Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
File: mNtTOItvp7HlovTGhjq3Hxz7VRI.mft (raw, json)
Hash identifier: ZGbwknyorB1EfI8YEA8FNvpWBRdgkQqA0OIXmhgpoaw=
Subject key identifier: 0E:F0:2F:BF:6B:CA:E0:42:04:B2:AF:5B:FC:61:3A:1E:FB:49:58:FF
Authority key identifier: 98:DB:53:38:8B:6F:A7:B1:E5:A2:F4:C6:86:3A:B7:1F:1C:FB:55:12
Certificate issuer: /CN=98db53388b6fa7b1e5a2f4c6863ab71f1cfb5512
Certificate serial: 01962C73253BC846F2ECE97439EE4792B248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
Manifest number: 01EF
Signing time: Sun 13 Apr 2025 00:01:05 +0000
Manifest this update: Sun 13 Apr 2025 00:01:05 +0000
Manifest next update: Mon 14 Apr 2025 00:01:05 +0000
Files and hashes: 1: mNtTOItvp7HlovTGhjq3Hxz7VRI.crl (hash: zwa9JAi181y85UjhzQFQ0ra83l2884SYWcAfQsANXnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:73:25:3b:c8:46:f2:ec:e9:74:39:ee:47:92:b2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98db53388b6fa7b1e5a2f4c6863ab71f1cfb5512
Validity
Not Before: Apr 13 00:01:05 2025 GMT
Not After : Apr 14 00:01:05 2025 GMT
Subject: CN=0ef02fbf6bcae04204b2af5bfc613a1efb4958ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:b5:28:ca:0c:84:08:38:71:4b:6b:08:f4:
98:c5:7d:84:ad:23:f7:02:59:e7:9e:54:a0:7f:0c:
cf:b7:e5:06:5b:34:a0:fd:a3:55:ca:9b:8c:7a:76:
94:ac:74:0b:53:05:fa:23:94:24:11:67:99:1d:62:
3e:54:06:67:5f:bc:07:1e:46:4f:6b:6f:b0:c3:74:
97:22:32:a6:c8:c8:b6:d2:54:31:8c:c8:1e:c8:bb:
62:6e:93:7a:ea:a0:e7:23:d1:08:85:6c:a6:5d:dc:
93:a4:54:84:2a:c3:2a:7c:ad:80:64:51:30:02:f5:
81:fd:ce:aa:33:4d:b0:12:fe:0d:fc:df:31:7c:01:
8f:c6:36:ee:8f:9d:1b:f4:81:f4:2d:c1:6e:cb:ec:
d7:06:78:73:ba:da:6d:18:d5:e2:eb:ef:23:1d:8e:
d4:81:ef:a3:74:87:a4:46:9f:ec:70:87:37:1c:9f:
59:8c:5d:93:98:51:75:e3:47:fc:44:19:f0:c0:45:
1e:eb:78:85:d4:eb:53:4e:f6:43:15:86:48:f9:e7:
39:78:cf:62:81:a7:05:4c:5c:63:b4:5e:fe:a3:46:
5a:ab:75:cd:93:2b:4b:ba:d2:bc:2c:a6:35:41:2e:
cb:f9:02:26:6b:e7:ee:c7:8c:dc:62:28:55:d9:8e:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F0:2F:BF:6B:CA:E0:42:04:B2:AF:5B:FC:61:3A:1E:FB:49:58:FF
X509v3 Authority Key Identifier:
keyid:98:DB:53:38:8B:6F:A7:B1:E5:A2:F4:C6:86:3A:B7:1F:1C:FB:55:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:92:2a:ee:6c:1d:54:c1:b4:ed:7f:f0:f3:a2:fd:da:55:ff:
93:d1:e1:76:b3:ff:89:ad:2d:ca:b2:3c:30:e3:2d:f7:b0:52:
a8:00:48:d5:2a:cb:05:c5:a1:f0:8e:56:06:e0:bf:7a:a6:62:
37:06:8d:52:31:0c:b8:a8:af:f8:24:19:ff:c1:2f:5d:bf:53:
7d:24:a9:10:e1:02:a9:87:4d:a0:9a:55:84:39:06:57:53:39:
7a:48:94:0b:a8:49:96:8c:75:fa:d7:78:25:5f:db:b4:32:76:
a7:14:9f:c8:b5:d0:44:27:bd:d5:e1:7c:cf:0c:f3:b0:50:ee:
53:92:0d:1a:a1:76:5c:5a:81:1a:0b:33:7a:76:37:9c:aa:7f:
62:ee:0b:96:49:7a:f3:3a:de:26:5e:e4:69:aa:1e:cc:fe:31:
fe:03:96:da:0a:f5:d3:5b:81:1d:ef:94:d2:ae:16:6f:64:46:
54:fe:94:db:bc:58:bd:bc:ec:4e:09:d4:26:84:ca:75:a6:b6:
44:0f:7a:96:aa:5d:44:1b:19:db:15:04:7b:f8:d0:c8:6f:e1:
8d:7b:b7:0a:df:55:ce:4b:22:32:a9:8a:32:e3:55:07:22:32:
cd:95:7c:b5:57:83:a1:56:e1:3f:b5:30:2b:5a:89:b1:76:78:
f5:50:f5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:09:55 2025 by rpki-client