Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
File: idXRKIo8KuF_mcuxiRdwAYm9RyA.mft (raw, json)
Hash identifier: dYU+JOYxjYdjnpIPVuFCX+0T6sC4dO7ESnnufLa1ROo=
Subject key identifier: E9:E4:1B:CD:B6:B7:BA:F0:A1:EE:84:E0:2B:C3:B0:66:D6:BD:EE:1E
Authority key identifier: 89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
Certificate issuer: /CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
Certificate serial: 0196D51B4A9B151CB390C1A20C75E6673002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
Manifest number: 0F91
Signing time: Thu 15 May 2025 18:00:57 +0000
Manifest this update: Thu 15 May 2025 18:00:57 +0000
Manifest next update: Fri 16 May 2025 18:00:57 +0000
Files and hashes: 1: idXRKIo8KuF_mcuxiRdwAYm9RyA.crl (hash: UkVkZtIjxnoVA+g+E3ilbLXzCXp8eyaT+5R/ThTEGXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:1b:4a:9b:15:1c:b3:90:c1:a2:0c:75:e6:67:30:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
Validity
Not Before: May 15 18:00:57 2025 GMT
Not After : May 16 18:00:57 2025 GMT
Subject: CN=e9e41bcdb6b7baf0a1ee84e02bc3b066d6bdee1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:32:ed:11:da:e8:72:82:7a:03:c0:13:9f:
e5:e9:ee:a9:9d:40:70:92:23:5e:b8:15:e4:8c:49:
1b:b6:91:88:e3:40:dd:84:ae:ec:72:08:f2:e6:f7:
aa:1d:0f:b9:35:96:c9:c6:88:f3:c2:4b:bd:a4:bf:
d7:21:2d:d1:2b:c8:1d:c5:aa:09:e3:25:52:23:8c:
7b:ac:62:ac:e1:ee:83:f0:bd:6e:83:49:5c:bd:ec:
31:af:04:62:ef:1e:72:37:24:b3:f7:83:ac:05:92:
64:89:ca:6c:9c:ed:db:ae:3f:ae:43:4c:40:f3:ca:
a7:33:25:f4:79:82:a7:9c:00:60:b0:b5:80:36:8c:
84:23:30:d9:97:d8:ca:4d:94:59:86:bb:46:a5:d8:
e3:a1:7e:31:5b:6b:91:64:e3:8d:63:ce:3c:b5:53:
ae:8e:b6:dc:71:e1:73:58:c2:3c:2f:49:e3:68:ae:
2c:d8:87:cf:4e:cd:4c:93:86:4b:85:3e:36:e7:48:
37:a1:1a:52:61:b9:89:f6:c4:56:df:3a:b6:7b:4e:
68:6d:1a:d8:a5:da:38:d9:8f:79:47:34:5b:c5:95:
16:1c:96:ab:b7:cd:b3:cc:7b:1b:fb:45:f9:47:31:
41:b1:71:ec:f3:45:b9:33:a8:27:ae:1b:5c:c5:00:
5e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E4:1B:CD:B6:B7:BA:F0:A1:EE:84:E0:2B:C3:B0:66:D6:BD:EE:1E
X509v3 Authority Key Identifier:
keyid:89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f5:86:b3:1f:da:7c:62:92:6c:50:37:f1:f8:74:55:d2:7d:
e9:c8:44:45:90:42:5a:eb:b1:e0:ce:2d:cd:b1:9f:ef:53:86:
3c:50:8c:ef:f6:41:61:9c:8d:99:f3:1a:11:70:ce:d2:15:54:
22:de:10:42:3f:bb:2a:3f:79:0e:bf:97:4d:25:22:f5:60:28:
9d:5b:64:02:b7:22:3d:bd:09:77:22:9e:96:a5:4f:95:50:37:
59:d9:f9:59:c2:b1:bb:85:1f:dc:ce:89:04:57:7d:02:4c:53:
3b:92:59:8f:7a:f0:ae:2f:72:cc:2a:f2:56:4c:31:7a:25:06:
fa:6d:57:d6:57:44:05:08:8e:46:35:2b:bf:68:13:06:6a:bb:
8d:02:c7:e7:ca:ed:50:de:17:2b:7d:ae:55:51:b8:4d:c9:39:
ec:da:41:09:af:f4:1f:ff:01:96:f3:74:a2:27:11:47:d5:90:
5e:9d:f8:5b:d4:1a:6c:b9:73:27:50:8b:5d:83:2f:bb:3f:ee:
32:5a:ee:11:94:41:95:e7:6d:57:f2:70:35:69:b4:e1:d3:5e:
d3:4f:a0:80:2b:fc:25:77:fa:a9:71:72:a1:9c:21:57:43:b6:
e4:a8:75:3e:af:45:1a:d9:1d:5e:eb:f9:6f:89:13:87:f5:e3:
7f:bd:d7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:10:17 2025 by rpki-client