Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
File: _1VJGZMcZ70mUPxODHPC-z4ijZU.mft (raw, json)
Hash identifier: LhMwbYMOIq09mSvhsH9RmlRjC/CaQFy4dsrLyye7P7M=
Subject key identifier: 52:BF:C5:4F:8F:6E:B6:FF:80:D4:1C:72:4A:F1:48:88:A7:2C:3D:F2
Authority key identifier: FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95
Certificate issuer: /CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
Certificate serial: 0196BE256A9A1C7E78118B13AC9A35BA3EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
Manifest number: 152F
Signing time: Sun 11 May 2025 07:00:45 +0000
Manifest this update: Sun 11 May 2025 07:00:45 +0000
Manifest next update: Mon 12 May 2025 07:00:45 +0000
Files and hashes: 1: _1VJGZMcZ70mUPxODHPC-z4ijZU.crl (hash: z53VGcwBaYLb+bLQKIijpJBNhV+7FdL8F1GCc8RQXSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:6a:9a:1c:7e:78:11:8b:13:ac:9a:35:ba:3e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
Validity
Not Before: May 11 07:00:45 2025 GMT
Not After : May 12 07:00:45 2025 GMT
Subject: CN=52bfc54f8f6eb6ff80d41c724af14888a72c3df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:cf:0f:60:cc:8d:ca:3f:85:4d:dd:cd:b4:
32:0b:b8:e6:75:6e:6b:73:af:3c:54:7f:d1:15:23:
40:a8:48:b1:b7:59:6d:74:f0:bb:e2:cc:2f:86:e6:
05:71:fb:43:53:13:8c:66:bd:1c:c6:50:c3:e0:e2:
39:0b:09:d7:f4:26:7e:c2:3a:12:9a:96:20:a6:d5:
2b:d1:62:f2:48:b2:78:6e:b2:55:9f:d6:b4:be:c9:
fc:aa:05:88:64:9c:1a:1d:be:fb:f4:a6:a3:56:0b:
5e:9e:c6:9c:82:8a:00:da:b4:b9:58:e2:d1:bb:f4:
38:21:68:0d:21:42:d7:bf:d5:12:4e:9d:87:4c:13:
55:51:42:4f:24:cc:ad:da:08:6f:c7:ff:fd:48:ac:
ee:01:ac:22:bd:e1:bd:14:4b:01:f1:d4:f8:c5:69:
12:99:ff:e8:c3:dd:e5:2b:d8:ed:84:bd:dd:11:6f:
87:b2:b7:9d:c4:99:de:1d:b7:cd:78:11:f8:87:65:
9a:25:a7:2a:1d:49:d2:aa:c5:e0:1b:20:fc:62:ef:
c5:ac:0b:23:49:a0:3e:0a:ad:0f:0f:4f:34:7d:84:
c3:07:f8:43:07:43:a3:fc:c2:c4:71:e6:22:a8:cf:
f5:99:83:e6:c1:de:09:95:cb:73:d5:97:3c:f5:ae:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BF:C5:4F:8F:6E:B6:FF:80:D4:1C:72:4A:F1:48:88:A7:2C:3D:F2
X509v3 Authority Key Identifier:
keyid:FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4f:3f:f9:10:f3:c0:f6:e0:70:4f:0f:b4:3a:cd:89:54:d2:
52:df:3f:5b:b9:ea:a3:37:b6:42:fc:d9:50:da:3e:32:b1:2e:
d6:01:7e:44:5d:23:3d:07:f4:1b:51:52:8b:76:c0:96:e4:b9:
8a:8a:fe:eb:cb:e3:55:c5:af:81:8f:b7:91:2b:7c:69:04:72:
fc:bf:76:33:81:de:ad:5b:74:0e:d3:6d:23:ff:23:29:e5:79:
da:4e:69:f1:38:5d:17:f3:b8:30:4f:68:f6:c9:25:4b:8c:4b:
3c:3e:18:99:f3:9b:b4:d0:5a:aa:8d:82:54:14:ab:a7:90:c3:
e8:9e:5f:6d:4e:08:5b:8b:e9:c1:57:73:c9:01:e2:64:52:e4:
57:fd:b1:e6:11:2f:fa:05:e3:d7:b0:9d:0d:5f:6d:8a:aa:c5:
34:75:a1:52:38:bf:ee:0f:f2:a9:89:2f:6b:05:7d:2f:37:dd:
9e:a7:09:db:c8:ee:5a:0f:be:a2:96:e8:20:3c:93:32:c5:c8:
63:dd:b1:ec:e8:55:f0:3b:3c:25:38:3d:e5:a9:86:4e:2b:80:
a6:80:9e:46:30:57:8d:bc:ea:e3:54:0b:0b:75:d0:95:ca:2f:
b7:04:17:3d:37:41:7e:f5:62:7a:f7:9b:3b:87:c9:27:dc:7d:
da:ea:ec:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:21:38 2025 by rpki-client