Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
File: nUxyfODk4Wasa-ME__JRgW1RpEI.mft (raw, json)
Hash identifier: WkeD7FWKpntPk6AhDmC2vAqu1Ftz2Hcn2DHqe35eYyg=
Subject key identifier: 98:F5:56:48:1C:36:1A:BA:CF:54:B4:9A:E1:E5:21:A0:BE:8C:B6:A7
Authority key identifier: 9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
Certificate issuer: /CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Certificate serial: 01965CF0EC4ED20D5C8F0B640D1268D28EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
Manifest number: 14FF
Signing time: Tue 22 Apr 2025 10:00:15 +0000
Manifest this update: Tue 22 Apr 2025 10:00:15 +0000
Manifest next update: Wed 23 Apr 2025 10:00:15 +0000
Files and hashes: 1: nUxyfODk4Wasa-ME__JRgW1RpEI.crl (hash: 2zgkukGsCBfmU3ay0ZNBSsGYN0wW3dj1hqycNTThUEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f0:ec:4e:d2:0d:5c:8f:0b:64:0d:12:68:d2:8e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Validity
Not Before: Apr 22 10:00:15 2025 GMT
Not After : Apr 23 10:00:15 2025 GMT
Subject: CN=98f556481c361abacf54b49ae1e521a0be8cb6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3b:43:c5:62:4a:d1:dd:ef:0c:8f:d8:51:e9:
72:c5:67:e9:33:c9:00:f8:82:7d:30:25:bb:fd:63:
5e:46:b7:c7:27:19:94:ed:90:60:ca:d4:78:59:d6:
fc:e1:8c:3c:db:20:7e:c9:a4:9d:c1:49:75:3b:71:
88:0c:d4:99:b7:e7:cb:49:f3:60:97:9d:85:39:24:
f4:af:56:d3:1e:90:23:a5:d2:41:90:ea:4e:98:fd:
b9:03:78:2f:df:4d:76:a2:81:13:9b:36:eb:1f:d9:
a7:dc:e6:97:b6:1a:39:8f:13:d4:49:14:4c:c2:63:
87:a0:97:f8:87:86:ac:89:83:1a:97:ba:cd:f6:3b:
49:30:55:57:a1:3a:09:be:90:9f:15:ee:91:96:48:
a7:c3:5d:0c:fc:66:7b:a2:94:b5:be:42:ca:ae:7d:
47:a8:ff:13:1c:80:1a:d9:e9:8b:bc:79:f5:48:d2:
4e:8f:de:24:b6:07:d2:ae:a9:ad:54:1a:5a:2a:b5:
57:dd:78:fe:cb:02:0e:af:96:c1:24:c3:b8:2b:0a:
f9:bd:d2:46:e0:1a:3f:36:89:d8:cc:e6:3f:29:76:
67:9b:6c:82:a6:80:75:03:7e:d6:74:5d:8a:f3:3b:
e9:e4:03:80:19:d2:07:ad:32:8a:37:ec:4a:05:1f:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F5:56:48:1C:36:1A:BA:CF:54:B4:9A:E1:E5:21:A0:BE:8C:B6:A7
X509v3 Authority Key Identifier:
keyid:9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:51:9f:a7:33:b9:c3:8e:91:aa:2a:69:ea:85:f7:4c:26:77:
af:c2:3d:09:8d:73:89:f8:24:6b:32:22:8d:5f:42:c6:fe:e6:
74:42:31:f6:84:72:0b:e0:b5:d5:82:41:56:40:cd:03:a4:6a:
60:af:75:9e:41:1d:4f:4c:2f:cd:f9:ec:e8:c5:ab:84:50:42:
25:e8:03:3d:53:2f:61:7e:f1:56:45:62:eb:7f:03:75:7e:a2:
d9:21:81:c2:0e:51:9b:89:12:d1:7f:1e:f5:1c:ac:93:59:c8:
33:72:68:74:cc:08:90:6c:4a:f4:ca:67:c6:6b:d1:58:47:ea:
b8:21:e2:2f:4d:4a:bf:06:50:ca:ef:78:7e:b4:4c:8d:89:5f:
69:9b:cc:25:d0:7e:c5:89:da:27:83:c1:53:45:a8:71:c2:96:
1f:20:64:90:f4:47:7e:62:f9:fd:04:82:78:8c:99:d4:cf:a7:
80:9a:ca:c8:a9:cf:ef:42:9e:29:4d:d8:25:b6:74:81:7b:bf:
22:ea:9f:a2:11:29:47:e3:66:21:1a:10:4f:4d:c3:d9:36:09:
9c:13:b0:5b:ff:54:09:45:bb:d0:ac:5d:da:f4:4a:eb:40:24:
da:b6:10:19:4a:6b:e9:63:19:a5:9b:30:f8:08:cf:c2:a0:28:
48:7b:2a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:22:23 2025 by rpki-client