Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
File: iwUOQskY3jwnNm3vQzph8Tw7FrI.mft (raw, json)
Hash identifier: iG+bz8uNoG/9UwVoYXp+ZLdqtr13HpZb7xt67pEE6e4=
Subject key identifier: BB:AD:23:13:18:92:7F:55:9E:5E:82:84:94:23:55:3F:A8:0D:8E:C3
Authority key identifier: 8B:05:0E:42:C9:18:DE:3C:27:36:6D:EF:43:3A:61:F1:3C:3B:16:B2
Certificate issuer: /CN=8b050e42c918de3c27366def433a61f13c3b16b2
Certificate serial: 0196C34C7DB8DF4CEB77E611C07667B8BB15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwUOQskY3jwnNm3vQzph8Tw7FrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
Manifest number: 1533
Signing time: Mon 12 May 2025 07:01:32 +0000
Manifest this update: Mon 12 May 2025 07:01:32 +0000
Manifest next update: Tue 13 May 2025 07:01:32 +0000
Files and hashes: 1: iwUOQskY3jwnNm3vQzph8Tw7FrI.crl (hash: q9zReYYb3+00ZU8TSaq6KJAZu86Jn5O75YfNXVr7n4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwUOQskY3jwnNm3vQzph8Tw7FrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:7d:b8:df:4c:eb:77:e6:11:c0:76:67:b8:bb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b050e42c918de3c27366def433a61f13c3b16b2
Validity
Not Before: May 12 07:01:32 2025 GMT
Not After : May 13 07:01:32 2025 GMT
Subject: CN=bbad231318927f559e5e82849423553fa80d8ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:b8:a2:2f:62:45:fa:6c:b9:63:61:ea:23:
ec:73:6f:c2:30:10:13:d0:bd:42:44:5d:e1:51:f6:
9a:75:ff:6c:b9:c7:b6:2b:0a:c7:04:33:22:72:95:
1d:85:76:bf:c9:2c:e1:50:a7:e7:7a:5f:cc:85:af:
65:5f:53:c3:97:c5:b2:8d:9d:64:5a:ee:51:4d:e9:
c1:1f:b9:8a:25:89:a6:e1:2c:a2:0e:b5:ed:d3:b7:
9b:67:33:bc:a9:55:49:80:1a:bb:7a:61:47:35:e4:
45:f3:47:e2:fb:96:9d:aa:35:c3:6a:e6:f4:e2:a4:
e3:f8:50:29:5c:06:51:7e:65:3c:67:4e:1c:9d:58:
ec:03:c9:42:7f:7e:ab:63:2a:cb:1a:76:f3:d4:1e:
cf:c5:f9:50:c5:33:2c:a9:70:a3:9b:60:3d:22:c0:
4b:19:64:dc:b2:27:77:a2:9f:72:c8:4b:9c:c8:3b:
48:dd:69:57:16:ef:3a:b9:f6:3a:20:48:c7:a6:a1:
e2:f9:fe:c4:b8:e6:ba:c6:67:2b:5a:83:15:c9:5d:
39:d2:ed:dd:bf:1f:32:de:ba:fd:da:0b:56:cb:d1:
e0:8d:8c:5e:c5:e5:50:f8:c8:47:98:33:18:cc:52:
0f:8d:cc:8c:21:a3:93:dd:59:f0:05:31:55:df:59:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AD:23:13:18:92:7F:55:9E:5E:82:84:94:23:55:3F:A8:0D:8E:C3
X509v3 Authority Key Identifier:
keyid:8B:05:0E:42:C9:18:DE:3C:27:36:6D:EF:43:3A:61:F1:3C:3B:16:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwUOQskY3jwnNm3vQzph8Tw7FrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:80:f4:0a:8d:ed:12:d0:be:bd:b9:b2:63:48:30:27:7d:f2:
41:dd:93:e5:38:08:ee:d7:27:4e:4d:7c:80:3e:7e:a8:f0:86:
46:99:79:79:92:fb:89:f7:4d:16:0b:6c:23:86:0f:5d:8d:64:
37:4b:a7:f4:59:5d:9f:df:ec:12:70:30:5a:73:48:b9:65:32:
9d:ae:ac:55:37:1e:31:c8:d8:cb:fe:fd:e2:72:78:2d:a9:76:
10:8c:82:64:5c:3f:e0:da:06:cc:74:80:ad:50:9d:75:79:42:
6b:60:32:5e:de:a4:b6:97:02:71:64:cd:17:4b:2f:3c:22:f8:
a2:72:7d:a4:07:d8:fe:3a:36:39:ba:b1:1c:75:e0:b7:97:66:
b8:ba:95:40:cc:27:65:08:30:eb:06:a3:9c:35:68:b6:3c:77:
75:d8:8b:15:ee:5b:c7:21:e3:d8:04:83:95:9e:a9:13:86:66:
64:03:b4:c9:26:4c:44:3c:e2:87:01:5e:e7:e2:4f:0e:84:21:
6a:f0:75:ce:ac:61:7b:4a:7c:cf:21:6f:0b:aa:31:c8:11:ed:
29:f7:f3:57:4e:41:de:69:47:c6:71:ab:97:e6:43:59:63:fd:
56:fd:16:64:b5:8b:85:7a:c0:40:9c:a1:ee:91:6d:33:e5:31:
d2:7a:17:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:28:41 2025 by rpki-client