Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
File: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft (raw, json)
Hash identifier: GfvNgNM+HefckAnr7G5HxNVcfq2+wyANmbQloG6U9PI=
Subject key identifier: 01:A7:0C:6D:7D:B4:E1:70:92:57:7D:4F:9D:8C:9E:50:49:10:B5:90
Authority key identifier: 21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
Certificate issuer: /CN=21d85d231ad54b8439c2aaed91a577586ac46000
Certificate serial: 0196C683E4340327D18B45BC6D27D5EE4B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
Manifest number: 103A
Signing time: Mon 12 May 2025 22:00:54 +0000
Manifest this update: Mon 12 May 2025 22:00:54 +0000
Manifest next update: Tue 13 May 2025 22:00:54 +0000
Files and hashes: 1: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl (hash: /v46Z5fTv5E0z5MCHT8Xi32llrzpnYAQ+17HHYXEJFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:e4:34:03:27:d1:8b:45:bc:6d:27:d5:ee:4b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21d85d231ad54b8439c2aaed91a577586ac46000
Validity
Not Before: May 12 22:00:54 2025 GMT
Not After : May 13 22:00:54 2025 GMT
Subject: CN=01a70c6d7db4e17092577d4f9d8c9e504910b590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3c:d9:54:eb:2f:11:d1:6c:07:4f:77:2a:34:
62:46:a9:df:75:53:93:40:65:d6:b0:c4:bf:35:ad:
89:02:0e:62:c1:7e:b9:25:b6:f7:57:72:63:ad:e6:
78:60:17:6b:40:1a:1b:2d:c2:33:e9:85:64:65:b2:
7a:7c:d7:f7:97:fe:a3:a3:5e:f0:9c:2a:c1:7c:a7:
e4:0d:da:ed:24:2c:bd:3b:b0:c6:75:fd:63:e0:38:
c7:a4:81:3e:0a:aa:4e:85:0f:47:5c:b8:b0:71:3d:
06:34:22:02:68:e7:8c:15:e2:13:59:cb:90:76:27:
f9:c5:22:46:a0:48:85:dd:34:55:71:6b:70:8b:9f:
27:12:3a:bb:af:bc:03:b3:12:ec:8f:73:36:8a:ec:
7f:6c:22:bf:9a:ca:b5:76:51:2b:65:04:96:df:f7:
f6:45:af:17:ba:20:03:0e:4d:4d:a3:e4:f2:54:c1:
bf:e4:e7:6b:de:0e:88:fe:ee:e5:30:e8:2d:db:d2:
c2:45:85:03:d5:12:2f:fe:50:61:2d:15:54:83:c9:
14:14:ea:75:a9:f8:ed:fe:f2:2d:57:42:c8:af:a3:
c2:7b:10:32:16:69:63:ab:bb:53:5d:52:b4:d9:34:
36:b3:ab:44:fa:98:54:ed:b7:86:52:8e:5f:aa:e4:
51:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A7:0C:6D:7D:B4:E1:70:92:57:7D:4F:9D:8C:9E:50:49:10:B5:90
X509v3 Authority Key Identifier:
keyid:21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0e:03:0a:75:72:6d:9b:4f:b0:63:2d:5c:c8:3c:33:f6:56:
67:93:df:0c:99:b9:68:89:42:f4:e0:f0:5c:1c:c5:ca:25:9e:
d4:80:de:67:ea:68:65:ff:5c:91:c8:0f:67:be:03:6d:cc:8f:
3a:8f:b6:a9:df:19:eb:0a:88:88:b8:23:51:a3:d4:a6:85:1c:
61:df:50:55:e1:23:27:5c:46:4d:a6:e0:f7:ce:04:6b:10:82:
a1:32:9b:fd:aa:89:79:c4:bd:a3:9a:e1:01:8e:70:b1:10:95:
71:03:66:e7:55:a0:f6:44:29:24:1c:c5:bf:de:90:51:03:ce:
89:d1:17:66:ab:05:a1:6c:3b:54:fe:ca:a4:e6:5a:90:46:0d:
9a:d0:53:55:83:02:1e:05:a6:80:07:57:87:69:7d:92:0b:85:
b3:9d:4e:da:61:00:d3:13:46:a7:55:7b:73:23:7d:3b:39:59:
43:54:f6:60:7a:a8:1c:3f:1d:f9:ee:17:e7:db:c8:39:b8:d5:
86:d6:72:d0:6a:14:e8:e1:0d:fa:7b:3c:df:04:eb:f7:cb:f2:
f4:52:34:89:23:37:ff:d5:3a:45:bd:e0:68:b5:11:46:1b:c9:
55:de:b9:66:20:45:36:f9:8d:c9:d5:60:92:27:04:9f:0a:cf:
95:e5:c8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:45:19 2025 by rpki-client