Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
File: l37KDVyVbeF79pcQRvLrlc5hXik.mft (raw, json)
Hash identifier: elXlASpcV+tHoLCok1MtwsQheZJg9V5c0OpofMbGCb0=
Subject key identifier: 6B:E3:A8:C4:83:F0:F1:EC:2D:A6:EA:3E:25:ED:CF:C2:42:5A:EA:96
Authority key identifier: 97:7E:CA:0D:5C:95:6D:E1:7B:F6:97:10:46:F2:EB:95:CE:61:5E:29
Certificate issuer: /CN=977eca0d5c956de17bf6971046f2eb95ce615e29
Certificate serial: 0196B3D88F7093E6F1DB13B51F3761B2811F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
Manifest number: 152C
Signing time: Fri 09 May 2025 07:00:36 +0000
Manifest this update: Fri 09 May 2025 07:00:36 +0000
Manifest next update: Sat 10 May 2025 07:00:36 +0000
Files and hashes: 1: l37KDVyVbeF79pcQRvLrlc5hXik.crl (hash: es5ila47EJlgy5lLLBqwj6+HCBsZ9oatYjWxnRdRiHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:8f:70:93:e6:f1:db:13:b5:1f:37:61:b2:81:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977eca0d5c956de17bf6971046f2eb95ce615e29
Validity
Not Before: May 9 07:00:36 2025 GMT
Not After : May 10 07:00:36 2025 GMT
Subject: CN=6be3a8c483f0f1ec2da6ea3e25edcfc2425aea96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ed:7c:b4:5b:f8:ff:c8:b1:fa:4a:29:65:6f:
8a:0d:b6:bf:fa:bd:b2:14:1e:8d:29:71:19:16:34:
ea:86:fa:bb:eb:e1:01:de:63:2f:b7:95:ad:5b:89:
d8:13:15:e8:ff:8f:93:1b:3a:17:98:35:06:27:cd:
6a:d6:9d:af:81:9e:d5:79:ba:6c:cd:ef:41:4c:5b:
cb:d2:c9:bd:82:33:6e:cd:40:fa:2a:bd:25:58:cb:
3e:4b:a2:6b:65:b1:76:34:2f:f6:b5:cc:8d:20:60:
cd:b4:62:bf:f2:be:30:24:c4:7c:5f:61:1d:59:e2:
6a:5b:ac:ed:1c:8d:45:c3:f0:47:5a:39:30:66:58:
ec:3a:9e:ff:1b:4c:2d:45:67:ab:5d:b6:61:4c:5c:
4f:07:fa:5f:4d:41:92:4f:14:67:5d:f9:c6:30:79:
b0:8b:c4:6f:04:57:01:32:47:25:bd:54:29:c7:39:
00:85:2f:80:90:dd:0e:fd:ef:f1:9e:cc:30:02:91:
28:a0:69:f3:b8:81:6c:18:cd:af:32:e2:44:f3:c8:
48:df:cc:b1:79:63:de:30:9a:ef:c7:47:df:f3:2f:
ea:89:a5:f6:5d:61:eb:ef:13:61:6c:0e:ad:88:bc:
fe:58:49:fd:f0:8a:d3:58:6e:12:98:21:04:a2:32:
ae:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E3:A8:C4:83:F0:F1:EC:2D:A6:EA:3E:25:ED:CF:C2:42:5A:EA:96
X509v3 Authority Key Identifier:
keyid:97:7E:CA:0D:5C:95:6D:E1:7B:F6:97:10:46:F2:EB:95:CE:61:5E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c8:9d:2a:c2:41:6a:fa:4f:85:a5:5e:73:e9:66:76:ff:04:
88:d4:38:2c:0c:25:63:46:d7:b5:ac:e9:2f:c5:3e:ba:d0:80:
e8:4c:52:32:42:ec:6e:06:2e:15:dd:38:b4:45:ee:ec:b6:6a:
f2:3e:fe:15:a3:fe:39:9d:5b:a3:01:d4:fa:2e:33:4b:45:1a:
e1:45:30:4f:b6:0b:b9:b0:20:53:75:7c:93:ce:f8:9e:6b:38:
d9:94:f3:67:8b:5e:e3:1a:8b:67:f0:ed:53:f4:47:d0:8b:4a:
1c:0d:1f:ba:f0:77:1a:fa:3d:1b:d9:30:76:04:43:46:b1:b6:
c9:8b:7d:b0:c7:5d:3a:7b:c8:55:25:c0:99:22:12:3c:21:78:
e9:c8:0c:fd:95:e6:3e:ed:04:19:e0:a3:79:31:de:11:24:e5:
d8:5e:ee:a4:9c:37:7e:2b:0f:db:ce:14:80:09:55:f2:a3:a7:
d7:97:f7:94:7c:1f:d6:19:ce:18:a9:b3:87:49:ba:8b:10:4d:
29:a7:b0:3e:3a:54:f1:fb:fd:b9:66:d0:8b:85:1d:aa:c7:a2:
ca:18:7e:7e:f8:f2:74:ca:6c:2b:be:01:f4:d5:67:55:e7:d4:
2f:13:09:45:66:1a:5f:75:e5:f3:a6:5c:1e:08:84:4d:df:69:
89:76:bd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:37:08 2025 by rpki-client