Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
File: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft (raw, json)
Hash identifier: wYmgOsHdXa88C06pC+hZv5cW/XLnlXXan1N1as+05ZA=
Subject key identifier: 16:B1:68:51:E2:08:39:32:63:E9:64:0A:8E:37:6C:99:64:F5:58:3F
Authority key identifier: F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
Certificate issuer: /CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Certificate serial: 0196C64C5825566A4B6EA793C57FE04F8667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
Manifest number: 22
Signing time: Mon 12 May 2025 21:00:14 +0000
Manifest this update: Mon 12 May 2025 21:00:14 +0000
Manifest next update: Tue 13 May 2025 21:00:14 +0000
Files and hashes: 1: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl (hash: pNTh+yBli3lns1i33hsWtAVPYdzNEJ2DCB94S6kCBF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:58:25:56:6a:4b:6e:a7:93:c5:7f:e0:4f:86:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Validity
Not Before: May 12 21:00:14 2025 GMT
Not After : May 13 21:00:14 2025 GMT
Subject: CN=16b16851e208393263e9640a8e376c9964f5583f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:77:87:23:45:ca:6b:6a:e6:83:44:50:6f:
7b:8c:c1:e2:be:7c:0a:db:ec:36:80:ab:85:04:92:
5b:94:a0:71:8b:b0:f9:40:36:bb:9c:fd:d0:d9:a6:
10:a6:33:7c:39:0d:18:d8:f1:50:46:cd:91:b3:95:
d0:e6:c9:9b:20:29:9c:7d:6a:a3:54:82:67:28:5e:
aa:1b:2c:9a:20:6d:cb:af:cb:78:37:34:c4:a9:1d:
68:b2:24:db:98:85:16:af:5a:c8:a9:55:13:2c:58:
2a:3f:39:44:a6:3e:a4:01:6b:3b:e5:c5:59:dc:40:
11:3e:38:15:4f:ea:6e:d5:9e:19:1a:a9:00:55:ef:
3c:e5:71:0a:c5:f0:f3:40:29:81:3a:d6:13:0b:05:
27:89:3c:25:85:52:47:c5:de:4e:82:d7:0c:2d:b0:
60:12:57:6d:6b:b8:41:65:29:3c:c6:38:41:58:48:
f4:12:50:c8:bc:90:39:40:5f:03:98:96:ee:4c:e0:
46:41:94:24:28:4d:0d:bc:f2:b0:33:48:38:76:7e:
48:01:2b:d4:f4:af:b7:1e:76:5a:2c:e7:aa:8d:72:
fb:6a:53:02:fa:d0:2b:10:2c:78:7c:64:9a:26:ac:
46:11:0d:9b:b6:c9:c6:a6:65:2e:aa:25:f0:20:04:
a5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B1:68:51:E2:08:39:32:63:E9:64:0A:8E:37:6C:99:64:F5:58:3F
X509v3 Authority Key Identifier:
keyid:F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:06:d9:50:74:28:34:c3:66:95:a9:05:f3:2e:79:23:f9:4a:
03:72:69:0a:d9:21:cd:cb:f3:ed:aa:ab:c1:81:85:d5:9f:a7:
6c:fa:53:9a:7c:35:a6:62:e3:b3:3d:7e:f2:7a:91:0b:20:c7:
cd:d8:f7:8e:62:71:7f:a4:96:ab:c0:48:7f:03:fe:27:fc:60:
d3:6b:20:e6:66:70:5a:44:f4:02:57:d8:c0:e1:6a:61:e2:7b:
41:ff:71:59:b5:6d:e0:21:7d:ad:7a:4a:9b:1f:07:be:b0:a9:
4e:8c:e0:79:78:76:b0:37:f6:a6:53:0b:61:c7:57:85:21:19:
45:5e:6d:e6:11:cb:b9:e3:68:e8:7d:6e:72:51:48:f6:93:f9:
07:4a:f7:5d:4d:53:74:8a:9f:3a:be:4d:52:e4:e7:5b:33:e6:
1e:1c:e1:ac:b7:15:4c:47:0b:53:33:ee:7f:97:69:48:7b:a2:
ee:15:ab:9c:52:41:41:19:a2:c5:f6:ab:87:84:94:9b:40:5c:
2d:2c:82:16:80:70:2b:c4:bc:22:6d:5a:ce:9c:57:2d:16:b2:
f8:c0:26:ef:a8:47:e3:a4:f7:40:3c:ce:f8:16:e6:5c:a7:d6:
70:63:00:f4:b2:86:c6:0d:22:1e:dc:c9:7c:f6:3a:a8:31:da:
dc:2b:2a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:33:20 2025 by rpki-client