Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
File: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft (raw, json)
Hash identifier: L/fABfBWhpKoPm8VR5+u1isvrsv3uZAfSmrbGFxt0Po=
Subject key identifier: FE:20:50:D4:37:DA:49:54:89:D2:BA:EA:8B:70:06:B2:4C:34:48:6A
Authority key identifier: 21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
Certificate issuer: /CN=21de5947d9bdf6b08156a939bd20d93492c71104
Certificate serial: 0196BC0032572A0F6B1E8FEC2FF557FFAD60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
Manifest number: 0B0D
Signing time: Sat 10 May 2025 21:00:51 +0000
Manifest this update: Sat 10 May 2025 21:00:51 +0000
Manifest next update: Sun 11 May 2025 21:00:51 +0000
Files and hashes: 1: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl (hash: AMfDuAdBmmheKKznDLmszBG82xCSD2VN0qMggUEsZVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:32:57:2a:0f:6b:1e:8f:ec:2f:f5:57:ff:ad:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21de5947d9bdf6b08156a939bd20d93492c71104
Validity
Not Before: May 10 21:00:51 2025 GMT
Not After : May 11 21:00:51 2025 GMT
Subject: CN=fe2050d437da495489d2baea8b7006b24c34486a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d7:37:2f:64:5c:c5:27:25:38:5a:18:a2:97:
bc:3d:4d:56:75:10:5e:48:83:7e:75:41:d0:18:ad:
2d:dd:09:81:8d:54:e1:2b:49:1f:a1:f0:29:fb:8f:
c9:6f:94:5a:a0:4d:0a:b0:7c:ef:1c:4a:b3:a9:a0:
29:7f:de:54:ba:11:36:0f:46:01:7b:6a:0e:02:31:
6c:f6:d9:91:8d:78:7e:8f:32:18:36:92:4a:e9:e9:
20:a5:81:60:cf:fa:a1:21:a8:76:90:fb:68:ed:74:
6f:a2:b2:d9:b7:99:d2:4f:79:68:69:66:8e:4c:4e:
a8:7f:97:d5:61:71:aa:4a:b2:6c:8b:32:03:48:b3:
fb:11:e9:25:6d:78:74:7a:2f:49:f8:9a:9f:27:b1:
ac:3c:df:d1:6b:ef:07:6a:42:49:4c:6b:a8:12:d9:
e0:96:77:15:70:88:ec:3f:32:15:50:7c:4a:e7:28:
96:84:84:2c:be:eb:b9:34:e5:35:25:b5:3a:e2:41:
22:7d:37:67:56:83:5f:a3:67:c5:11:b8:a4:96:75:
f7:9d:9d:86:cf:56:53:be:8d:2f:62:4e:0c:2f:c7:
73:dd:58:cc:31:53:f8:53:2f:39:7d:07:e7:01:ee:
1c:ce:51:c3:c1:c6:cb:1b:b9:03:83:9c:eb:2d:23:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:20:50:D4:37:DA:49:54:89:D2:BA:EA:8B:70:06:B2:4C:34:48:6A
X509v3 Authority Key Identifier:
keyid:21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:01:91:f4:5a:8e:f9:5f:78:03:04:04:10:94:7f:d6:2e:08:
81:fc:08:12:85:ce:20:4f:2a:d0:50:d7:c0:82:61:a2:fb:80:
de:ff:1e:64:d7:7f:d4:ea:80:de:b2:9f:08:60:4d:11:a0:94:
d0:b7:eb:17:53:46:47:2c:10:14:a6:48:a4:4a:08:a0:f7:8a:
5c:24:b5:e4:7d:3d:d5:82:c0:06:65:43:cd:71:74:df:f1:ed:
da:d0:6d:ae:2d:12:04:bb:ef:01:6d:f9:c8:cb:b8:5a:0f:72:
16:89:ee:74:7e:59:c3:23:8f:51:b2:3b:04:b6:f8:e9:ea:7d:
38:c0:cb:08:4b:d2:ff:71:8b:9a:91:ad:c7:55:fa:e8:18:65:
f5:40:e9:a3:1c:30:4c:9f:19:d5:f8:4b:9a:a3:0a:ee:1e:d2:
18:6b:8d:63:19:56:d9:f9:36:7e:dd:1b:ac:a1:d0:83:e6:10:
34:13:45:e5:62:d1:fc:b7:a3:2e:67:06:11:56:ef:d4:e4:7e:
ab:30:8b:aa:62:34:58:7f:c4:4f:bb:41:82:08:52:f9:cd:49:
7f:de:7c:27:9d:3e:d5:64:3d:a7:4a:32:52:d3:ef:4f:8f:51:
30:c1:25:28:8e:ea:25:99:b7:91:b1:22:92:c4:02:65:94:6e:
33:80:2f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:26:29 2025 by rpki-client