Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
File: St2XYC4ZGOerwfYtz9TaynNJmz4.mft (raw, json)
Hash identifier: sClu41fOYdzBN69xNSNu/WcUwLerfxTGHB0siIQOuw4=
Subject key identifier: 08:C7:05:86:BB:3E:A8:F4:1A:34:7C:E6:64:76:19:62:01:EF:75:5B
Authority key identifier: 4A:DD:97:60:2E:19:18:E7:AB:C1:F6:2D:CF:D4:DA:CA:73:49:9B:3E
Certificate issuer: /CN=4add97602e1918e7abc1f62dcfd4daca73499b3e
Certificate serial: 0196BDEE7F8FC7F5902F4EC6DD0CD81B262B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
Manifest number: A0
Signing time: Sun 11 May 2025 06:00:46 +0000
Manifest this update: Sun 11 May 2025 06:00:46 +0000
Manifest next update: Mon 12 May 2025 06:00:46 +0000
Files and hashes: 1: St2XYC4ZGOerwfYtz9TaynNJmz4.crl (hash: zLTWMPRB+1jd6lbEAsqJsTM8Li4BQ3wwYjA7ouGskB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:7f:8f:c7:f5:90:2f:4e:c6:dd:0c:d8:1b:26:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4add97602e1918e7abc1f62dcfd4daca73499b3e
Validity
Not Before: May 11 06:00:46 2025 GMT
Not After : May 12 06:00:46 2025 GMT
Subject: CN=08c70586bb3ea8f41a347ce66476196201ef755b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3e:6e:51:6f:8b:7a:07:54:f9:bc:9c:f4:84:
3a:95:dd:99:13:07:c3:e6:da:b4:26:3f:a3:36:10:
58:b8:1e:65:5f:2d:17:44:60:20:1c:9b:e1:10:b7:
6b:f1:bc:ec:1d:d4:af:c6:b5:52:c0:3f:a4:38:14:
6c:3b:d8:06:ed:53:33:70:0a:5b:9a:45:b5:10:87:
8b:f7:15:d8:12:88:e3:23:fd:d0:37:cf:e6:12:b1:
63:c7:bc:c3:c0:a3:14:c8:a7:11:eb:a1:69:13:cd:
ef:67:d8:e4:b0:6f:dc:3e:26:fa:04:c4:6f:70:72:
52:01:ad:3b:9d:30:98:de:59:0d:63:6d:ea:dc:e3:
3e:b1:58:8f:62:07:0f:70:a3:46:c1:d9:06:ae:46:
b4:6d:71:e6:31:c7:76:03:74:31:be:d3:d8:80:5b:
59:3a:41:38:7d:61:3b:f1:0f:76:89:ac:ab:7b:e5:
46:9f:95:e1:cb:2a:c7:c6:4b:12:b6:86:c0:2b:88:
3f:1e:f7:f0:63:ee:39:d9:63:dd:de:00:80:91:eb:
12:7f:53:60:75:97:33:c5:85:b2:08:5c:2f:04:f5:
44:eb:bd:e3:4e:f0:bf:ef:b1:50:0d:27:ee:1e:34:
d1:f3:ab:f6:16:79:5b:3a:2a:05:da:aa:7d:56:ea:
bc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C7:05:86:BB:3E:A8:F4:1A:34:7C:E6:64:76:19:62:01:EF:75:5B
X509v3 Authority Key Identifier:
keyid:4A:DD:97:60:2E:19:18:E7:AB:C1:F6:2D:CF:D4:DA:CA:73:49:9B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:50:c0:dc:67:bf:56:21:06:0e:a6:70:22:cc:63:81:3e:e2:
50:7d:d6:b3:9b:c5:be:e5:91:92:c1:ac:2d:ee:b9:56:b3:92:
1a:b5:ef:9a:ac:35:c0:e8:6c:df:ad:fa:aa:00:81:a4:1e:6e:
9b:53:2c:84:97:11:5f:51:6c:c2:31:aa:40:7a:d1:f6:b9:fb:
16:59:db:0b:05:34:fb:6e:ee:ff:8a:d8:42:8a:a3:1f:47:0b:
c6:5f:e6:18:77:e9:19:71:fc:b5:98:20:ef:49:a0:73:92:f7:
71:9e:f7:06:51:68:7d:c5:52:d2:4d:95:75:fc:f5:74:ee:5c:
ab:de:9c:07:87:c6:49:47:19:6b:33:d2:08:21:d3:f4:4f:85:
e4:e7:70:bf:12:54:44:89:73:9c:07:ef:f9:fe:7e:28:e5:98:
c0:3b:15:39:43:13:6b:8c:ec:df:ac:1c:8c:fe:1f:58:d3:81:
da:b4:43:60:48:20:2c:65:89:2c:5f:99:bc:c4:8a:72:54:3c:
f3:6e:0e:25:7f:06:aa:0e:1d:28:aa:9c:4a:59:af:f8:ad:0a:
74:bb:48:12:65:f8:57:d9:62:23:3b:cb:fd:e1:a5:f2:c0:25:
b9:42:75:6a:2e:96:fc:cd:de:64:ab:8d:8b:3c:9a:aa:0a:00:
b5:b7:2c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:49:45 2025 by rpki-client