Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
File: sxU2q-49e1S4MDubxpqKq76XAOQ.mft (raw, json)
Hash identifier: K+g3YDmnrXEASrEePx7e/holPA4mXkl4YNtEfRfSGJ4=
Subject key identifier: E7:DA:8A:B0:F5:F0:53:E2:36:D1:F5:C8:57:A4:21:DF:DA:61:42:B5
Authority key identifier: B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
Certificate issuer: /CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Certificate serial: 0196C916BBFD7B7AC4159B45F0E77BD2B050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
Manifest number: 074F
Signing time: Tue 13 May 2025 10:00:32 +0000
Manifest this update: Tue 13 May 2025 10:00:32 +0000
Manifest next update: Wed 14 May 2025 10:00:32 +0000
Files and hashes: 1: sxU2q-49e1S4MDubxpqKq76XAOQ.crl (hash: somX2IiZ0FfR4DnC7qGEpSQYtO25oXhVB+RKzTDMcYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:bb:fd:7b:7a:c4:15:9b:45:f0:e7:7b:d2:b0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Validity
Not Before: May 13 10:00:32 2025 GMT
Not After : May 14 10:00:32 2025 GMT
Subject: CN=e7da8ab0f5f053e236d1f5c857a421dfda6142b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:83:a0:0d:59:0b:8c:e8:c3:d8:96:54:3b:0b:
23:20:b2:b7:12:b8:f6:4c:93:50:54:e6:10:35:2d:
d5:fa:80:48:d2:81:da:1c:ee:20:43:ac:24:5a:be:
f3:36:2c:9b:94:11:08:dc:ac:a9:1c:a4:04:68:27:
00:bf:c8:ba:97:54:33:28:25:27:41:cf:f3:bb:4f:
8f:3a:67:9e:80:2e:d0:09:f3:94:4f:35:2a:80:e8:
a3:dc:49:33:8b:d1:09:7c:85:ad:e0:43:65:7a:79:
44:40:59:4e:a3:65:c7:6a:52:49:a1:60:da:36:42:
b5:86:23:64:e6:ef:8d:80:f9:b0:7b:53:e5:9f:ad:
53:60:81:6c:72:68:53:df:b8:db:56:9b:0f:ff:18:
53:b0:2a:4c:b7:0d:a7:f8:8c:01:fa:cd:52:a1:2d:
04:b5:d5:47:9d:ad:a6:e9:32:c4:4d:25:67:38:b7:
4b:84:ce:da:f2:9c:92:c8:8b:81:84:bd:10:1d:84:
53:05:c8:3d:99:b0:76:ea:d5:c4:3f:bd:58:93:54:
f6:34:50:09:46:51:94:73:2c:c7:34:38:3f:94:96:
ca:cd:9e:76:24:62:77:89:24:fd:aa:a8:41:c4:07:
93:1d:10:70:6d:d4:d9:4e:60:01:a6:24:d3:25:23:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DA:8A:B0:F5:F0:53:E2:36:D1:F5:C8:57:A4:21:DF:DA:61:42:B5
X509v3 Authority Key Identifier:
keyid:B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:69:b2:73:6e:9c:01:60:91:d1:22:b2:f1:6b:95:75:99:b4:
0d:6e:51:f8:b0:cf:d3:54:0d:53:7d:0b:f2:3e:00:14:e5:75:
01:32:f0:99:cc:4a:ee:32:06:3c:d4:21:37:b4:d9:fc:56:b6:
62:4c:a4:67:09:9f:95:b1:f5:02:31:21:97:39:f4:77:85:aa:
3a:44:6d:b8:ba:cb:24:8c:69:06:d9:a1:40:33:6a:03:86:90:
62:a6:36:61:48:0e:49:91:6e:21:92:ba:a2:ad:11:31:55:ae:
7e:f8:78:90:a4:cc:99:fb:58:29:5e:6f:e7:3f:8b:99:76:59:
48:4b:b3:88:c4:ee:82:ce:d6:6c:2e:55:24:c3:ed:6d:e2:de:
3b:38:e7:9f:fc:89:2d:21:0e:ab:f6:1e:5c:25:e2:ef:44:99:
89:12:23:84:fe:88:41:85:89:fc:cf:45:65:5b:53:02:9f:81:
89:17:18:87:b0:75:aa:67:73:95:a9:ea:ca:49:6d:7c:8b:4f:
49:6e:39:0a:4d:d0:c9:67:b2:0b:5b:27:27:e0:12:38:ac:4f:
fc:37:19:78:41:7e:4c:c9:d3:f6:ac:a5:79:40:48:51:ca:a6:
34:f0:98:fe:26:04:03:14:12:d0:63:e9:cd:e8:33:e6:d3:1b:
5e:b3:68:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:05:52 2025 by rpki-client