Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
File: SS0kreN6IjOTKECddX1H-XlDt6A.mft (raw, json)
Hash identifier: 16ehFrnCY6e1hhmWo5zMz7KsZNJ0osOBM7XIXD08p10=
Subject key identifier: 77:FA:5E:32:07:CF:D7:F0:BB:AC:A8:3A:BF:A4:4B:41:56:7F:3A:9B
Authority key identifier: 49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
Certificate issuer: /CN=492d24ade37a22339328409d757d47f97943b7a0
Certificate serial: 019646A0383CF5237DFD616F4DB704C0FCEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
Manifest number: 0BF1
Signing time: Fri 18 Apr 2025 02:00:27 +0000
Manifest this update: Fri 18 Apr 2025 02:00:27 +0000
Manifest next update: Sat 19 Apr 2025 02:00:27 +0000
Files and hashes: 1: SS0kreN6IjOTKECddX1H-XlDt6A.crl (hash: 4Q9NthsrzQqyf0Zknvkjy4PzKyIhSKT+9Dno0TkDATk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:38:3c:f5:23:7d:fd:61:6f:4d:b7:04:c0:fc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492d24ade37a22339328409d757d47f97943b7a0
Validity
Not Before: Apr 18 02:00:27 2025 GMT
Not After : Apr 19 02:00:27 2025 GMT
Subject: CN=77fa5e3207cfd7f0bbaca83abfa44b41567f3a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:24:5b:a2:71:11:84:9e:e2:5b:17:9c:43:
88:ec:c2:43:e3:1f:00:e7:2b:99:66:30:b8:48:3e:
00:f3:03:33:c5:01:81:97:78:67:1e:e4:b1:01:56:
0c:7b:97:58:11:c4:b5:a1:76:95:4f:bc:d8:76:94:
31:dc:ed:24:d3:75:8c:58:af:46:42:2f:ad:fb:19:
a4:8f:bf:fc:8a:9c:c0:3c:89:36:a7:c3:8b:05:a7:
90:45:83:c8:bd:08:80:f6:12:c2:1f:97:38:b1:56:
ff:f4:ed:d0:46:a1:1b:eb:ef:6f:58:07:87:d9:09:
1a:16:af:48:ea:57:7e:59:45:38:da:e1:c5:16:86:
6d:f6:9c:0f:f8:b3:e1:84:d1:c7:7d:66:e4:bc:37:
b3:86:ca:4f:c7:76:56:c1:a0:0a:3d:89:f8:61:3a:
12:9c:80:4e:fa:59:fc:66:ed:bd:55:db:ab:d3:46:
e7:74:6f:64:e9:95:71:c8:43:df:4d:08:3d:33:19:
d6:9b:23:44:d3:8b:89:f5:44:60:ce:f5:ce:e3:03:
f8:cb:bb:82:18:9a:54:e1:a9:6a:7c:66:48:16:73:
9e:cf:98:8b:6c:44:6b:bf:8e:e1:0c:2d:1c:fe:f5:
95:c1:e5:a0:12:a8:26:5c:c3:c0:d7:ac:ae:f4:e1:
c6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FA:5E:32:07:CF:D7:F0:BB:AC:A8:3A:BF:A4:4B:41:56:7F:3A:9B
X509v3 Authority Key Identifier:
keyid:49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:ca:12:eb:66:9f:5f:5e:99:5e:19:43:7e:77:63:06:1a:05:
5c:0a:28:39:ea:99:7b:1c:96:df:2e:5b:81:79:1d:04:e8:58:
31:d9:ea:77:13:c0:c6:0a:be:5c:28:9b:e4:82:40:d4:1a:3a:
04:c0:a8:6d:e0:50:70:53:14:fb:f6:e1:02:a3:7c:18:95:d5:
d1:39:98:70:17:56:9d:a7:89:08:91:fd:f8:f8:d8:65:2c:9b:
4b:28:82:02:01:8d:95:48:4d:97:83:e4:b1:e5:d5:2b:12:15:
dc:52:07:65:4f:19:9a:3e:ce:a5:8d:cd:ee:b9:d3:f3:e0:2c:
ae:00:75:a7:3e:15:a7:97:2d:e0:d9:2d:fd:45:6b:94:77:3b:
63:c0:c0:9f:68:67:22:b1:a4:52:ae:1f:84:35:88:5f:6c:2b:
ca:cb:b1:d0:da:e9:89:be:4e:c7:4d:a4:44:8e:54:c6:68:91:
f4:e2:b5:1e:f2:f3:20:ac:72:db:6d:18:dc:76:99:4e:6b:75:
48:13:dc:8a:ef:87:d3:e8:a2:65:3e:2c:f1:17:f9:f3:d6:cb:
45:39:23:04:db:39:d2:f2:45:39:20:92:33:9d:90:6e:f1:65:
60:63:94:b8:26:41:ca:22:a5:51:25:5d:49:a7:fe:1f:94:6c:
36:05:97:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:35:03 2025 by rpki-client