Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json)
Hash identifier: cG23IYyp/xMZX6s3fAfDWgMQzjufr67CdEWoy2IRZ2A=
Subject key identifier: F1:4A:12:62:BD:AB:32:52:12:C3:01:6D:B0:AA:1B:F6:28:26:C1:5D
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial: 0196C013AF5393F31052CB25720982F8A8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
Manifest number: 04F3
Signing time: Sun 11 May 2025 16:00:37 +0000
Manifest this update: Sun 11 May 2025 16:00:37 +0000
Manifest next update: Mon 12 May 2025 16:00:37 +0000
Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: VUb/T1FiZf/6FVRZzO5UhstZqIoygtCeqOI/s0+UcP0=)
2: D6pvp9exGoAv4Fjni5vR2Sb2Jhg.roa (hash: 7ummeZWhXvxjEX54lXU+dJ5Fl+ldbxWm0dddjLg/WHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:af:53:93:f3:10:52:cb:25:72:09:82:f8:a8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Validity
Not Before: May 11 16:00:37 2025 GMT
Not After : May 12 16:00:37 2025 GMT
Subject: CN=f14a1262bdab325212c3016db0aa1bf62826c15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b7:7e:ba:a5:de:8c:2d:e9:06:f2:b1:4a:d9:
05:93:bd:56:87:a1:e2:55:a1:fe:0b:c0:18:03:7c:
4a:a4:af:68:89:4c:06:af:42:10:1b:d1:6e:a3:d4:
e3:55:a8:0d:57:37:93:9b:21:d4:0e:11:ca:98:ff:
67:d1:62:36:cf:f5:4e:31:36:9e:2b:80:4b:0a:0d:
2b:6b:c7:f9:d9:f9:da:ab:fb:54:61:60:2e:89:b1:
47:5f:50:bd:66:88:01:b3:c7:a2:09:5a:e2:8d:4a:
f3:51:5a:73:d3:0c:4a:12:8c:03:90:6e:29:d8:50:
85:85:d5:b3:d9:aa:f2:53:22:e0:97:a3:cc:59:d9:
15:69:6d:ab:57:56:75:6d:13:6c:50:1d:1f:af:06:
2e:35:ef:cb:bc:9e:8a:39:c1:9f:92:29:9c:1b:dd:
9a:75:29:3b:c4:e3:ac:95:86:a6:5f:71:35:6d:e8:
cc:9d:9d:d6:ad:58:aa:f1:c0:3e:d7:9c:6d:e3:f5:
78:cb:83:d6:67:92:98:c9:f2:f8:37:aa:e6:62:f2:
6d:97:1d:aa:3a:27:bb:48:16:30:46:b5:35:2f:21:
40:5f:ac:48:a5:29:58:61:e0:c5:ec:d8:f0:04:df:
7f:bd:da:13:ae:27:2e:dc:85:bb:cd:42:f1:58:b3:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4A:12:62:BD:AB:32:52:12:C3:01:6D:B0:AA:1B:F6:28:26:C1:5D
X509v3 Authority Key Identifier:
keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:49:bf:91:92:72:a4:bd:56:3e:5e:07:3a:0b:c8:20:42:68:
90:06:b2:82:7c:1a:a9:52:7c:0b:c1:43:17:9b:63:56:19:ff:
3b:5d:77:c9:62:05:2a:84:fd:6a:77:5b:e1:23:5e:04:f8:38:
a8:49:c8:db:4b:95:e5:d1:bf:ed:85:14:4f:85:4a:14:4f:15:
41:3e:3f:dc:31:61:45:3c:a5:fc:2f:c4:7a:fd:0c:5f:f5:0e:
19:ef:d0:65:ab:90:52:cf:1e:5e:89:5f:2c:8a:61:0a:4d:7b:
90:7f:82:8f:58:0b:ae:65:d3:63:5a:93:93:dc:1a:11:0d:26:
d7:49:6c:d2:87:a1:4c:63:ae:f8:26:46:68:1d:78:7b:74:0c:
2a:e7:63:36:37:48:b3:98:d4:cf:56:80:d9:84:fb:f9:87:04:
33:25:19:c2:f7:30:d9:49:34:13:df:c5:f5:ca:4f:aa:1c:25:
6c:5d:80:fd:3f:1f:ee:0b:f4:32:3d:93:9c:c3:20:fe:23:94:
36:b6:3f:e3:9c:f2:72:ff:ec:a6:f3:21:7c:3b:3f:55:2d:c7:
8d:72:5f:f7:27:ef:6a:e1:a0:61:dc:2d:ee:f1:20:88:41:f7:
2d:1c:49:af:c1:cc:b4:43:12:d2:25:89:68:6f:0e:f9:78:f7:
2e:0c:a7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:32:29 2025 by rpki-client