Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
File: Ad0iu63J75fJwaOGG21rTE3dhoc.mft (raw, json)
Hash identifier: tBoc8xt/mGJNQntIH3ZEjjcc6k+ngth28BHfq+Ckt2A=
Subject key identifier: A9:D8:E6:1A:2A:13:32:5B:BE:84:40:05:21:FA:72:17:28:D0:F1:22
Authority key identifier: 01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87
Certificate issuer: /CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
Certificate serial: 0196B3D911AD098A7DDA30188C51E4D658FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
Manifest number: 0F20
Signing time: Fri 09 May 2025 07:01:09 +0000
Manifest this update: Fri 09 May 2025 07:01:09 +0000
Manifest next update: Sat 10 May 2025 07:01:09 +0000
Files and hashes: 1: Ad0iu63J75fJwaOGG21rTE3dhoc.crl (hash: bAuc7JFsPDqyoXMq9fVNTem9Ho6G3HaPLPu45m8MoIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d9:11:ad:09:8a:7d:da:30:18:8c:51:e4:d6:58:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
Validity
Not Before: May 9 07:01:09 2025 GMT
Not After : May 10 07:01:09 2025 GMT
Subject: CN=a9d8e61a2a13325bbe84400521fa721728d0f122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:5e:77:6b:cd:63:43:73:ea:0b:50:71:70:
d4:26:27:50:79:60:50:a5:a9:68:b9:85:3a:c9:f3:
22:c6:84:ee:1c:8c:bb:36:0f:b9:88:26:10:09:c7:
22:17:1a:1f:3f:fe:1e:5e:3f:45:ab:6a:96:26:c2:
30:bd:41:e7:99:d3:82:87:29:83:a5:64:70:e2:c5:
30:fc:ca:12:04:9d:b9:bf:92:24:a0:6a:4b:d0:15:
ab:10:2f:30:ea:91:81:c5:94:12:f3:1f:80:29:59:
00:a1:9f:e1:5a:98:ce:35:71:f6:83:20:7b:29:00:
2c:73:13:66:62:8a:98:57:6b:db:5e:34:d7:57:b8:
a5:23:f7:14:0e:70:31:c7:95:7c:7d:5a:49:2f:dc:
1d:b2:b5:ab:f8:d8:2c:55:74:e1:51:9b:75:a9:91:
df:d1:53:8e:77:90:48:98:8e:f2:3d:ce:39:fe:19:
69:d4:3b:28:9d:41:58:7a:ca:3a:8b:83:fa:da:76:
2e:8f:c2:dd:c0:67:dc:b8:48:ef:a9:97:2a:16:73:
b5:50:67:d9:af:74:c7:95:f3:36:5b:24:cb:62:40:
e0:d0:cf:ef:48:e1:1a:f5:8d:99:0b:93:a6:88:8f:
50:2e:2f:93:0a:42:07:66:f6:88:02:fd:d5:79:ce:
70:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D8:E6:1A:2A:13:32:5B:BE:84:40:05:21:FA:72:17:28:D0:F1:22
X509v3 Authority Key Identifier:
keyid:01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d2:bb:fe:f3:79:4b:a8:7e:f8:a9:1d:ad:cb:16:ad:79:2d:
2d:34:c9:77:41:88:96:ba:f8:4b:3e:d1:c2:93:11:bc:7f:f9:
7f:37:64:9a:08:d6:6c:be:bc:d7:1d:e5:26:e3:0f:08:9f:ba:
b7:30:14:94:18:f3:a4:73:5b:54:82:8c:fb:64:5b:d7:40:9c:
fc:ac:9d:fa:7a:8f:3d:14:d2:8a:13:b4:ae:b2:67:5f:66:cf:
5c:e8:0b:79:58:ed:11:c6:09:bc:45:16:d3:ba:fc:71:a7:82:
2f:a2:97:af:b8:5c:1e:00:ac:22:c0:65:0a:c2:d3:81:5c:1c:
89:4e:5c:7d:61:a8:e1:10:bc:d0:b6:67:36:4b:37:50:84:64:
40:de:2d:cc:7b:f9:65:46:40:84:7e:96:ee:04:bf:1a:a9:fd:
f4:18:24:09:66:7c:e1:5f:f4:fd:cc:c3:18:39:2d:c5:c2:81:
d4:ca:28:d4:23:4d:b9:32:1a:c0:ba:2b:38:eb:76:27:4f:f2:
b8:4b:ae:1e:23:a1:f6:f3:42:9f:71:7f:95:a3:d7:94:b3:0b:
7c:c3:65:4d:b2:db:27:78:31:e2:63:7d:02:53:d6:53:f7:9e:
af:ab:a2:0a:17:77:8c:74:77:62:a3:00:f4:72:42:cc:f1:a0:
9a:82:57:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:40:43 2025 by rpki-client