Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
File: 1e-BdSPHDnJw0q7lorbXJWojQiM.mft (raw, json)
Hash identifier: EkFzKuzScUT+qj7YXN2lof+o2Kis6Twq+PzHSR+Qz9k=
Subject key identifier: 8C:8D:A9:B6:C9:EC:E3:EE:F4:11:F4:CA:F0:70:9F:FF:A8:5B:E9:C9
Authority key identifier: D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23
Certificate issuer: /CN=d5ef817523c70e7270d2aee5a2b6d7256a234223
Certificate serial: 01965500D2D6AB77D3F7A0F5023944575041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
Manifest number: 016F
Signing time: Sun 20 Apr 2025 21:00:39 +0000
Manifest this update: Sun 20 Apr 2025 21:00:39 +0000
Manifest next update: Mon 21 Apr 2025 21:00:39 +0000
Files and hashes: 1: 1e-BdSPHDnJw0q7lorbXJWojQiM.crl (hash: l1narpVZ8zMc+JrFMactLFzbpOmnasvdKSZbt5HyAN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:d2:d6:ab:77:d3:f7:a0:f5:02:39:44:57:50:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ef817523c70e7270d2aee5a2b6d7256a234223
Validity
Not Before: Apr 20 21:00:39 2025 GMT
Not After : Apr 21 21:00:39 2025 GMT
Subject: CN=8c8da9b6c9ece3eef411f4caf0709fffa85be9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:fc:48:86:7e:42:62:61:44:27:ff:5a:02:
f7:b8:a9:4d:3e:43:ec:9d:fb:91:2e:9d:d0:30:7c:
95:82:67:de:01:80:d9:d0:b2:86:ce:2e:95:0a:55:
24:96:09:63:03:01:26:86:ad:67:7e:df:4c:92:84:
fd:39:e2:24:99:d5:43:e4:ad:91:a4:58:9b:f2:ec:
b6:9e:a7:3d:5b:05:ac:f9:ac:fd:f8:9d:f7:9d:d2:
5a:cb:fe:6c:81:9a:0c:58:60:4f:06:ae:04:a2:b7:
81:fd:e3:43:4a:61:60:28:0c:97:3f:13:70:c6:c9:
a7:80:46:d3:8d:90:55:5e:92:f2:d7:21:bd:36:2e:
81:c4:cc:3e:2a:a6:22:05:60:d9:e5:ee:95:24:94:
8d:08:61:76:64:60:5a:1a:f1:14:44:2c:03:07:d2:
30:9d:9f:c2:34:f5:69:d7:8d:a1:94:25:b3:d7:b7:
c8:f2:4d:9f:6c:92:2b:b1:90:76:57:ac:95:d3:50:
9a:79:1d:12:ca:46:73:14:d1:73:00:06:1d:21:f8:
df:e0:83:a2:92:49:e8:54:01:c8:1b:38:24:38:af:
23:45:be:30:49:3d:00:9d:74:67:58:e0:0a:49:69:
1e:5d:c4:3b:5b:eb:b2:46:60:54:40:15:3a:23:22:
0f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8D:A9:B6:C9:EC:E3:EE:F4:11:F4:CA:F0:70:9F:FF:A8:5B:E9:C9
X509v3 Authority Key Identifier:
keyid:D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e4:a8:1b:58:43:13:1f:d1:f9:2a:f6:a6:65:61:f7:ce:21:
3a:8b:44:6e:31:39:1d:07:50:74:47:94:ec:93:4a:46:d3:83:
b6:d2:12:40:0e:3b:da:2e:72:33:2c:03:17:06:39:6e:f9:e7:
9b:c7:38:96:e6:10:c9:60:8f:62:22:0e:57:91:de:43:bd:e1:
55:b7:ab:67:18:45:ae:49:0f:e1:7a:9c:fa:ab:79:70:09:7b:
fe:ad:c6:c4:a1:d8:9f:c9:31:c3:11:8b:d7:01:cd:71:25:8d:
8a:3a:7a:99:3e:c6:f6:47:87:f4:d2:90:38:1e:5f:eb:7c:6a:
bd:94:04:5c:97:5f:27:f7:97:8f:1e:ba:47:9f:ed:0d:54:ff:
ba:45:e8:8c:75:d6:6f:5b:58:6f:65:9e:75:c5:42:a2:1f:c7:
30:29:13:dd:c7:22:60:da:df:14:17:6f:ec:01:92:57:a8:6b:
dd:46:a9:bb:cc:20:3c:9a:93:9a:88:94:bc:5e:89:7f:07:84:
27:79:6a:45:24:f8:0a:64:0f:66:7c:1c:82:ec:1b:b4:8e:25:
64:c7:27:39:34:92:d5:b0:93:48:4f:83:51:cf:62:61:21:1d:
1c:a4:97:29:72:88:30:db:84:da:2a:41:21:44:87:a8:29:7c:
fe:ca:74:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:19 2025 by rpki-client