Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
File: UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft (raw, json)
Hash identifier: fwtQEwIMe7fTLBoBdM7QIymEiWE/SQN7CpVYRFNfE58=
Subject key identifier: CF:66:5B:5A:0C:58:53:8F:A6:10:1A:61:01:09:FF:E5:D4:AD:9D:4F
Authority key identifier: 52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16
Certificate issuer: /CN=52b8d3d330bd6620bb17d487e4055d95b274af16
Certificate serial: 0196CEE2A68CFE0B3324B50BDE355095E6C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
Manifest number: 0F23
Signing time: Wed 14 May 2025 13:01:22 +0000
Manifest this update: Wed 14 May 2025 13:01:22 +0000
Manifest next update: Thu 15 May 2025 13:01:22 +0000
Files and hashes: 1: UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl (hash: EhekoSWOWeI7UYlzDNOoXfsGBM2kEASXbhVxj28u3Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:e2:a6:8c:fe:0b:33:24:b5:0b:de:35:50:95:e6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b8d3d330bd6620bb17d487e4055d95b274af16
Validity
Not Before: May 14 13:01:22 2025 GMT
Not After : May 15 13:01:22 2025 GMT
Subject: CN=cf665b5a0c58538fa6101a610109ffe5d4ad9d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:9a:d7:01:dc:cf:c7:90:df:e7:54:ee:54:
04:62:95:e0:76:4b:60:86:e6:63:9b:c2:2e:b6:35:
a8:ad:e6:b6:c1:60:18:c5:a1:90:84:12:a9:77:c5:
37:b0:7b:f9:be:ae:9c:9c:9a:17:28:4b:da:b0:66:
e8:70:b7:9c:39:c1:d1:25:27:0e:39:89:16:ce:31:
3f:a6:86:02:cf:f1:c1:cf:2c:2e:49:58:61:c0:10:
6b:75:64:42:b9:72:0e:87:0f:49:a4:49:97:87:ec:
2b:fb:b6:e9:e6:f6:9f:8b:ea:05:f7:56:dc:c5:ce:
24:2c:33:34:87:f6:e1:27:a3:1a:47:ed:52:27:8a:
62:a0:39:6f:1e:0f:8f:2b:7e:df:1b:95:26:8b:da:
19:60:c4:68:9d:3c:e8:93:56:c9:f6:e9:52:a0:3a:
4a:2b:66:18:63:22:11:70:f2:fd:fd:4a:56:f1:8f:
dc:7e:98:04:a9:16:c0:da:33:27:c3:cb:f4:64:98:
68:1d:b7:4d:0a:88:c9:8b:e1:fe:86:5b:d1:63:f8:
28:a9:5d:fa:9f:ce:f6:dd:dd:5f:82:18:57:53:c8:
2f:29:b7:0f:3f:0d:f2:8a:24:cb:73:74:38:8c:0e:
2a:cf:9c:0a:43:f6:9c:eb:b7:d0:30:1b:bb:9f:99:
30:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:66:5B:5A:0C:58:53:8F:A6:10:1A:61:01:09:FF:E5:D4:AD:9D:4F
X509v3 Authority Key Identifier:
keyid:52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b5:17:f4:a8:22:d6:a2:63:ec:99:e0:30:fe:d7:4e:cf:30:
54:3f:11:62:4d:d0:f7:cb:37:68:5d:ce:e0:9a:1a:07:30:0b:
8a:c4:19:de:1a:85:27:4f:97:2b:d7:30:d3:45:c6:12:7f:5a:
4a:9d:65:93:68:ed:ee:fb:12:96:53:e0:b0:dc:55:18:d1:48:
f6:0a:cc:c9:98:c9:01:32:d8:87:f7:d9:cd:9b:c6:57:a9:e5:
a6:98:93:68:5f:a1:53:64:05:23:91:b2:80:7f:d3:79:bd:bc:
b9:0c:b2:20:4d:5b:7c:1b:12:2f:2c:71:1e:f8:95:54:64:31:
5b:53:65:7b:57:db:f3:d1:fd:22:dc:16:ff:fd:ce:4d:7d:b9:
26:39:f7:ed:80:5a:0d:ea:89:ef:dd:a8:0e:ec:20:3d:30:f5:
bf:7f:3c:fc:09:96:68:f9:f9:47:5b:a2:81:80:f6:4b:c1:68:
83:49:63:bd:94:ec:5d:db:ab:83:34:b4:57:fc:d5:02:92:31:
b7:6f:67:01:a5:f2:76:35:40:6f:80:45:7c:0c:9c:14:7e:c4:
b6:92:b8:ec:0a:95:cb:18:ca:35:f3:8c:f7:1d:6e:c2:68:dc:
9d:38:74:7d:ef:7a:3c:dd:17:30:94:d7:18:82:8f:e7:3e:4b:
3c:0d:35:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:11:18 2025 by rpki-client