Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
File: d11030Q8uAUXzkFQ3OImYpQPHXw.mft (raw, json)
Hash identifier: 5EUGiBLg9DHZ/6Zfwr9vSvK3No8NtmR5nWy/O819jF4=
Subject key identifier: 9A:FB:91:8A:BE:1C:BA:B9:C8:25:D0:EC:89:A1:5E:8D:F9:9B:EB:C9
Authority key identifier: 77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C
Certificate issuer: /CN=775d74df443cb80517ce4150dce22662940f1d7c
Certificate serial: 01964A0F6E9785F7FE447C58FA173339AF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
Manifest number: 0933
Signing time: Fri 18 Apr 2025 18:00:47 +0000
Manifest this update: Fri 18 Apr 2025 18:00:47 +0000
Manifest next update: Sat 19 Apr 2025 18:00:47 +0000
Files and hashes: 1: d11030Q8uAUXzkFQ3OImYpQPHXw.crl (hash: XbT71Bqqfw28XlMTHaDa9HwY/cADal9qS1JCWGD0C4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:6e:97:85:f7:fe:44:7c:58:fa:17:33:39:af:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775d74df443cb80517ce4150dce22662940f1d7c
Validity
Not Before: Apr 18 18:00:47 2025 GMT
Not After : Apr 19 18:00:47 2025 GMT
Subject: CN=9afb918abe1cbab9c825d0ec89a15e8df99bebc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:00:f4:64:c9:2f:7d:dd:ad:e4:90:bf:30:07:
26:02:b0:6d:53:31:03:5b:7e:13:97:64:a7:6c:b5:
f2:e7:3d:c4:7b:70:ed:ff:9a:73:17:b2:94:41:dc:
5d:85:50:77:b0:b8:49:6e:f3:fc:32:7c:f2:0e:ad:
00:54:45:fb:a9:8d:ef:6e:ff:4e:1b:fe:65:ee:13:
26:c0:23:c9:8d:bc:11:0c:9b:ee:d5:62:f2:41:45:
5d:4f:47:ed:d6:8a:7b:a0:25:ea:ae:45:f9:78:03:
4b:d0:a6:8e:3b:88:9c:5d:24:03:80:20:c9:1c:4f:
00:57:3e:e1:7a:06:b4:38:12:16:52:ba:25:13:59:
7c:8b:71:7d:b8:fb:77:25:f9:e5:58:eb:37:cd:3c:
1e:c3:03:23:bf:22:93:55:8a:c0:48:3f:5d:57:71:
07:d8:d4:3c:62:23:9c:8b:d5:a2:0c:f3:7d:8c:d4:
bb:6d:3a:6b:80:a7:93:e2:5f:66:c8:b3:cf:11:40:
ad:73:64:98:cb:8e:b6:0d:90:73:a7:34:81:e8:59:
75:8a:61:c0:50:05:6c:65:b2:90:ec:ab:10:e1:c6:
a2:9f:cc:a7:cf:49:fb:ae:c2:5b:7f:09:e8:c0:af:
7f:b3:fb:4e:96:14:1d:d5:bb:a3:c9:4d:97:29:26:
13:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FB:91:8A:BE:1C:BA:B9:C8:25:D0:EC:89:A1:5E:8D:F9:9B:EB:C9
X509v3 Authority Key Identifier:
keyid:77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:12:3e:33:14:3d:78:d7:50:da:3d:fa:65:71:0f:cf:27:fd:
dd:2c:09:f1:e0:af:6d:4d:eb:be:58:00:7c:fb:d5:1e:0c:0a:
b0:f8:9b:58:da:13:df:b6:c1:2e:67:25:14:9d:88:3a:87:f5:
f3:8c:30:0a:17:04:c2:46:c5:5b:23:e1:df:29:27:be:3e:02:
4a:4c:a8:f2:fb:39:dc:c6:51:91:39:62:16:df:2f:0f:45:b1:
e8:38:31:0d:21:88:ff:8b:29:5c:24:28:b8:92:94:69:52:4f:
97:4e:07:81:ae:64:83:32:7d:67:ea:f9:72:ce:aa:91:e1:63:
2b:7f:6c:24:b5:1d:70:84:54:4f:db:16:7d:6c:a2:95:1e:2b:
ea:b2:7e:ee:22:05:97:3c:b9:1e:f8:d8:78:90:23:1a:e3:2d:
bb:b0:92:2b:4e:00:d4:01:cc:a4:88:16:c5:16:83:dd:cf:da:
3b:ac:15:98:d3:14:c5:4a:16:24:77:25:60:6b:75:21:8d:c3:
13:37:c4:d1:4a:0c:ee:2f:d7:6d:ac:ef:ac:7b:b3:10:b0:ff:
2f:63:b4:95:97:fc:2a:cf:77:b5:77:09:e2:55:ac:05:2b:6c:
c4:a7:ff:38:cb:e0:3d:8a:e1:40:bf:84:f3:c4:53:e1:8b:66:
c0:b5:f0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:11 2025 by rpki-client