Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
File: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft (raw, json)
Hash identifier: vPJ6evimj/Tz15nL/W7ExJYsUleBAvT3zSGsEdbN31c=
Subject key identifier: 4F:89:9B:E7:8A:07:0E:A7:95:80:87:FC:32:D0:0C:BF:39:0A:30:80
Authority key identifier: B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36
Certificate issuer: /CN=b7d296d69059457be39c3c82466aceed02766836
Certificate serial: 0196DCD42244F1510E39171AF78E2E4636FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
Manifest number: 0636
Signing time: Sat 17 May 2025 06:00:12 +0000
Manifest this update: Sat 17 May 2025 06:00:12 +0000
Manifest next update: Sun 18 May 2025 06:00:12 +0000
Files and hashes: 1: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl (hash: BrqbJwzlzVU3BjEmRkv+on4+WP0oojKeBQZSng+7Wzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dc:d4:22:44:f1:51:0e:39:17:1a:f7:8e:2e:46:36:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7d296d69059457be39c3c82466aceed02766836
Validity
Not Before: May 17 06:00:12 2025 GMT
Not After : May 18 06:00:12 2025 GMT
Subject: CN=4f899be78a070ea7958087fc32d00cbf390a3080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:91:d0:80:3f:b7:02:24:b3:7a:4a:79:76:45:
ea:39:1b:de:af:e6:ca:a6:a9:f5:ca:bd:04:f2:18:
72:a9:a4:ff:b5:24:21:a6:93:55:20:1f:83:c8:9e:
48:80:82:2e:da:7e:cd:ab:d8:59:19:43:cc:55:92:
07:b2:35:aa:11:47:73:80:79:2d:ac:a2:2b:0e:9c:
a3:e0:b5:9d:d6:73:cb:3f:d8:96:4b:67:06:42:85:
69:e6:f8:5a:ce:06:c7:8a:b5:99:10:1e:d0:d9:10:
17:fa:de:62:10:5f:c4:70:91:d2:57:41:68:12:ab:
66:9a:54:35:1c:10:3b:48:0d:4b:02:09:47:83:d9:
2e:a7:cc:a9:bd:1f:26:42:e3:4d:04:8d:ed:08:e5:
11:4d:fb:d5:df:d0:c0:26:f1:18:30:c8:f3:62:9d:
ff:6d:a7:79:f0:4a:a2:2c:d4:56:89:c8:1f:44:a9:
37:a9:28:f9:c9:7d:0b:a9:9a:00:1f:85:7e:b2:32:
d2:89:d7:21:a7:b0:50:e8:44:12:75:f4:60:32:c7:
bf:1e:f0:8a:3a:83:14:88:30:92:16:cc:32:3b:ee:
f2:ee:ac:6b:0d:ff:12:30:85:a2:48:c7:e1:fa:fe:
9c:4f:ab:ce:c3:5b:a1:6e:49:fa:6c:f4:db:4d:df:
c0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:89:9B:E7:8A:07:0E:A7:95:80:87:FC:32:D0:0C:BF:39:0A:30:80
X509v3 Authority Key Identifier:
keyid:B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:de:03:0d:84:e9:2c:cc:3a:c6:3c:de:14:69:4b:9a:57:cd:
8d:6f:80:04:b0:d3:9c:4c:3c:2d:b1:be:a0:e5:d8:2f:96:39:
6d:3b:61:83:a3:d8:ea:a0:7f:98:b4:6f:42:16:ce:48:29:74:
82:1d:b7:08:9b:7c:8b:d1:68:21:a6:f1:65:05:d1:49:5b:86:
df:7f:e3:ba:7e:26:b2:65:ee:7d:5c:79:46:71:26:72:a9:f7:
32:0b:a9:2c:e9:a9:5b:4f:4c:1d:b3:99:6e:91:ee:ea:57:7d:
68:fe:32:53:7d:c5:33:7b:fb:4b:b3:82:b8:7f:9f:b7:c5:09:
3c:b4:10:22:ac:fc:cb:bc:bb:b2:fd:02:a2:c2:ef:4e:82:42:
de:59:b8:06:ff:2a:df:38:b5:46:73:70:83:94:4e:1b:8d:56:
a6:10:5b:1f:f9:82:d3:1b:b2:a4:95:d3:27:a5:61:68:ca:86:
77:91:f4:53:62:fb:09:3c:c1:2e:6e:15:49:a9:f0:e5:cf:62:
07:9a:24:4d:c1:6a:c5:68:24:60:2a:c1:3f:40:17:15:e4:58:
46:f0:87:80:6d:85:00:00:03:f2:e6:35:ae:a4:77:7b:ea:62:
ae:9d:de:2c:25:91:71:c9:7b:e7:32:01:38:a8:bc:f9:3b:c1:
f3:82:9f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 13:57:33 2025 by rpki-client