Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
File: rkIjS6xhcScD45im1b8EjFyfQDI.mft (raw, json)
Hash identifier: CL408NN5mT+rvWaeQ5TZf8rlYo/E4CvEG+r8+3I7n6k=
Subject key identifier: 38:59:4C:BE:90:E9:E1:BE:58:81:BB:E4:2D:17:B2:42:CB:E4:87:2A
Authority key identifier: AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
Certificate issuer: /CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Certificate serial: 0196C64CDC4E564194A9E55479C3A1A84867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
Manifest number: 066A
Signing time: Mon 12 May 2025 21:00:48 +0000
Manifest this update: Mon 12 May 2025 21:00:48 +0000
Manifest next update: Tue 13 May 2025 21:00:48 +0000
Files and hashes: 1: rkIjS6xhcScD45im1b8EjFyfQDI.crl (hash: 06XWopEUnaMT15l9Od82CnUejD4jWTMN7unTdQ3XBOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:dc:4e:56:41:94:a9:e5:54:79:c3:a1:a8:48:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Validity
Not Before: May 12 21:00:48 2025 GMT
Not After : May 13 21:00:48 2025 GMT
Subject: CN=38594cbe90e9e1be5881bbe42d17b242cbe4872a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9e:b5:0c:85:34:2f:1a:de:56:b9:b7:3a:1c:
cb:60:22:e5:b2:c7:7b:22:00:32:cd:81:9f:15:0a:
c7:32:df:91:4b:50:c5:53:7f:c8:ef:ba:82:cf:d6:
36:ed:21:c5:ee:fa:df:47:30:9b:9d:f2:15:f5:05:
96:c8:95:1d:80:c4:5c:4c:6e:13:65:3e:9d:23:09:
ba:fb:44:b1:d8:42:8c:0e:c6:a9:a7:28:51:c4:d3:
e2:98:de:13:f4:19:0e:51:58:6b:fb:94:3d:00:87:
1f:cb:3a:db:61:70:2b:69:f5:cf:2c:1b:7e:34:02:
cf:cf:29:52:e7:f1:9e:3f:b4:3c:b6:ef:a5:eb:b1:
27:c9:b0:f4:6f:9e:00:67:d8:65:21:d7:64:98:d6:
27:fb:f1:b6:3a:85:bb:7b:c0:22:22:ad:0c:97:6a:
77:d7:7c:0a:1e:d4:66:de:96:d7:e7:36:70:83:78:
b9:60:a4:c4:0b:d3:6e:9f:3e:be:9c:cf:49:db:4c:
09:88:c1:d1:93:56:c9:d9:9b:c2:1a:ea:0f:d1:18:
83:7f:86:8d:21:62:3b:c9:11:9f:3b:0e:92:c5:53:
7f:57:24:d0:22:1c:08:04:11:0c:d9:a0:24:90:fb:
b0:1f:0c:40:db:ee:e3:6f:82:ef:bd:6f:1f:9e:62:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:59:4C:BE:90:E9:E1:BE:58:81:BB:E4:2D:17:B2:42:CB:E4:87:2A
X509v3 Authority Key Identifier:
keyid:AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4a:ae:38:65:87:64:cd:62:bc:6c:59:35:86:27:69:d3:47:
6d:6e:e9:f7:8a:62:1a:6e:59:03:99:ce:8c:ca:82:fc:3c:e1:
a1:db:f2:15:7a:cd:00:87:3b:9c:5e:c8:1c:33:58:44:78:a2:
f8:cb:e1:81:2c:e7:cd:c3:ce:a5:4a:23:d3:bd:ff:6f:08:29:
81:77:bb:61:06:71:e4:4f:56:28:47:81:be:8f:9c:da:b4:51:
1b:3b:de:10:c5:1e:3f:ba:4b:fd:ba:ae:a2:43:e2:f1:6e:a1:
c4:79:1f:1c:cc:27:07:aa:fd:1b:85:fb:41:6c:ef:6f:f9:e9:
18:b6:40:39:02:95:5b:96:29:76:c8:9b:86:43:22:3b:18:a0:
83:aa:ce:41:c0:a6:29:a8:a3:57:0a:12:fb:fc:26:d9:a2:db:
b0:f4:dd:be:ed:12:da:7c:29:22:df:d4:55:f0:db:cf:42:60:
78:2f:26:04:d6:ee:54:82:39:1b:12:3b:37:a0:3f:ba:55:3f:
f6:86:f6:5c:22:b1:63:fb:f3:11:5c:9e:4c:64:64:cf:21:ce:
8a:ab:4f:73:69:3e:a3:ec:24:46:e5:9f:4a:19:3c:2d:bb:fc:
02:8e:02:82:76:bb:08:d3:67:a9:7e:55:f8:91:2f:e8:db:7a:
29:3d:00:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:19:22 2025 by rpki-client