Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
File: RmSgU4XAYmgVApGX6xUGSF09bRw.mft (raw, json)
Hash identifier: bMssaB96KSM1Kw5TPPIRubsW+BYScQaTMGmNtCL73iU=
Subject key identifier: 17:2D:7D:A8:6E:47:F6:BE:3A:7F:0A:96:D5:A0:7C:9A:58:8E:40:84
Authority key identifier: 46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
Certificate issuer: /CN=4664a05385c0626815029197eb1506485d3d6d1c
Certificate serial: 0196AB79F82CE8314E77C956446F23450A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
Manifest number: 0680
Signing time: Wed 07 May 2025 16:00:19 +0000
Manifest this update: Wed 07 May 2025 16:00:19 +0000
Manifest next update: Thu 08 May 2025 16:00:19 +0000
Files and hashes: 1: RmSgU4XAYmgVApGX6xUGSF09bRw.crl (hash: Yb9mXW+rha/mFHQ5CF1cW3rQbV5RO/5htxTujlQ06Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:79:f8:2c:e8:31:4e:77:c9:56:44:6f:23:45:0a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4664a05385c0626815029197eb1506485d3d6d1c
Validity
Not Before: May 7 16:00:19 2025 GMT
Not After : May 8 16:00:19 2025 GMT
Subject: CN=172d7da86e47f6be3a7f0a96d5a07c9a588e4084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:a8:42:9a:ef:f0:23:1a:b3:c1:13:57:79:
12:34:37:43:53:0d:fc:66:ac:c5:0b:9a:29:4e:e5:
da:f3:43:66:6d:28:83:e1:bc:87:a4:cb:3f:cf:a4:
5a:93:5e:40:ff:36:b6:d9:cf:e8:cd:ca:26:ff:a9:
24:8c:a1:99:ba:c4:44:d8:81:a2:82:01:e8:30:26:
05:fb:e9:f4:98:45:09:ce:88:0d:c2:9d:dc:aa:59:
1b:81:32:fa:40:35:70:a1:fc:f9:94:08:ac:40:78:
a6:df:be:a9:94:e1:ee:3d:aa:eb:c0:7f:bc:9d:f8:
7e:29:5a:02:67:d8:cb:53:11:19:6f:93:01:3c:30:
03:15:a5:4f:9d:cd:c5:93:c5:30:01:bd:45:d5:70:
6c:d5:0b:31:95:23:b9:d9:10:1f:5e:d4:d1:7e:23:
2c:bf:2b:93:14:bb:83:50:1b:d3:59:03:9e:60:b3:
9d:3a:b0:d6:bd:2e:2d:97:af:32:74:56:1c:90:05:
0b:de:2e:71:1a:21:94:36:d3:08:ee:0c:fe:26:55:
7a:53:fd:76:a3:e7:1f:27:52:d6:36:45:c1:ed:b6:
7e:cd:56:c7:87:e8:22:ea:35:13:5c:5b:4a:60:ae:
0e:f7:fb:cd:23:a6:30:35:3a:7f:11:ce:1e:a3:b7:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2D:7D:A8:6E:47:F6:BE:3A:7F:0A:96:D5:A0:7C:9A:58:8E:40:84
X509v3 Authority Key Identifier:
keyid:46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fc:90:24:1c:91:41:5c:e8:9b:09:92:2d:43:d7:aa:48:61:
86:17:f5:8b:fc:49:e5:46:a6:96:06:4c:d1:75:ae:48:d4:01:
5c:c1:fe:01:c9:a8:ff:88:2d:96:a7:94:f1:e6:5f:ba:92:7b:
45:6d:f0:c2:f1:58:33:de:de:28:9c:80:9f:8a:11:4f:d9:45:
91:cd:4a:9f:a3:f5:22:e6:38:28:6c:88:a9:17:89:a2:20:be:
1a:6c:72:a4:38:55:96:80:ea:82:31:6a:83:22:9d:fb:c9:e9:
03:7a:e8:1a:29:c2:ae:9d:b2:cd:90:d3:35:33:4d:9e:06:12:
29:ad:8a:71:c2:a3:44:f0:a9:14:6e:13:e6:36:f3:bf:67:66:
02:a5:d4:86:e8:00:95:9f:11:56:a4:33:1c:0c:42:65:e9:4e:
42:11:04:0c:87:76:98:af:3a:d5:8d:16:18:42:be:a0:06:25:
7f:98:00:ae:46:45:ab:1d:46:d1:a1:ec:f9:f7:f6:e8:a2:10:
36:f8:0d:69:bd:5f:b4:17:bf:b7:2f:65:4f:0f:05:6c:f2:da:
cc:bc:44:3a:5a:7f:79:1c:e3:b5:f2:59:23:c9:be:a3:85:5c:
ee:0b:f9:8e:ce:7f:e2:0f:34:09:15:e4:03:36:99:21:52:76:
e1:06:fb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:57:36 2025 by rpki-client