Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
File: dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft (raw, json)
Hash identifier: ApMcu7bA9yz42nYdTVuPEd71iHMxwZGpyIMQ0c49FbI=
Subject key identifier: 9F:2B:8A:BA:80:8E:9D:F9:3A:D7:03:38:1F:99:3A:C5:AD:7A:BF:C8
Authority key identifier: 76:3D:7A:55:35:A5:24:9E:97:A7:50:64:66:93:99:A9:3C:46:CC:8E
Certificate issuer: /CN=763d7a5535a5249e97a75064669399a93c46cc8e
Certificate serial: 01964A0FC4A50E6E3D5C7297B5B6976BA063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
Manifest number: 0933
Signing time: Fri 18 Apr 2025 18:01:09 +0000
Manifest this update: Fri 18 Apr 2025 18:01:09 +0000
Manifest next update: Sat 19 Apr 2025 18:01:09 +0000
Files and hashes: 1: dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl (hash: zNXnYK3vt/wIJ89+EvUn3Da37B3oadsMlYfkmExv8is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:c4:a5:0e:6e:3d:5c:72:97:b5:b6:97:6b:a0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=763d7a5535a5249e97a75064669399a93c46cc8e
Validity
Not Before: Apr 18 18:01:09 2025 GMT
Not After : Apr 19 18:01:09 2025 GMT
Subject: CN=9f2b8aba808e9df93ad703381f993ac5ad7abfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:96:77:ec:5c:1c:ec:24:80:86:11:77:66:
3b:b8:b9:8d:44:1c:5e:3a:52:7a:d0:3a:71:56:63:
da:65:c2:21:08:c1:4f:5c:e7:b4:48:f8:e1:54:28:
65:5a:a2:6f:bc:47:30:90:4c:16:85:44:00:5d:50:
8d:5d:4f:5a:c1:ad:71:db:e2:d5:fb:0a:b5:1d:09:
ac:8a:b3:bd:c1:5f:d3:7e:39:1e:0d:02:92:22:d9:
ae:20:d2:b5:ec:90:18:28:6c:05:4f:db:2e:d2:83:
23:28:78:7f:6d:ef:18:c8:03:e9:b2:2a:8a:9c:4e:
60:17:93:1f:35:fc:6c:02:e0:44:37:59:86:bd:5c:
fc:03:90:b9:13:49:79:d2:87:f9:b3:f9:81:48:03:
b3:74:6c:fa:43:81:31:cd:6b:fa:13:7f:d8:b7:d6:
54:1c:a1:fb:62:51:c5:63:0e:3f:29:52:6e:d1:19:
34:18:e1:de:ba:9d:a8:f2:f8:13:86:68:4f:d1:59:
a6:ba:df:78:20:74:90:a1:03:89:b5:d2:9c:ee:07:
5a:9f:57:17:5a:c1:27:d6:57:dd:8b:31:a7:c8:13:
60:cc:30:36:4e:f3:b3:6b:a9:9f:b4:a6:61:43:a6:
1b:9c:7d:6c:93:ac:04:28:8a:88:65:ae:0d:21:51:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2B:8A:BA:80:8E:9D:F9:3A:D7:03:38:1F:99:3A:C5:AD:7A:BF:C8
X509v3 Authority Key Identifier:
keyid:76:3D:7A:55:35:A5:24:9E:97:A7:50:64:66:93:99:A9:3C:46:CC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f4:3a:2e:6e:bc:73:17:39:76:9d:2f:e5:3a:8a:5f:6d:51:
b5:d7:8c:0b:1d:97:ce:24:e8:3e:0c:dd:7d:e0:28:a5:ec:66:
45:73:95:7d:c9:e0:2d:63:18:e5:45:6d:79:28:74:2f:8d:52:
0b:22:a5:d2:27:78:16:d5:68:96:fa:81:5a:13:b0:09:01:ab:
e0:b8:9b:d3:49:92:58:9f:a1:8f:62:13:6b:30:7b:31:b5:84:
80:a0:c5:c3:02:5d:cb:c3:77:c7:db:6d:c5:81:20:3c:82:a6:
a7:ad:26:9e:48:1b:7b:73:d6:47:34:c1:59:ca:7e:43:3c:97:
4e:7b:8d:8e:b0:dc:53:03:b1:94:e4:28:8b:0e:62:f8:f8:d5:
f8:c3:52:87:27:de:ac:e1:14:f3:87:17:77:86:34:f8:61:be:
3d:5e:ed:2e:30:98:3b:41:10:05:54:a3:8b:f4:8c:bd:70:f8:
a8:f4:58:25:b0:c8:aa:a6:ef:35:76:d1:a2:2d:95:8f:bd:fc:
c5:ff:c4:ff:16:d4:76:70:88:52:35:2c:ff:47:13:53:25:48:
6c:87:30:da:9d:c6:1b:3f:cf:da:21:cd:05:c1:ee:c7:0c:b1:
86:29:c3:f2:30:5b:a5:1f:02:e8:00:3d:df:c9:89:cd:e1:03:
44:2d:d7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:40:25 2025 by rpki-client