Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
File: B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft (raw, json)
Hash identifier: GBsS/D0wzOyL6XYOam6+cZloXEkV1kyvU3BLkwWkWpE=
Subject key identifier: 12:E3:4F:25:FB:3F:D2:D0:60:F4:C6:9B:DB:DF:2D:F8:4C:A6:2F:7D
Authority key identifier: 07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54
Certificate issuer: /CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
Certificate serial: 01965BDEB3B591B86EBD05856F83AE9CE852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
Manifest number: 14FF
Signing time: Tue 22 Apr 2025 05:00:43 +0000
Manifest this update: Tue 22 Apr 2025 05:00:43 +0000
Manifest next update: Wed 23 Apr 2025 05:00:43 +0000
Files and hashes: 1: B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl (hash: XDD9hpViNTS6d4nj7leuqCD1RDym04hhMghNMbpLbTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:b3:b5:91:b8:6e:bd:05:85:6f:83:ae:9c:e8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
Validity
Not Before: Apr 22 05:00:43 2025 GMT
Not After : Apr 23 05:00:43 2025 GMT
Subject: CN=12e34f25fb3fd2d060f4c69bdbdf2df84ca62f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:bd:62:d8:45:db:2c:0c:ee:47:6d:61:a1:
12:a8:7b:75:c1:41:a2:a6:81:f6:6a:56:7d:9c:d6:
33:4f:7f:a8:a1:25:44:0a:76:6f:23:24:51:63:b3:
4d:d4:ff:45:82:71:bf:c3:0c:3f:eb:fb:f2:24:14:
1f:b5:10:02:fc:44:38:6c:5f:a4:a1:49:ab:71:da:
e6:8a:8f:f0:8b:1b:cb:38:43:f7:76:7d:d9:5c:c7:
c4:46:d3:08:3e:fe:b2:8c:43:d2:9a:ab:45:2d:d3:
f2:93:23:0b:79:7a:01:9a:e7:c9:c5:32:ea:b7:6a:
ee:99:c2:fc:bf:1e:11:47:fe:8e:75:10:9a:34:cf:
c0:90:cb:ef:13:95:d6:44:14:be:78:6d:b1:39:53:
9d:ae:1e:49:06:d3:a3:18:2a:7d:41:fe:69:60:37:
f9:06:24:ee:ce:44:85:b4:a0:cd:f7:dd:14:ca:b1:
45:11:1d:84:60:13:1f:06:8c:c2:84:5f:95:2b:9f:
a3:36:82:e6:67:dc:76:35:c4:12:26:e0:9c:ce:fc:
76:68:49:58:fb:6b:aa:58:d5:1f:2b:20:22:46:e0:
ad:74:c5:0e:e3:c0:3c:5c:19:2b:ee:dc:52:96:0f:
eb:73:fa:ae:f2:ab:1f:18:db:69:85:e6:d2:05:1c:
b9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E3:4F:25:FB:3F:D2:D0:60:F4:C6:9B:DB:DF:2D:F8:4C:A6:2F:7D
X509v3 Authority Key Identifier:
keyid:07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2e:1a:e6:fa:5e:6f:77:36:1f:e9:22:98:1f:6c:e8:a2:b6:
49:fe:51:c2:07:b4:8c:e4:8b:d2:95:bf:e4:43:0c:52:07:9f:
52:f0:1f:f8:80:d5:ea:3f:53:c1:69:1c:27:43:51:ed:97:46:
22:b2:f8:74:21:c6:1d:ae:e6:b8:23:ee:0a:90:e8:1f:b7:07:
21:7c:24:da:f2:b3:8e:9f:07:96:f7:ab:29:f2:db:2b:a8:b5:
b3:e4:34:28:20:ce:06:25:44:e5:7e:aa:8b:9a:fe:0d:0a:94:
7d:81:8c:db:5b:6f:e4:8a:7b:84:60:ac:d6:f2:f0:f9:de:cb:
92:f9:79:59:94:e5:0f:0a:43:80:e0:b3:9a:26:03:b0:18:e8:
47:c2:cf:ad:75:5a:92:65:86:c7:22:78:4f:7e:94:07:28:4c:
33:b2:7e:d1:32:52:37:1d:15:31:8d:8c:92:d8:5d:82:0f:c5:
03:9d:f7:b8:16:1d:ad:7f:15:8d:23:4c:55:63:b1:5b:10:33:
a3:67:bb:15:e0:54:4f:de:03:69:bf:6d:39:b4:fb:99:54:e4:
fe:f7:ce:b7:eb:8c:6f:be:79:2a:b1:b2:08:f0:1e:77:48:31:
91:85:00:72:bb:f1:86:50:76:c9:c6:e5:d5:b0:2f:3d:7a:49:
c6:7c:2b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:25:28 2025 by rpki-client