Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier: 72yUI0oVbRKsS1kISffw37Jd6727yWDxMvN2px4BoaE=
Subject key identifier: CF:C8:D9:15:C2:5E:83:0F:59:60:E0:94:B3:D9:72:C3:AC:F9:B6:4D
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial: 0196A1D2926C6FED7F54F463AFC51CCB673E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 19:00:53 +0000
Manifest this update: Mon 05 May 2025 19:00:53 +0000
Manifest next update: Tue 06 May 2025 19:00:53 +0000
Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: PM3kmoiLn8zDfxPLv6wkdE5EvPHIliDgQvP0kXWk7YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:92:6c:6f:ed:7f:54:f4:63:af:c5:1c:cb:67:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Validity
Not Before: May 5 19:00:53 2025 GMT
Not After : May 6 19:00:53 2025 GMT
Subject: CN=cfc8d915c25e830f5960e094b3d972c3acf9b64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:83:36:62:db:fd:0a:1a:95:75:35:ff:a4:
36:dc:d2:8d:d2:b4:a5:52:c7:80:1c:0f:d9:ab:95:
d0:6a:7f:a7:79:21:ce:ef:c4:a0:2f:ab:c8:f8:7a:
af:73:bc:ad:59:0f:d8:c7:f4:6b:2c:de:64:93:c5:
44:a0:e5:35:ce:80:b3:20:bd:51:70:1f:f5:68:62:
18:96:bb:6c:61:fa:c5:56:26:e5:86:da:60:7c:15:
1a:4b:32:57:cf:dc:4d:5e:9e:92:11:e7:ed:62:76:
04:e8:b8:f1:f1:83:79:60:0b:77:10:d2:74:b3:f4:
3e:5d:b7:c8:6a:2b:5c:96:4f:5e:22:b5:3d:d5:50:
81:bd:ea:33:b7:7b:3f:e5:e5:05:27:77:02:61:06:
cb:dc:bd:52:90:76:71:81:d6:a0:9d:20:11:a7:da:
42:d8:93:a4:f0:f0:73:23:b3:e6:9c:26:28:89:ef:
fe:bc:6f:28:bc:eb:44:3c:1a:9c:b5:6d:78:93:a1:
84:d0:16:28:0a:39:d9:12:73:32:9b:a1:2e:b6:82:
d0:aa:05:99:58:58:bd:b5:8c:bf:a2:f1:02:5d:65:
7c:0d:a2:eb:8f:32:3b:cb:28:ee:25:a4:95:d2:e5:
67:fc:f0:c3:72:34:fd:e0:cb:94:d9:3d:3a:13:a8:
69:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C8:D9:15:C2:5E:83:0F:59:60:E0:94:B3:D9:72:C3:AC:F9:B6:4D
X509v3 Authority Key Identifier:
keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:57:a9:cd:15:fe:41:56:55:2f:54:f0:66:01:7e:cf:18:0a:
37:95:c2:27:c8:b1:83:21:b1:de:65:40:4e:83:35:70:80:9e:
23:2a:cb:27:21:25:0c:bf:e8:a5:96:71:5c:b1:cc:2a:4d:3b:
0b:94:18:3c:bb:ea:31:36:27:82:81:2e:3d:7f:5f:cf:f2:5d:
27:14:7f:70:3d:a2:8d:24:1a:f9:f7:01:fd:6a:a6:2d:1c:29:
be:5b:b0:52:81:da:61:1c:28:30:30:76:11:63:64:22:d0:88:
60:43:85:bc:e9:57:5b:f9:60:36:81:5b:21:ce:9c:cd:7f:f5:
45:81:78:20:fe:55:10:08:33:8d:46:25:b0:ce:b1:fb:b6:6e:
c7:53:ee:3a:a0:99:35:f9:f8:e4:7d:d4:b6:1e:a2:5e:72:f1:
03:82:93:2c:40:01:b7:5d:90:e7:2d:35:12:9b:37:8a:36:ef:
ed:a7:c6:74:33:c2:4b:4c:bf:65:6f:22:5e:cc:14:26:8c:6c:
df:f2:b8:6d:e5:c2:03:5c:1f:d6:7f:a6:fa:f9:c1:c4:96:7d:
09:99:b8:e2:33:0e:75:b2:65:34:5e:99:14:42:fe:8e:21:61:
33:98:67:7d:1a:3d:fb:8b:a3:b7:4e:de:ae:41:07:ae:cc:95:
ee:17:00:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:23:03 2025 by rpki-client