Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
File: 9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json)
Hash identifier: P271NFOQR9bIWPCyr0CjoaHtYCM4ThjBROMDChrNB2s=
Subject key identifier: E0:6B:FA:E6:EF:4B:7F:FD:E3:9D:B5:E0:1B:50:28:C9:B8:03:DB:92
Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
Certificate issuer: /CN=f653b4c31511b5482eb8425a391379d43fd6d455
Certificate serial: 01965F4D929E2552037D8F02E93CFBC057FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
Manifest number: 1500
Signing time: Tue 22 Apr 2025 21:00:41 +0000
Manifest this update: Tue 22 Apr 2025 21:00:41 +0000
Manifest next update: Wed 23 Apr 2025 21:00:41 +0000
Files and hashes: 1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: IK9R5vSZm7xhsbCBIjJB3nrdBNvwe9IahvS6EWk7GrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:4d:92:9e:25:52:03:7d:8f:02:e9:3c:fb:c0:57:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455
Validity
Not Before: Apr 22 21:00:41 2025 GMT
Not After : Apr 23 21:00:41 2025 GMT
Subject: CN=e06bfae6ef4b7ffde39db5e01b5028c9b803db92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:d9:48:8b:f2:29:9c:31:6c:c0:3b:96:94:
c1:94:73:63:a0:38:5e:b6:6c:11:0d:be:90:24:0b:
99:62:29:11:dd:40:26:ce:90:40:0a:24:fc:f8:9b:
29:de:a8:90:18:36:77:af:c7:ab:f2:d5:ab:ad:26:
82:5d:c2:05:11:2f:a9:6c:c9:76:6e:31:20:64:56:
80:6d:a3:5c:92:6d:e4:9c:fe:1e:a8:c1:59:09:5b:
81:b4:b9:65:8a:11:c4:09:d6:8e:e3:0e:c5:ff:06:
4e:8a:2d:5e:6f:8f:6e:36:3b:b2:38:2d:c5:5f:1c:
85:b5:e5:a3:e3:2e:d4:5f:c4:87:56:61:71:d0:fd:
f0:d9:40:a9:39:82:c5:a2:0d:52:40:ca:06:bf:1a:
e5:4c:8a:c0:60:fd:30:48:38:ca:fb:31:d6:7f:3a:
81:3b:ed:3f:5a:54:13:c3:b7:f7:01:b4:5a:49:b5:
1e:5a:b3:fd:8a:6b:43:b8:85:96:4b:f2:cb:f0:7f:
80:07:0e:15:d4:27:72:69:7e:48:e8:db:bf:d5:6f:
aa:fa:58:6b:a1:b1:b1:67:bb:f1:65:b1:2d:27:6f:
a0:14:96:b2:90:32:fa:ba:c7:c1:6e:24:65:46:74:
85:d9:bc:55:11:57:5c:44:4f:32:02:d6:da:3c:9e:
6d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6B:FA:E6:EF:4B:7F:FD:E3:9D:B5:E0:1B:50:28:C9:B8:03:DB:92
X509v3 Authority Key Identifier:
keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4f:60:f9:cb:5b:e0:75:77:e9:01:8b:a1:ab:f7:80:d9:0f:
9e:42:f0:62:e1:ef:d1:4b:70:90:bb:07:5a:1c:dc:9f:ae:ba:
3b:57:04:e7:b6:11:7f:22:64:11:68:da:84:d5:86:93:21:84:
e4:a2:3a:d2:f3:c5:53:ea:e7:f1:fb:b7:8c:e0:ff:94:24:34:
60:4c:b2:67:3c:35:ec:fc:8b:60:f8:97:6b:ff:56:56:f1:21:
27:33:85:9b:fa:87:03:de:14:f6:ac:d7:46:83:8a:86:f7:f3:
83:a8:26:90:ea:f1:f3:ca:f2:36:02:ab:b7:75:f4:42:4f:26:
b5:57:0f:09:1e:78:13:67:54:6d:5d:12:0f:68:6d:c8:89:a4:
51:87:72:b6:a4:40:d8:94:7b:59:c3:d4:ff:cd:bb:d0:f6:eb:
cc:7f:77:d9:57:58:5b:88:eb:83:16:b6:e6:49:78:38:28:eb:
ab:c7:50:b7:3e:9b:52:68:1c:2e:fc:5c:f4:df:df:44:7d:e0:
7f:d0:7a:4f:f0:98:bb:c0:1e:26:dc:50:2a:ea:1b:3f:0e:2a:
7d:a9:27:23:bf:62:65:ca:02:35:34:94:b8:6f:76:de:08:66:
4d:d1:c2:52:1b:c2:ca:10:e8:bf:f8:29:5a:af:36:a1:42:4b:
8a:28:9a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:10:26 2025 by rpki-client