Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
File: 9l95H50M9str44nJRWjId0BeUUQ.mft (raw, json)
Hash identifier: RYLSva0znIRki5ijG/3L6NnN3ObSejLU7BKD85vvwQo=
Subject key identifier: C4:9B:0A:73:2F:CA:96:1F:71:75:51:E0:CA:01:00:6B:89:F5:80:78
Authority key identifier: F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
Certificate issuer: /CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Certificate serial: 01967A570F685418203CF4C6092F758C9D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
Manifest number: 047B
Signing time: Mon 28 Apr 2025 03:00:48 +0000
Manifest this update: Mon 28 Apr 2025 03:00:48 +0000
Manifest next update: Tue 29 Apr 2025 03:00:48 +0000
Files and hashes: 1: 9l95H50M9str44nJRWjId0BeUUQ.crl (hash: xyL/a+ypyOsWmum2QAzrUan752Nc9/lRNzlRBftLal4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:0f:68:54:18:20:3c:f4:c6:09:2f:75:8c:9d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Validity
Not Before: Apr 28 03:00:48 2025 GMT
Not After : Apr 29 03:00:48 2025 GMT
Subject: CN=c49b0a732fca961f717551e0ca01006b89f58078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:0f:14:de:25:a9:a2:80:95:2a:91:78:a0:
8c:d7:7c:dd:3a:6f:3a:86:ae:89:4b:e3:94:57:4d:
bf:03:e6:f5:2f:1a:6f:ca:4c:86:6b:94:68:35:57:
b8:ca:1d:ee:5c:0c:ca:7a:25:46:c1:3d:f2:91:48:
90:7d:6f:5b:c6:d0:19:45:48:00:06:6d:c7:20:33:
7f:65:f4:37:3e:02:ab:a4:dc:d1:ee:74:ac:77:d2:
3b:64:86:59:16:34:93:fc:95:27:45:7c:99:62:4b:
84:10:91:10:25:56:ef:b1:12:72:94:9f:4f:8f:61:
e8:5e:42:ae:af:48:93:b5:0b:e0:4f:78:87:bd:b4:
e4:09:fd:28:fb:35:ce:76:b7:3f:2a:42:a4:2a:1c:
d0:70:e5:ca:90:fd:05:97:d7:58:f0:71:c3:e4:b8:
eb:ef:e6:f3:c3:70:40:f8:b7:72:c5:4f:41:a9:f1:
5d:01:57:a2:a8:db:35:8f:9e:d8:36:49:47:51:3a:
51:61:98:1e:ee:a6:48:00:42:b4:5b:5c:64:95:a9:
51:95:b3:08:c9:6b:0f:44:e2:68:40:b5:5b:5f:a8:
f1:7e:f0:3b:82:4a:fa:eb:bd:a3:62:b3:52:01:8f:
99:79:e8:d3:f8:8e:86:3d:d5:5a:fe:17:a2:6a:2e:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9B:0A:73:2F:CA:96:1F:71:75:51:E0:CA:01:00:6B:89:F5:80:78
X509v3 Authority Key Identifier:
keyid:F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5b:37:7a:11:f6:fc:76:38:2f:e9:66:1b:04:50:9e:29:c5:
66:5f:85:f4:ed:ea:12:12:71:1c:ed:7d:8a:9d:03:7f:6f:eb:
d7:2d:0d:50:ef:bf:50:5a:10:37:ee:a8:47:7d:11:d2:89:e1:
86:79:c8:bc:11:3d:4c:3f:7c:4e:cd:c4:48:dc:9a:a8:4e:2c:
1d:7a:f3:19:34:f4:a8:0a:2b:52:7f:a4:da:69:38:fa:29:fe:
28:fb:18:5b:70:9c:b2:34:92:26:04:f6:66:67:f6:82:a1:40:
d3:15:ee:06:9f:1c:7d:50:c9:67:46:8d:f2:09:3c:de:ce:3c:
27:b9:bb:4a:0d:20:a4:71:f3:83:e2:cd:bc:ec:a4:67:90:17:
98:e8:7e:dc:82:33:4a:0f:30:71:1c:94:fa:2f:20:5a:bd:07:
3f:98:d6:7a:4f:b7:47:fa:a4:65:7c:32:4f:6b:2e:a5:45:1d:
80:9f:6f:32:df:be:b8:26:fd:4d:e3:a3:f0:87:23:ea:23:2a:
22:26:cc:7c:e1:27:91:ef:98:2e:62:6a:cc:bc:32:79:4c:92:
46:2e:e8:52:f8:41:cd:ec:86:3b:f9:69:59:d1:ac:6e:3d:df:
06:19:df:83:98:9e:fe:df:71:42:45:55:ca:d7:0a:0f:1a:4f:
97:be:ad:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:30:14 2025 by rpki-client