Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
File: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft (raw, json)
Hash identifier: QXH92DAx/MCFLQvSAdvl/RVtLgPqxDJHhWZ1C2HCorg=
Subject key identifier: AA:D6:1B:9D:38:72:3C:11:D4:9E:82:C1:F3:E6:ED:1A:1B:59:F8:1B
Authority key identifier: D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
Certificate issuer: /CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Certificate serial: 01969F764F54A1903A95B9AC7D67B441E484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
Manifest number: 11E2
Signing time: Mon 05 May 2025 08:00:53 +0000
Manifest this update: Mon 05 May 2025 08:00:53 +0000
Manifest next update: Tue 06 May 2025 08:00:53 +0000
Files and hashes: 1: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl (hash: Anci8yprimoGSxybfmK0ZsIq6h+6xS4O+7fdia/2uEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:4f:54:a1:90:3a:95:b9:ac:7d:67:b4:41:e4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Validity
Not Before: May 5 08:00:53 2025 GMT
Not After : May 6 08:00:53 2025 GMT
Subject: CN=aad61b9d38723c11d49e82c1f3e6ed1a1b59f81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:33:ff:54:45:0a:55:93:9b:46:2e:32:eb:
de:c0:ad:60:f9:a5:22:2e:00:a2:d0:ee:7d:7a:21:
06:a3:52:52:63:c1:25:c2:13:2f:9c:e7:fa:b8:49:
01:37:1c:29:d7:af:e4:37:af:fe:16:7a:e4:3b:93:
36:12:05:52:72:fe:23:0d:03:90:29:be:7d:74:18:
e4:1d:9b:1f:c1:2d:93:f2:73:7a:40:b3:3d:78:91:
84:72:c4:db:7e:1f:f8:61:51:d2:e9:eb:50:50:20:
68:6d:3c:fa:f5:83:71:46:00:3a:02:3c:8c:1b:dd:
5b:64:0e:90:9d:cf:76:0a:b1:c8:59:c8:94:59:5f:
a5:c2:03:68:b5:ef:a1:1a:04:66:e6:87:3c:72:4d:
b1:c0:cd:54:67:50:46:78:2e:30:a9:53:71:f8:08:
fc:fd:1e:b1:03:d4:53:90:62:8a:f6:cd:1f:3f:ae:
d4:d3:0c:c5:db:eb:55:a4:4a:46:28:ce:56:d7:30:
e8:0f:c1:15:46:c4:71:a8:c6:e5:60:cb:4f:bc:b4:
94:90:5e:f5:9d:7e:ee:55:90:0a:20:cf:d3:26:06:
05:de:9a:ef:df:70:13:f8:24:5b:0a:f7:2c:d4:6d:
31:85:cb:29:21:d1:bc:c1:43:c5:a9:60:4c:2f:c2:
49:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D6:1B:9D:38:72:3C:11:D4:9E:82:C1:F3:E6:ED:1A:1B:59:F8:1B
X509v3 Authority Key Identifier:
keyid:D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:62:59:4a:b4:b0:61:42:7e:44:15:be:92:f1:20:b3:60:6a:
64:cf:a6:4e:6f:fb:50:82:a4:e0:48:22:38:e6:c2:50:9e:9d:
9b:8e:8b:c9:b4:7d:80:70:b0:11:01:1d:bb:43:88:b6:4b:24:
89:9e:02:d2:56:80:d7:9d:e6:b5:5a:36:d1:74:71:8b:74:d8:
59:a2:ac:28:3f:67:a3:1a:5b:99:17:d7:f9:ae:51:2e:76:c3:
d4:18:78:83:4c:cd:a9:5f:04:67:4e:e4:d8:40:42:aa:2b:e4:
fe:0c:a7:93:7d:4a:25:c7:1a:41:51:de:62:36:d5:ec:c1:f8:
91:6b:95:1c:c4:d9:1b:36:31:81:c6:bc:e1:66:69:39:b6:61:
12:c1:02:27:cc:bc:bc:74:43:ec:97:ef:71:dc:b7:dc:a3:40:
0a:b4:0f:76:35:f1:c0:c3:1b:4e:c4:61:cd:da:ac:5c:39:fa:
5d:ca:1b:c1:3e:29:03:8a:34:32:bc:86:2c:f3:82:ed:26:87:
4c:ba:e3:d5:1d:23:0b:3c:75:30:29:0a:b2:57:3b:77:f8:97:
8b:fa:0b:50:fd:04:40:0c:5c:08:99:b2:0b:75:cb:05:c6:e9:
4a:42:d3:90:96:ee:ba:18:fd:f4:cc:79:41:63:98:dd:e7:fa:
43:5b:5e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:28:59 2025 by rpki-client