Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
File: d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft (raw, json)
Hash identifier: n89Ee705LkCePcEaYc+/rTBr+DKfqx7MQh4+WQbiEd0=
Subject key identifier: E4:D7:3F:66:F6:BA:C4:80:DF:A3:CC:95:3A:FA:4F:38:10:08:D6:19
Authority key identifier: 77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C
Certificate issuer: /CN=77fe97184da82a36d7ebe3f85840315b8ab2214c
Certificate serial: 01964FDAE5B0D59FF0A9E0BFFEBB71D1ABC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
Manifest number: 0196
Signing time: Sat 19 Apr 2025 21:01:07 +0000
Manifest this update: Sat 19 Apr 2025 21:01:07 +0000
Manifest next update: Sun 20 Apr 2025 21:01:07 +0000
Files and hashes: 1: d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl (hash: JlnZxPMQIm8eYrssPelw1kSClvO64yN65v7Ui3cXBrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:e5:b0:d5:9f:f0:a9:e0:bf:fe:bb:71:d1:ab:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fe97184da82a36d7ebe3f85840315b8ab2214c
Validity
Not Before: Apr 19 21:01:07 2025 GMT
Not After : Apr 20 21:01:07 2025 GMT
Subject: CN=e4d73f66f6bac480dfa3cc953afa4f381008d619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6b:3a:84:bd:4f:4d:1c:0a:a5:30:d0:fe:b1:
82:69:6b:d5:40:11:e6:ea:0c:95:15:d5:bb:1b:db:
6c:ad:58:94:90:06:40:c1:57:db:d7:ff:8a:1a:0b:
0a:aa:fb:30:2d:d4:fc:fb:14:24:8a:c4:30:9e:71:
56:a2:29:d1:34:36:8b:4f:cc:44:1f:f3:3e:99:b9:
10:79:c7:a3:50:5d:bc:96:30:81:a0:8b:ea:da:20:
e0:cd:3d:59:b0:77:8b:12:fb:6a:54:81:c2:cf:34:
d0:c1:d4:a5:4f:f1:fc:b4:15:e9:02:48:80:69:59:
5d:35:d4:5c:70:fa:1f:3b:c6:c8:30:63:4b:c8:17:
93:5b:1d:52:3f:19:07:c9:af:2d:f2:6c:b9:80:82:
45:f8:b2:6b:dd:37:ed:64:7a:a0:44:df:21:50:4b:
73:e3:1d:75:9a:83:d5:4c:c4:3e:9f:69:d9:e5:3d:
64:96:e4:a3:a5:17:53:9c:37:9e:b9:14:21:ba:9d:
b1:ab:37:0f:70:ad:a2:2e:42:22:50:56:f7:aa:99:
3e:28:a6:a0:85:9e:47:d7:ee:bd:99:5a:63:22:c9:
59:24:78:a3:6f:a1:4d:a4:e1:de:d8:df:1d:1f:3f:
2a:52:a7:24:95:28:0b:29:d5:65:87:a2:a4:5e:ce:
a5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D7:3F:66:F6:BA:C4:80:DF:A3:CC:95:3A:FA:4F:38:10:08:D6:19
X509v3 Authority Key Identifier:
keyid:77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e4:24:3a:5a:e6:7b:c0:e1:52:86:7e:aa:01:d9:90:41:47:
9a:e7:0f:55:82:e0:4c:9d:1a:3c:31:51:28:88:61:ae:1d:88:
2f:18:14:49:d4:41:d0:35:d9:81:5c:dc:f0:d1:ff:05:78:8c:
77:97:b7:c9:23:32:fc:8a:58:08:49:b1:8b:d0:55:97:6c:9d:
d5:8b:0a:97:05:1d:00:58:2c:67:11:71:a8:b0:38:2f:4b:f7:
66:8e:56:a3:03:81:95:c3:da:84:66:39:fe:c9:aa:bb:09:fa:
d8:84:cb:d6:16:1c:69:46:50:ff:f4:54:98:84:c5:6c:ce:27:
35:7a:bb:7c:a2:cf:be:f8:19:42:62:0f:69:c4:2b:41:fc:7f:
6a:4b:06:1d:57:ce:e0:3e:1a:9d:80:e7:cb:4c:d8:e3:e8:bf:
29:e4:bf:6a:12:31:df:3b:36:e6:1c:64:f6:33:93:f8:54:cc:
a3:f3:d2:c0:94:8a:7c:93:31:67:71:d7:98:01:d4:80:18:d2:
d6:fa:b3:d2:45:cd:e1:fc:5d:62:b8:f5:51:de:b6:f9:ee:6d:
c3:1d:80:4d:f4:7b:3b:63:11:95:38:dc:58:ba:57:58:a7:ea:
91:c7:c1:c1:66:66:71:ce:ff:1e:bc:56:23:ec:de:78:1b:e9:
3c:d6:c8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:14 2025 by rpki-client