Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
File: 65fOljUzDxRxFMZG72qTR9aJFjs.mft (raw, json)
Hash identifier: fXcsBghOW7jIZM45gMysHl6+UcMwvN7aVc1q0XQibS0=
Subject key identifier: 4D:93:84:05:D6:C2:68:21:C4:6E:DE:3C:AC:25:C3:08:05:C3:37:9A
Authority key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
Certificate issuer: /CN=eb97ce9635330f147114c646ef6a9347d689163b
Certificate serial: 0196A3531553ABB0CBECACA92CDEA113C016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
Manifest number: 14B5
Signing time: Tue 06 May 2025 02:00:53 +0000
Manifest this update: Tue 06 May 2025 02:00:53 +0000
Manifest next update: Wed 07 May 2025 02:00:53 +0000
Files and hashes: 1: 65fOljUzDxRxFMZG72qTR9aJFjs.crl (hash: uJfQYX/UuO99uxcyEbSQPWDRHRqnBXOpItcuCUVbhcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:53:15:53:ab:b0:cb:ec:ac:a9:2c:de:a1:13:c0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb97ce9635330f147114c646ef6a9347d689163b
Validity
Not Before: May 6 02:00:53 2025 GMT
Not After : May 7 02:00:53 2025 GMT
Subject: CN=4d938405d6c26821c46ede3cac25c30805c3379a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:16:15:13:cc:51:75:6e:c3:e9:f7:18:ca:
35:4c:d8:e0:31:19:54:36:49:0a:bb:74:03:76:4e:
71:ab:6d:39:05:26:f2:98:91:42:b2:7c:d3:11:f4:
9e:e9:21:9e:0c:d4:18:c3:7b:fd:77:f2:e7:41:89:
65:30:e5:42:99:7e:45:67:b2:2e:cf:bf:14:d7:e0:
5c:c7:0a:b5:19:96:41:30:ac:88:cc:b6:d0:26:dc:
aa:f1:fd:28:6f:26:4f:1f:43:1c:22:bd:bc:15:8c:
35:8f:f7:21:75:1e:d3:31:b5:bf:67:be:fb:55:8e:
67:28:a0:eb:f6:cd:6d:cc:b2:09:7d:cb:27:61:67:
c5:c2:f7:ef:47:6e:b2:77:37:b9:c7:ed:1d:61:6d:
57:6e:7e:0c:50:06:5a:18:5e:8d:f3:e0:4f:d8:fe:
29:0d:27:9b:a2:ab:4a:36:84:de:c4:4d:3b:4d:37:
5f:ec:f7:5a:25:11:ca:0e:e4:98:50:11:ef:3d:83:
2d:9b:ab:e4:83:bc:95:22:d3:f2:09:e2:6d:fa:5d:
00:45:13:2c:1b:d2:1b:ae:07:a5:b6:a9:7b:c7:41:
44:47:d8:11:8d:26:51:93:02:6d:3e:67:a5:c1:1e:
d6:06:07:9b:00:21:71:f8:b9:60:59:92:bb:34:d2:
80:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:93:84:05:D6:C2:68:21:C4:6E:DE:3C:AC:25:C3:08:05:C3:37:9A
X509v3 Authority Key Identifier:
keyid:EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:11:75:99:92:d5:ee:7f:70:37:f4:b8:20:8b:a3:49:f7:50:
c1:16:32:0a:d8:52:31:45:df:54:11:75:17:86:58:99:af:75:
b8:2c:b2:1e:f9:9e:fe:39:69:55:2a:da:8b:be:2a:22:53:ad:
5b:91:4d:77:f5:3d:a6:44:2f:9f:05:29:bc:1d:91:7e:b9:22:
33:08:26:94:6e:4b:28:23:3d:cc:96:a0:01:9b:49:85:97:d6:
8c:2b:ae:c2:ad:58:9a:35:b6:75:9e:5e:e7:30:78:c7:c2:c7:
a7:69:4c:a5:98:e8:9d:91:7e:95:a1:41:94:89:57:ff:6c:99:
45:9b:02:8e:4c:1c:77:87:e4:44:64:8f:c3:9f:13:38:e9:19:
73:9c:2c:8e:89:8a:ad:a9:86:fe:05:fb:e8:24:96:52:10:2e:
c4:16:46:88:a5:de:c6:00:9d:47:6b:e4:54:fb:ca:e2:7e:d2:
9e:42:2b:06:d3:1b:37:89:46:84:bd:62:d1:43:02:a9:2c:b7:
93:86:2e:86:ec:23:2b:d9:5f:e1:8d:6b:7f:5f:b3:0c:97:38:
a6:7c:fa:ff:a7:a5:bf:b2:67:e9:74:5d:c2:1e:15:8f:58:d2:
e6:11:26:f6:eb:1b:c8:74:e4:a6:03:b4:34:bd:12:de:dc:c7:
dc:bf:dd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:28:22 2025 by rpki-client