Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
File: _x2DMuEYqaIYfqtYhCedZYDxGfc.mft (raw, json)
Hash identifier: fUdWFKZkZ1OfEZ6kcxEGuLfDgalDf/1IOXVk5HVSs6c=
Subject key identifier: 4F:FD:39:6C:29:90:EE:A6:16:BF:81:71:F6:0A:AE:F4:E0:92:4A:99
Authority key identifier: FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7
Certificate issuer: /CN=ff1d8332e118a9a2187eab5884279d6580f119f7
Certificate serial: 0196C20279496669834C6FC930E5332CB9A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
Manifest number: 0390
Signing time: Mon 12 May 2025 01:01:04 +0000
Manifest this update: Mon 12 May 2025 01:01:04 +0000
Manifest next update: Tue 13 May 2025 01:01:04 +0000
Files and hashes: 1: _x2DMuEYqaIYfqtYhCedZYDxGfc.crl (hash: Ns1k6hzemUy/vDUK1T64Feen1iwLk+S9nU4l7ljs6+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:79:49:66:69:83:4c:6f:c9:30:e5:33:2c:b9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1d8332e118a9a2187eab5884279d6580f119f7
Validity
Not Before: May 12 01:01:04 2025 GMT
Not After : May 13 01:01:04 2025 GMT
Subject: CN=4ffd396c2990eea616bf8171f60aaef4e0924a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:6e:f4:34:39:83:a3:62:ff:c6:87:cd:3a:
2e:1b:26:a7:73:79:66:08:38:5c:47:ff:80:01:2a:
3a:2a:20:a1:ea:ac:9d:a3:5f:eb:40:6a:7f:f1:35:
29:75:33:fd:d9:7f:79:a8:8f:88:28:a4:ea:e6:6b:
85:5e:37:d5:0d:a7:02:5c:62:0b:12:a7:5d:0c:c0:
60:e8:7c:2d:d8:23:a1:af:f8:71:5b:54:ac:12:ac:
0d:d0:0c:33:d3:01:98:47:80:81:5c:3a:d5:e2:b9:
35:dd:40:51:7d:12:65:e5:a8:e7:aa:0b:22:43:59:
bb:4c:f1:f4:27:93:df:ef:c0:71:89:2b:e3:be:7c:
1d:b4:a2:18:27:83:67:de:3b:5e:46:11:34:1f:13:
04:ca:f5:df:6b:fd:1a:74:55:2d:26:18:0e:b2:ac:
21:90:90:9e:02:c5:5c:83:61:91:4d:97:5b:26:7f:
19:5f:79:de:a6:de:15:48:56:fb:f6:31:e7:f3:67:
4c:a0:03:ac:96:76:1b:6a:90:68:d5:0c:ce:c3:64:
47:0d:b6:22:69:57:e0:73:71:b9:7a:8a:67:a7:fb:
1d:ab:0d:9f:86:47:b9:09:d6:28:4c:69:c4:bf:74:
b5:0c:59:1f:6e:5f:8d:a2:72:9f:49:93:fc:4c:4b:
95:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FD:39:6C:29:90:EE:A6:16:BF:81:71:F6:0A:AE:F4:E0:92:4A:99
X509v3 Authority Key Identifier:
keyid:FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fc:9e:28:ab:da:aa:a5:5c:45:b1:41:1c:af:7b:34:f3:ca:
c7:98:90:d6:83:4f:97:da:db:04:c5:cb:44:4e:ae:53:5c:9c:
af:7c:2c:b0:95:fb:8e:4e:88:5c:b6:4f:82:52:fb:e6:17:19:
bf:5a:ea:af:1f:2e:5c:93:be:d9:7d:b7:1f:5c:ba:1a:73:76:
1b:cc:5f:dc:04:49:3d:8f:75:6e:ea:9a:f7:82:11:c7:08:90:
c1:2a:47:b5:53:28:b9:54:b0:58:8e:6d:7f:7a:3c:33:5e:3f:
ee:9d:05:7f:ba:27:6e:18:a4:48:2a:74:72:2c:dd:d2:f5:11:
4c:91:e2:84:e6:e9:10:50:a3:75:40:71:e1:f3:56:09:b5:87:
c6:60:22:84:39:b5:f3:41:35:5e:a2:50:d8:d2:f9:14:34:ff:
ad:e6:fb:1c:ab:ef:d6:ec:64:a3:ee:45:23:54:cd:25:80:83:
6d:03:bd:c5:7a:1e:92:48:25:0f:86:f1:e2:47:38:6b:a4:ba:
26:b4:3d:26:20:7c:93:e5:fe:4b:62:eb:cf:50:b8:c1:b1:8e:
40:eb:92:db:ec:3c:a7:25:34:9b:2c:7b:bb:5b:32:fc:76:11:
a0:4b:be:24:66:27:bf:e4:af:14:67:47:6b:5c:d4:a6:25:ea:
af:77:16:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:08:25 2025 by rpki-client