:85:3F:6D:17:72:E0:EC:D0:70:A1:7E:F5:E4:4F:1D
X509v3 Authority Key Identifier:
keyid:93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:00:3c:d1:d4:19:d0:c2:02:73:e8:87:8d:68:97:22:89:8e:
75:da:7a:21:96:85:64:05:b5:be:0e:95:21:12:b1:76:ae:11:
a8:c5:fe:eb:1a:94:4f:dd:de:72:44:63:ef:6a:23:8c:da:0d:
9c:c7:8b:cd:7e:8c:ce:5e:89:cb:2d:bb:be:3c:77:ac:2a:db:
0c:1e:fa:8c:3f:42:10:18:01:9c:ac:a1:a9:c1:de:f7:f2:f7:
db:97:c6:fa:84:3e:d5:ea:79:31:4e:ee:c4:42:a3:fa:06:c7:
4e:17:c8:5b:0b:da:80:97:a7:0c:cc:89:f3:31:7b:e8:f3:b4:
80:4c:e1:05:51:7d:96:5c:5f:bd:e7:69:0c:c7:d0:9c:47:60:
06:08:b9:3b:43:7a:73:f0:86:2a:07:bc:e0:4e:e9:f0:54:e5:
56:63:23:9c:9a:62:11:41:2b:95:36:86:68:09:7d:b1:28:c9:
a4:55:1a:5d:04:d2:0d:68:0d:9c:33:2c:8e:d2:3b:3c:44:3c:
c0:0e:1e:a5:70:cc:1e:79:ba:fc:54:e4:82:be:81:aa:85:34:
f9:ec:62:25:dc:44:71:b1:ff:ab:56:16:cf:36:03:af:ff:78:
91:5a:76:b0:5a:29:a8:16:da:30:2f:93:e3:17:8e:89:5b:8a:
21:6a:74:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:15:18 2025 by rpki-client