Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
File: RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft (raw, json)
Hash identifier: itDJS9GASwNHWMmthYvhNm0VEryRlfwuR8KzYvRvKSg=
Subject key identifier: DF:29:C0:C6:37:DB:B1:51:D1:B5:41:30:3D:51:85:48:B0:54:14:7C
Authority key identifier: 46:54:F3:E6:92:7E:C4:C7:C9:7D:0F:23:6A:8C:24:53:4A:7F:CD:D4
Certificate issuer: /CN=4654f3e6927ec4c7c97d0f236a8c24534a7fcdd4
Certificate serial: 0196E11F14D0FA7C8CF97373FFEE778FC06E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
Manifest number: 068D
Signing time: Sun 18 May 2025 02:00:32 +0000
Manifest this update: Sun 18 May 2025 02:00:32 +0000
Manifest next update: Mon 19 May 2025 02:00:32 +0000
Files and hashes: 1: RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl (hash: Omh2BGn3vpJKQ66LKcl2pqctRJ+HE1HlIrPA5d/J74E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e1:1f:14:d0:fa:7c:8c:f9:73:73:ff:ee:77:8f:c0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4654f3e6927ec4c7c97d0f236a8c24534a7fcdd4
Validity
Not Before: May 18 02:00:32 2025 GMT
Not After : May 19 02:00:32 2025 GMT
Subject: CN=df29c0c637dbb151d1b541303d518548b054147c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:4a:be:f3:79:e2:5b:96:86:80:e5:b9:57:
c8:54:a3:79:4b:dc:45:b9:b9:fa:b8:44:db:9d:f7:
9a:ce:4a:6d:2b:49:ab:ca:10:29:08:79:6e:2e:f4:
8b:36:d8:d1:3f:47:0d:53:d9:3b:0f:aa:e3:74:97:
d4:0b:f7:b9:0a:76:ab:64:b7:9e:72:4f:f3:d5:8c:
74:d1:9d:62:93:53:b5:7f:9e:4c:18:f8:af:45:99:
f7:0d:70:83:0a:c5:95:bd:9d:e1:a4:d6:75:16:eb:
63:54:60:29:d8:f3:c6:ac:e8:05:41:e9:22:b2:de:
0e:47:ed:f2:71:06:35:14:cc:55:3a:6c:ae:dc:4c:
e5:94:c8:2d:2d:48:ab:d7:85:d7:4a:38:bc:e5:5e:
49:e7:99:a3:e6:52:a9:bd:cb:0b:57:3d:03:81:20:
40:8a:60:3d:c6:91:76:86:82:9e:7b:a6:4a:ab:df:
cf:82:c1:58:bf:61:12:15:f5:14:75:c6:50:28:6b:
ea:d1:2a:4a:fc:83:92:fb:8b:f3:89:24:a0:21:3b:
73:f8:59:08:2c:74:01:ce:ea:16:78:f0:f6:c6:fe:
52:85:63:99:bc:fe:a4:27:c6:30:93:fd:41:a9:e1:
aa:1a:1b:d5:61:52:f3:bd:b5:78:7e:22:52:8d:a0:
3f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:29:C0:C6:37:DB:B1:51:D1:B5:41:30:3D:51:85:48:B0:54:14:7C
X509v3 Authority Key Identifier:
keyid:46:54:F3:E6:92:7E:C4:C7:C9:7D:0F:23:6A:8C:24:53:4A:7F:CD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f5:3b:3a:b9:f5:2c:8d:a9:74:7b:a4:59:f7:e4:2b:8a:87:
88:7c:93:aa:bb:7f:03:9c:93:27:e1:6b:ee:3e:eb:c4:aa:a7:
6d:d7:55:67:40:18:94:6b:9e:33:b3:32:4c:18:f9:06:6e:24:
8e:39:02:37:35:d6:72:f8:29:6c:78:5f:0c:d2:20:cb:f1:02:
ad:4d:bc:e2:49:a7:e1:c6:bc:aa:b2:a9:c3:ef:e3:73:53:4f:
72:86:49:3a:5c:0f:c8:0d:cd:1b:70:56:7d:0e:5d:09:da:66:
1a:bb:83:85:c0:db:31:f6:4f:9f:5b:3b:6a:9a:bb:74:2c:cc:
31:11:cc:06:d5:f3:05:23:c9:02:ae:e0:a2:1b:6d:6d:34:ae:
fe:e1:aa:31:ec:b8:ed:bb:e9:24:d6:01:33:b9:bd:ba:79:31:
d1:39:3c:6f:8e:56:ef:ee:69:3a:0b:fd:10:c3:75:f9:3a:60:
a7:73:03:42:0c:d2:95:32:c6:33:59:2a:01:14:c6:29:07:16:
35:1e:b5:dd:ad:a6:ea:22:11:89:5a:83:73:a1:a8:eb:94:a3:
78:57:31:08:e1:7f:cb:74:02:c9:f4:d9:d3:a9:a3:6b:51:aa:
e1:ca:e1:66:71:1a:9f:b1:00:7b:ee:6d:af:42:6f:8b:da:57:
99:04:14:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:45:37 2025 by rpki-client