
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
File: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft (raw, json)
Hash identifier: Dd5JbY8QwpEqM/a0lI5SgdufaErzlPtotYQIop4Ewqw=
Subject key identifier: 9E:93:16:33:88:EB:5E:E5:73:29:2F:28:67:9A:B0:D3:83:89:B5:A4
Authority key identifier: 15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
Certificate issuer: /CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Certificate serial: 0196CEAB0F4B634E483BF2DB2A46F4F7D140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
Manifest number: 0816
Signing time: Wed 14 May 2025 12:00:39 +0000
Manifest this update: Wed 14 May 2025 12:00:39 +0000
Manifest next update: Thu 15 May 2025 12:00:39 +0000
Files and hashes: 1: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl (hash: 1FOADgWaPoFrsTK7NPvDlzWyY5YjiXpvc7Hya1n9COk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:ab:0f:4b:63:4e:48:3b:f2:db:2a:46:f4:f7:d1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Validity
Not Before: May 14 12:00:39 2025 GMT
Not After : May 15 12:00:39 2025 GMT
Subject: CN=9e93163388eb5ee573292f28679ab0d38389b5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2f:43:34:63:7a:fc:67:38:bf:db:e0:4d:6f:
38:3a:67:de:ab:95:18:4a:67:ca:7a:f0:c8:6b:fa:
f7:5c:d8:cc:1d:61:11:79:c7:40:1a:b6:8f:3d:71:
71:84:f9:18:f6:72:32:31:40:75:4d:c2:99:73:1f:
32:12:a1:0a:23:0d:ce:01:aa:1b:63:d7:e4:ed:9c:
26:e2:f5:95:d0:eb:d7:f2:c7:fe:8f:4d:61:fa:39:
cd:8d:a4:0f:b3:0b:d6:8f:e6:20:f6:6e:eb:f8:28:
7b:1f:32:83:11:f5:83:85:23:47:0a:a3:68:da:f6:
05:1a:19:ea:69:14:94:65:5c:6f:8c:52:3a:75:7f:
06:15:ee:80:08:20:56:ca:e0:75:ac:f2:7d:ee:5c:
b8:a4:4c:db:9d:48:03:05:40:cf:8f:36:eb:60:30:
8c:32:a1:2e:e4:8d:75:ca:4c:2f:19:4e:68:9d:cb:
c3:41:e7:39:5a:64:20:8e:0e:f2:8f:75:58:cd:17:
e0:2a:9f:fc:25:a4:49:6c:89:c0:2a:4b:99:d8:ac:
1e:77:ee:40:7b:c5:a0:00:0d:3c:92:89:5b:8b:d0:
81:61:00:b4:0f:51:2e:7c:83:1d:c8:7f:d4:b6:ff:
50:a2:f8:95:93:c4:6e:3c:4b:32:74:25:e0:9d:cc:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:93:16:33:88:EB:5E:E5:73:29:2F:28:67:9A:B0:D3:83:89:B5:A4
X509v3 Authority Key Identifier:
keyid:15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d2:c0:71:64:73:65:54:a7:40:b8:a0:74:cb:00:8c:2d:60:
72:ee:cc:68:7b:70:a6:16:72:d8:4a:dc:fe:25:f8:a9:ef:3d:
d5:6c:31:c7:bb:ee:2e:d0:e6:20:28:dd:c7:27:ba:b9:de:77:
17:08:de:d7:5e:13:25:7e:fd:c1:e5:c3:be:a2:22:b2:f1:a5:
b3:47:ef:76:d5:d3:cd:d6:12:b4:3b:61:f8:15:64:06:3e:a9:
45:a1:75:85:a0:a6:96:5f:49:8e:db:2c:fb:27:3c:1d:b3:96:
18:2b:74:a1:d2:13:8d:35:6d:c6:7f:59:53:11:3e:f9:7e:fd:
31:36:f1:b5:fe:e1:54:2b:7a:7a:c7:79:a2:25:e5:4a:2e:76:
ea:dc:c1:6c:2e:11:82:84:a9:ee:a7:48:31:16:91:96:1f:3f:
d5:9f:47:cb:b8:da:70:27:de:df:ac:af:55:56:3f:ed:38:4b:
82:2c:a6:08:b9:e3:24:6f:ba:a4:c5:0e:4f:4d:b7:94:86:98:
7b:2c:c6:31:40:b7:9d:9d:59:2f:53:5a:bb:98:a3:b8:36:20:
51:7d:59:1a:50:df:9f:b5:2e:a3:00:ee:f5:bf:34:fc:ab:88:
e1:74:f9:45:75:3b:a8:a4:47:7c:c3:c0:07:ea:65:96:31:c3:
4a:35:26:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 21:56:34 2025 by rpki-client