Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
File: cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft (raw, json)
Hash identifier: qN8nibMS2eyp+ZzJnlNpTz1RdgNxe2ByoRf6JpQhHwk=
Subject key identifier: 11:90:04:99:59:3C:B8:9F:D9:B9:C1:2E:E8:95:52:E1:73:52:94:E2
Authority key identifier: 73:03:8C:DC:62:52:2E:48:4B:06:15:C4:24:1C:7E:7A:A8:21:D8:D6
Certificate issuer: /CN=73038cdc62522e484b0615c4241c7e7aa821d8d6
Certificate serial: 01969E638779E8CA6BC82ADA23B14956D71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
Manifest number: F8
Signing time: Mon 05 May 2025 03:00:44 +0000
Manifest this update: Mon 05 May 2025 03:00:44 +0000
Manifest next update: Tue 06 May 2025 03:00:44 +0000
Files and hashes: 1: cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl (hash: Q0w0lwE3W524ZAosGAG1sGza0TcuNNIP8+x69zhPISs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:87:79:e8:ca:6b:c8:2a:da:23:b1:49:56:d7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73038cdc62522e484b0615c4241c7e7aa821d8d6
Validity
Not Before: May 5 03:00:44 2025 GMT
Not After : May 6 03:00:44 2025 GMT
Subject: CN=11900499593cb89fd9b9c12ee89552e1735294e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:54:ee:b8:dc:51:6a:99:c9:43:16:04:04:13:
dd:1c:14:80:81:f9:41:6c:e4:9d:3e:29:7c:2e:a2:
b5:eb:20:f0:44:8d:0a:ba:39:dc:a0:7e:33:9a:30:
17:55:cf:e4:1f:e4:12:59:69:63:95:78:6f:30:10:
28:1b:16:d0:9c:5a:84:71:7a:00:48:76:b9:1a:ca:
8e:03:a4:ac:8f:26:12:19:a2:84:5d:8c:68:ba:67:
c5:7c:aa:20:41:4f:34:da:84:31:47:7b:8f:3b:5e:
18:9f:4e:78:eb:b1:52:c5:30:6a:04:5e:9c:15:d5:
7b:62:e0:f5:95:82:1e:5c:f0:6f:3d:06:2e:96:78:
0a:89:89:05:76:7e:03:7f:b4:10:69:c5:e7:ed:7b:
35:07:48:6b:d6:ee:c6:31:8a:df:eb:8b:92:a7:ee:
c0:74:54:8c:45:3a:7c:f9:78:ef:6f:19:55:a8:49:
3e:b9:30:c6:b5:87:5b:ef:62:12:3c:8d:8c:22:5a:
2e:07:82:94:41:79:6d:d9:d1:09:3f:a7:68:df:1a:
f1:5a:12:40:95:63:fa:df:82:00:72:ee:46:ef:6a:
39:1b:e7:7e:f7:ea:05:1b:cd:d7:47:47:00:04:5a:
ef:80:5d:a1:40:2e:35:e4:5f:a3:bb:c8:2a:c6:77:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:90:04:99:59:3C:B8:9F:D9:B9:C1:2E:E8:95:52:E1:73:52:94:E2
X509v3 Authority Key Identifier:
keyid:73:03:8C:DC:62:52:2E:48:4B:06:15:C4:24:1C:7E:7A:A8:21:D8:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5a:74:74:19:df:96:b9:56:82:0d:41:58:e9:11:08:80:ff:
dc:a0:7b:c0:09:d4:a7:d4:a5:10:08:96:bd:41:87:0d:db:4e:
6c:ea:9b:2e:8b:96:3f:fc:32:69:86:49:45:d6:1b:db:79:ef:
fb:df:64:f5:b9:75:5b:a6:f4:e8:fe:6f:93:3a:65:cf:8a:90:
70:97:22:68:a0:6b:cd:48:5d:07:0e:2e:e3:0a:bf:bf:53:83:
8f:d5:f7:12:2e:50:99:ea:f0:ef:f3:7e:77:32:0c:27:ab:fd:
6c:a2:e0:ea:21:b3:45:7e:e6:7c:00:2a:67:c6:df:9d:31:14:
ad:e0:6a:7d:2b:d5:e3:8b:93:06:fb:3d:01:55:ca:4b:dc:5f:
fd:06:bf:b9:25:09:85:0f:b8:6d:43:a8:f3:94:62:2e:69:ee:
95:32:ee:e6:7d:8b:a4:eb:f1:64:3f:2e:b8:09:1b:1e:b3:d5:
3c:e2:e8:ef:ef:41:a2:aa:58:fd:02:e8:57:91:4e:a9:e5:19:
59:8a:13:65:7f:ee:ac:62:b1:27:88:a2:1a:61:19:53:16:8d:
1a:83:6d:a6:6f:4f:ad:69:f0:5d:0f:48:6b:65:24:38:92:05:
9b:58:20:ad:3b:0b:4e:be:53:22:74:17:dc:0e:8c:b3:b1:2f:
cf:57:3b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:23:08 2025 by rpki-client