Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
File: d6TN722YqQcT__52cRNId5pjKgo.mft (raw, json)
Hash identifier: ZsB00jqEAIhxsQ10BBaTL6VuzAq/f9Nq0h1W84GHcuI=
Subject key identifier: 66:05:1D:EC:6B:2A:C8:19:92:B5:7A:B4:E9:30:E7:96:73:18:B7:BF
Authority key identifier: 77:A4:CD:EF:6D:98:A9:07:13:FF:FE:76:71:13:48:77:9A:63:2A:0A
Certificate issuer: /CN=77a4cdef6d98a90713fffe76711348779a632a0a
Certificate serial: 01965380300987BCD08B24ED5EFEEE9F777E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6TN722YqQcT__52cRNId5pjKgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
Manifest number: 14F9
Signing time: Sun 20 Apr 2025 14:00:31 +0000
Manifest this update: Sun 20 Apr 2025 14:00:31 +0000
Manifest next update: Mon 21 Apr 2025 14:00:31 +0000
Files and hashes: 1: d6TN722YqQcT__52cRNId5pjKgo.crl (hash: KMdFdUCGjMfN54WC8dQUJaXXjmwSfICCSxM4QpdAcm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6TN722YqQcT__52cRNId5pjKgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:30:09:87:bc:d0:8b:24:ed:5e:fe:ee:9f:77:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a4cdef6d98a90713fffe76711348779a632a0a
Validity
Not Before: Apr 20 14:00:31 2025 GMT
Not After : Apr 21 14:00:31 2025 GMT
Subject: CN=66051dec6b2ac81992b57ab4e930e7967318b7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b8:03:a4:11:b2:2b:32:13:d0:56:4a:93:a0:
f3:40:fe:60:63:54:0f:1d:98:f0:fe:c9:b5:09:b6:
66:4f:eb:05:c7:14:3b:cf:53:eb:b7:b4:57:8d:08:
fe:75:7e:73:3a:9e:af:25:78:d3:91:f1:1f:22:18:
fd:79:e7:05:53:ad:b6:26:5d:b9:ab:fe:46:ca:2d:
df:e9:9a:cc:8a:9b:14:9e:6f:81:e0:4c:cb:fc:d1:
bb:9e:47:08:5d:f5:b8:35:dd:05:83:b5:75:15:70:
17:c1:d2:65:44:ec:02:94:c2:f2:e6:77:9f:e4:9c:
36:02:f6:06:8d:b6:86:b3:eb:c1:18:d5:a1:b4:c2:
26:da:cb:4b:9c:c2:6b:ad:d8:75:f7:20:44:8c:3b:
64:a6:4c:9f:2e:18:e8:a4:d6:66:7a:b7:2d:30:10:
34:10:1b:b0:d2:41:23:8a:fa:63:23:51:ad:b8:cb:
4b:a7:38:e5:f8:54:ed:ab:78:42:fe:6e:2c:fe:0d:
d7:c6:0f:94:43:0a:7c:ae:5f:0f:b7:2d:94:dd:6a:
f3:98:c5:a2:7b:bf:95:93:98:18:49:55:97:85:66:
f5:86:40:c3:f8:c0:2b:1e:25:dd:01:84:18:3e:6c:
89:1e:a1:39:7f:2b:b3:1e:f6:ee:c6:08:65:5e:da:
91:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:05:1D:EC:6B:2A:C8:19:92:B5:7A:B4:E9:30:E7:96:73:18:B7:BF
X509v3 Authority Key Identifier:
keyid:77:A4:CD:EF:6D:98:A9:07:13:FF:FE:76:71:13:48:77:9A:63:2A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6TN722YqQcT__52cRNId5pjKgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2b:2f:5f:04:dc:9a:7b:9c:71:98:dd:56:75:a8:07:eb:75:
fc:ec:62:0e:98:56:5d:8d:3a:83:ae:28:f6:26:b9:44:33:60:
71:0f:b0:b7:05:14:7d:1c:42:8d:7d:e2:1f:b9:ee:ec:d0:90:
2d:e0:d6:5c:ef:e2:d8:32:66:18:b1:51:2b:18:4b:0d:b6:82:
37:f1:15:91:86:e5:c6:1a:d2:7d:0d:8f:ae:3c:ca:4c:14:4c:
ba:16:16:38:17:3f:53:47:48:1e:60:e1:82:42:88:ae:60:75:
3b:13:9d:15:f0:53:73:e4:02:e2:40:e5:02:26:5f:0c:a0:88:
94:6e:ec:dd:c6:82:dc:4e:a5:0c:f2:10:16:01:55:15:d5:fa:
c7:f2:ee:4e:e8:56:40:13:66:63:3e:30:3e:50:e8:ea:54:03:
51:3d:d7:22:0a:e8:57:df:13:13:45:7e:b6:87:d4:51:14:df:
49:57:34:1f:ba:66:f2:61:44:e7:46:bb:b1:aa:24:f4:51:e8:
57:25:99:6f:1a:0c:5a:50:14:67:57:67:57:f6:ff:ca:e6:16:
03:bc:01:4f:06:9b:4f:b5:8a:dd:e7:1f:d3:f8:af:35:d4:5d:
ac:0d:91:0f:05:31:d1:5b:f0:de:f3:a4:d4:59:31:c2:e4:be:
31:e8:a4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:56:49 2025 by rpki-client