Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
File: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft (raw, json)
Hash identifier: Pu85V6F2jJFt8xAk76hop+Oul5HwyVseVGzEoidimHI=
Subject key identifier: 89:D9:11:BB:63:E0:C1:A0:E4:C8:2D:A9:9D:3B:45:A5:0B:35:6C:A2
Authority key identifier: 56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8
Certificate issuer: /CN=5682c32795f04a43209c68cd70ead248945992f8
Certificate serial: 0196D889833469B3D470E5ABE0CEDC598649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
Manifest number: 12D3
Signing time: Fri 16 May 2025 10:00:12 +0000
Manifest this update: Fri 16 May 2025 10:00:12 +0000
Manifest next update: Sat 17 May 2025 10:00:12 +0000
Files and hashes: 1: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl (hash: ad9Bdu41WDrzJWRSVtw2TyKOs8lIGCjV6y9cbFpcM+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:89:83:34:69:b3:d4:70:e5:ab:e0:ce:dc:59:86:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5682c32795f04a43209c68cd70ead248945992f8
Validity
Not Before: May 16 10:00:12 2025 GMT
Not After : May 17 10:00:12 2025 GMT
Subject: CN=89d911bb63e0c1a0e4c82da99d3b45a50b356ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:fb:a0:2b:55:88:0e:1f:c4:9a:98:78:ab:
63:03:03:63:ed:b4:96:21:49:40:cb:e2:2c:5f:64:
5f:eb:82:57:cd:c8:6d:14:15:0a:5c:9a:ec:b6:f7:
4a:08:99:d4:89:82:ac:3d:b0:51:c6:bc:3d:10:26:
48:e9:b2:f8:4e:ba:9b:b6:cb:49:cb:91:b6:64:77:
8c:23:58:23:8c:21:ff:0d:fb:1b:21:ac:18:e5:5f:
36:a4:10:f7:93:8f:3c:d8:74:65:34:a5:e5:47:b6:
7a:64:3a:ad:3f:01:74:2f:72:53:a0:47:31:05:76:
b1:1b:2b:10:3e:af:84:6a:0c:1b:93:a0:15:88:b2:
ab:b0:63:4e:7b:4b:d0:4c:0c:d5:09:8b:c5:17:c0:
b0:44:7c:fc:d7:15:9d:c7:fb:96:23:cf:d5:9b:70:
a8:c0:8a:5b:5a:87:5d:01:13:d2:1b:a6:95:bb:a8:
0e:51:2d:60:1e:61:d7:a8:4c:7c:3f:8a:4c:4d:7e:
fe:3b:85:d8:0c:44:f2:f2:c9:cb:f0:9d:42:03:36:
d0:9c:7b:bf:0a:22:c0:72:67:d1:60:22:91:3d:a3:
33:35:f4:ac:60:21:b0:a4:78:97:15:ee:1a:bb:8d:
60:9d:a2:19:56:b7:ae:54:ad:e0:c1:d7:30:55:4c:
c3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D9:11:BB:63:E0:C1:A0:E4:C8:2D:A9:9D:3B:45:A5:0B:35:6C:A2
X509v3 Authority Key Identifier:
keyid:56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ea:b3:f1:1d:dd:5e:d6:06:f5:f5:3d:72:0f:a2:28:a8:bc:
9a:12:64:6c:43:0e:46:c0:63:8e:43:c6:f6:e2:12:0a:71:28:
32:1e:3b:f4:3c:03:08:97:8a:b7:49:bd:34:5e:cc:8a:01:a9:
cc:05:89:24:e4:07:50:53:8a:9f:e2:c7:f6:cb:44:ec:86:51:
d9:ff:3e:59:2b:1f:44:03:c1:da:cd:01:ed:37:9a:0a:aa:eb:
e7:00:8c:1a:5a:8a:d8:20:c6:06:2b:6b:69:f9:4e:8e:f2:e5:
c2:63:8e:c7:ab:b9:5d:24:92:07:6e:c9:af:bb:11:a9:f4:26:
fd:35:8a:10:45:2c:4d:6d:8c:f0:4f:57:1f:2f:ec:66:1e:5d:
bf:11:f6:1e:7d:dd:79:ec:e3:6d:42:c5:b7:47:c2:0a:b7:44:
66:c9:61:61:62:bb:aa:cd:29:e7:4f:e5:33:d0:4c:37:c4:7f:
a1:27:d9:23:3a:d9:2c:e9:17:d7:d6:ac:5f:81:cc:1f:44:51:
12:83:11:14:0f:0d:a1:b7:e3:39:62:b7:9f:6b:d9:89:a5:a7:
45:d2:53:f9:a5:10:1b:1b:c3:62:67:a0:aa:6e:d6:5d:5b:3c:
2c:83:34:59:ce:70:1d:18:67:fa:f1:1a:ed:f0:14:6d:a4:0f:
68:7a:99:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:15:41 2025 by rpki-client