Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
File: F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft (raw, json)
Hash identifier: T7gvjfnQPEF8+eZBqXcSF0lHEIIr9/C/7dWQBlgvZMo=
Subject key identifier: 04:85:A9:27:D5:91:AE:07:BD:BE:81:FA:01:88:84:4B:37:DE:BE:A2
Authority key identifier: 17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5
Certificate issuer: /CN=17a16657a2497737ca03621cc668d20c762136d5
Certificate serial: 0196C239661C87615FB752CBE4D3D30D117B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
Manifest number: 0CD8
Signing time: Mon 12 May 2025 02:01:03 +0000
Manifest this update: Mon 12 May 2025 02:01:03 +0000
Manifest next update: Tue 13 May 2025 02:01:03 +0000
Files and hashes: 1: F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl (hash: uJVbVhqDXnU7RMoji5A66+yPaPJED8Jw1FUnLuhVQ60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:66:1c:87:61:5f:b7:52:cb:e4:d3:d3:0d:11:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a16657a2497737ca03621cc668d20c762136d5
Validity
Not Before: May 12 02:01:03 2025 GMT
Not After : May 13 02:01:03 2025 GMT
Subject: CN=0485a927d591ae07bdbe81fa0188844b37debea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:14:a4:ed:b1:04:77:98:91:49:8e:23:16:
c6:8d:be:b6:de:36:cd:af:3e:46:ea:be:d5:79:f7:
71:ae:1a:a9:23:a3:5c:99:e5:29:c7:b6:f3:37:02:
af:ff:39:8f:df:6e:9b:d8:85:39:80:3f:74:3a:36:
68:d3:ac:49:8a:f0:51:8e:c9:d3:a4:aa:fc:55:7d:
fd:b5:ee:75:ee:59:12:b1:bf:ad:c9:34:4d:d8:b1:
c9:aa:62:96:67:e9:55:07:4a:87:1f:00:12:db:e6:
ed:69:33:f3:dd:8e:3d:b3:a7:be:ce:30:53:4b:56:
a1:8e:4f:eb:63:27:0c:4a:0d:f5:17:9f:76:4f:c0:
d0:a4:c2:a5:04:81:07:a5:e1:46:cb:aa:07:6d:c4:
d7:30:ef:47:b7:b5:fa:f0:2e:ec:93:6b:0f:f4:c8:
03:7c:9c:99:93:e2:18:80:a5:1f:3b:b4:6a:d1:37:
c7:19:df:83:cb:17:60:ba:20:8f:05:fe:6c:aa:fd:
75:6f:96:01:9e:50:6a:ee:5c:7e:3b:ac:f0:82:fb:
3b:5f:50:22:be:0b:62:3e:a6:15:16:3e:9f:64:b8:
da:ac:c3:a4:ca:91:05:1a:d2:b2:22:b8:ed:4e:a1:
96:5a:f7:ec:0b:39:56:f4:cc:1f:82:fc:ee:cf:85:
04:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:85:A9:27:D5:91:AE:07:BD:BE:81:FA:01:88:84:4B:37:DE:BE:A2
X509v3 Authority Key Identifier:
keyid:17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e3:d0:38:a3:ec:fe:bb:06:6a:4f:dd:63:c7:c0:2b:67:69:
ae:18:64:be:bb:2f:81:b9:59:f4:9c:22:25:eb:68:f1:39:04:
27:ae:95:b0:3b:f7:82:68:58:2d:60:f9:fb:c0:59:1c:40:a5:
43:77:92:f5:be:81:80:b0:b0:57:62:42:25:14:e1:5a:7b:2d:
08:7c:6a:c7:05:8d:0a:2f:0b:ce:22:c2:98:9a:5b:0b:23:90:
c9:6c:fd:2a:d0:b2:d6:39:18:04:25:44:60:77:35:37:33:bb:
d0:61:4f:62:73:58:47:d9:25:79:b4:bb:3a:43:47:fc:8b:15:
7d:6c:d5:6c:b5:c4:ff:0e:b8:14:43:07:48:01:60:b1:11:ce:
81:e6:38:b5:8a:6d:e1:38:7d:f4:12:83:b4:4f:ec:fd:80:80:
a6:1e:ba:6f:da:b4:b2:19:60:3b:1b:98:db:c5:2e:27:9c:bd:
e3:b1:67:1f:bc:e9:f2:03:bd:ac:9e:4b:38:ae:aa:24:6f:99:
cb:b3:82:c0:9a:27:b6:c6:59:02:bb:80:ab:dc:52:07:d7:3c:
08:ef:3d:e7:68:03:67:b4:6a:0e:73:d8:08:61:5d:eb:ae:fa:
35:b7:f2:95:89:6c:11:c6:82:32:17:aa:bf:93:c9:71:08:50:
f9:44:4b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:41:17 2025 by rpki-client