Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft
File: B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft (raw, json)
Hash identifier: dI8WSMSB8ymhzxCgkmSumuuNOjNz8DJwuSgyWybbUFM=
Subject key identifier: 2C:B4:D1:E8:BA:95:43:AF:3D:67:B6:54:20:CA:92:D2:22:E7:9A:EE
Authority key identifier: 07:D3:A4:E6:62:F7:12:95:67:CD:18:A3:E1:9B:E7:BA:F2:81:A4:A3
Certificate issuer: /CN=07d3a4e662f7129567cd18a3e19be7baf281a4a3
Certificate serial: 0196549314B14926F7180ABA74F0B0B71941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft
Manifest number: 0207
Signing time: Sun 20 Apr 2025 19:00:47 +0000
Manifest this update: Sun 20 Apr 2025 19:00:47 +0000
Manifest next update: Mon 21 Apr 2025 19:00:47 +0000
Files and hashes: 1: B9Ok5mL3EpVnzRij4ZvnuvKBpKM.crl (hash: n1tg3rYk6/Dt6OdrPLSAB50J9zU/bTVHTpgA49Wd/4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:14:b1:49:26:f7:18:0a:ba:74:f0:b0:b7:19:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d3a4e662f7129567cd18a3e19be7baf281a4a3
Validity
Not Before: Apr 20 19:00:47 2025 GMT
Not After : Apr 21 19:00:47 2025 GMT
Subject: CN=2cb4d1e8ba9543af3d67b65420ca92d222e79aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:51:9d:e0:42:f9:58:60:36:ec:07:9c:9f:
5d:70:58:f2:d7:1a:73:0e:7a:51:ba:6a:6c:51:6b:
2f:61:6d:f7:b0:67:aa:dd:ed:9f:fe:02:51:9a:1d:
1b:56:69:f8:e5:07:da:e7:a6:11:64:80:5c:3c:54:
fb:4a:a0:57:90:60:60:96:b5:73:c4:58:93:73:5c:
a2:ed:6d:3e:49:0b:66:90:29:4a:df:d7:07:89:0b:
88:5f:72:f6:f2:89:5d:7a:59:38:c7:39:4b:e0:5a:
0a:98:82:42:c4:ab:a3:34:a7:10:aa:db:de:0d:6a:
88:cf:c0:90:e1:25:b7:79:b2:3d:c3:2a:5c:03:c3:
ac:31:72:d0:bd:98:2e:97:ce:6a:34:12:84:79:0d:
fd:07:2e:7b:9c:30:79:b9:8d:ca:a4:8c:9c:72:fc:
b2:b2:7c:8a:cb:00:6c:ad:f2:56:a5:27:ec:9f:64:
5e:62:01:74:d2:fd:dc:21:ff:5b:33:c8:77:7a:26:
47:71:76:39:bc:82:4c:b7:4f:b9:6a:7b:79:d8:c3:
6b:1e:b4:f2:df:7b:dc:e3:6b:58:70:66:03:b8:93:
7e:08:1b:7e:e4:31:fe:94:99:f7:47:6e:31:ed:99:
1f:55:0d:66:26:cb:44:b6:31:fb:d9:96:8e:bb:84:
1d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B4:D1:E8:BA:95:43:AF:3D:67:B6:54:20:CA:92:D2:22:E7:9A:EE
X509v3 Authority Key Identifier:
keyid:07:D3:A4:E6:62:F7:12:95:67:CD:18:A3:E1:9B:E7:BA:F2:81:A4:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fe:09:8e:39:d8:44:65:87:5e:1d:78:b7:f8:81:18:3c:51:
16:ea:61:e6:ed:4c:69:96:bd:f0:f8:fd:05:ac:f7:35:b5:06:
4c:46:d9:d7:d6:81:9f:07:7a:fd:d0:ac:c3:ba:30:e0:5a:3a:
04:7b:c6:ce:33:f8:73:64:ee:d0:e1:21:10:12:f0:9d:3b:67:
85:cd:6c:ff:98:55:28:9d:fc:8a:2b:c0:83:d4:21:9f:c6:8e:
cb:55:bc:67:57:cd:86:17:3b:1b:a7:dc:e2:02:ee:b0:90:82:
35:97:f3:af:bf:f4:40:9f:9a:9e:31:f3:80:52:58:e1:8b:b5:
5f:35:5e:7a:33:fe:4c:b6:a2:fe:dd:d1:0a:6c:68:09:86:7f:
95:a2:15:cb:ea:4a:f3:dd:ee:81:69:53:72:12:18:aa:f3:5e:
93:b6:07:c1:a9:15:7c:03:fc:f5:5a:d5:4e:83:1b:75:9d:b5:
45:74:74:87:08:9c:dd:58:a8:04:cf:7e:43:fa:3b:40:3f:1e:
90:98:c5:f0:32:f5:57:ba:e2:24:df:c6:f9:f7:92:04:ac:55:
9e:c6:aa:67:19:1d:e9:71:73:94:d0:67:ec:1e:ef:5a:0d:32:
5b:e4:a5:98:c1:60:56:a1:c4:f8:32:8d:07:6f:e6:5c:c9:84:
24:b2:80:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:59 2025 by rpki-client