Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
File: V9minRgOgZpHgvtsbqFtOn0ykQA.mft (raw, json)
Hash identifier: FqlN9lPekFkml5auq9nsU0TMF/w7fBEPxI0NMsSk5T8=
Subject key identifier: 26:D2:02:8D:3D:8E:2F:71:03:A5:4F:41:45:F7:6E:9C:8A:87:4E:EB
Authority key identifier: 57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
Certificate issuer: /CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
Certificate serial: 0196CCF350F87AC73AB03122DF4AC59E0501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
Manifest number: 0751
Signing time: Wed 14 May 2025 04:00:20 +0000
Manifest this update: Wed 14 May 2025 04:00:20 +0000
Manifest next update: Thu 15 May 2025 04:00:20 +0000
Files and hashes: 1: V9minRgOgZpHgvtsbqFtOn0ykQA.crl (hash: ZKDUTGaz5NMwcZcRWQHSsL42CK+z/ppMFGYtZyApmcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f3:50:f8:7a:c7:3a:b0:31:22:df:4a:c5:9e:05:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
Validity
Not Before: May 14 04:00:20 2025 GMT
Not After : May 15 04:00:20 2025 GMT
Subject: CN=26d2028d3d8e2f7103a54f4145f76e9c8a874eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:0a:ab:61:2e:a2:3d:5e:e7:85:ad:b4:b0:
e3:ab:e8:21:52:d5:f9:7b:a7:bc:fd:26:37:76:63:
d8:69:6c:d6:69:9e:9d:7c:4d:72:74:04:9e:2e:6c:
90:9b:bc:87:22:51:50:55:f6:55:42:c1:8c:7c:f3:
ba:7e:64:c3:44:34:d0:6c:0a:0a:9d:6c:c3:dd:38:
6c:3f:b8:59:fa:f3:42:f5:5a:b5:84:31:dd:73:98:
af:94:09:ea:8f:c1:bb:f0:38:cc:77:6a:1e:67:a1:
7c:be:8c:66:62:8f:ed:00:44:df:e4:3c:72:da:01:
ae:6e:47:c8:5b:16:3b:9c:6d:ac:da:35:09:51:49:
a7:26:52:f3:85:9d:bd:81:9f:3b:87:15:1d:ad:80:
0e:0f:86:0f:51:99:ef:a1:77:08:1d:20:4c:bc:ab:
9b:b1:f5:a5:53:72:32:95:a3:00:c0:72:a9:be:85:
12:88:b2:4e:af:1d:0a:c4:7e:6e:69:de:35:93:6a:
c2:7f:7e:ae:41:d2:33:ff:09:20:90:49:d7:7e:aa:
e3:67:1b:8b:da:d0:0a:0f:c2:5a:ab:7d:e5:06:80:
7c:fe:3c:a8:72:93:8f:e9:01:7e:3d:df:d7:cc:44:
23:8f:c2:07:70:5e:8c:60:0e:e6:a4:d7:f9:63:e5:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D2:02:8D:3D:8E:2F:71:03:A5:4F:41:45:F7:6E:9C:8A:87:4E:EB
X509v3 Authority Key Identifier:
keyid:57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:18:a6:e3:fc:a1:73:bc:b3:97:4c:89:2d:ab:d3:20:f2:10:
d2:a9:f7:15:9d:1e:68:19:c3:b8:2c:15:39:9e:8e:79:df:c4:
0b:55:89:37:9b:81:d4:df:48:1a:31:87:14:b2:0e:b7:11:86:
1b:b0:da:18:e4:9a:3d:63:a2:44:c4:19:2f:ff:6a:b9:1d:de:
41:47:3a:26:45:53:38:3b:d3:2b:86:bd:d3:f7:85:93:5e:05:
12:60:be:e9:f5:a3:8e:38:0e:89:e1:8f:50:fb:41:2d:08:d0:
aa:d7:88:16:ba:6c:e0:75:49:68:44:97:d7:30:66:54:2d:97:
68:5e:9a:52:69:99:43:21:10:20:b7:4e:95:57:c5:72:e2:2f:
30:27:5d:18:53:0b:03:93:21:fa:1e:bc:ca:51:5c:0e:72:cc:
8a:44:14:04:ac:24:0d:9d:b4:0f:b6:ba:d7:44:e2:26:e1:fc:
b7:c6:97:b3:1a:1e:ae:f8:93:69:2c:4e:15:95:7f:e3:69:7b:
97:fe:e3:88:f4:52:ec:e7:61:7f:12:ca:e8:2c:db:77:b7:03:
a5:c9:a9:34:7e:06:38:1c:3f:b9:bd:9c:e5:6f:81:88:38:1e:
a0:45:35:6f:58:86:c6:a7:97:72:d8:46:67:15:63:62:ce:b9:
4b:a8:d1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:27:10 2025 by rpki-client