Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
File: hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft (raw, json)
Hash identifier: vsM9aKxeZcIfXMfchJqIBm9M+jVR0plk2magFV28mBk=
Subject key identifier: 24:58:CE:FC:54:94:06:71:DE:C2:F6:CF:63:F2:B1:23:D7:18:DA:9D
Authority key identifier: 84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
Certificate issuer: /CN=84ac851a2bfaae15e85e162baa0788c85912a932
Certificate serial: 0196C34C03B1CDC402507720BB4141AB384E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
Manifest number: 1169
Signing time: Mon 12 May 2025 07:01:00 +0000
Manifest this update: Mon 12 May 2025 07:01:00 +0000
Manifest next update: Tue 13 May 2025 07:01:00 +0000
Files and hashes: 1: hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl (hash: vxVZl6Jdl4q8auZW+nsJDxpbIynh5VY/xbdHRx2T+44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:03:b1:cd:c4:02:50:77:20:bb:41:41:ab:38:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ac851a2bfaae15e85e162baa0788c85912a932
Validity
Not Before: May 12 07:01:00 2025 GMT
Not After : May 13 07:01:00 2025 GMT
Subject: CN=2458cefc54940671dec2f6cf63f2b123d718da9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:f5:cf:bd:d6:b7:55:96:fa:2b:c2:cb:6c:
80:9c:7b:0a:00:fc:f6:78:79:a5:72:ef:ca:be:1f:
db:b5:40:5f:2e:73:c1:fb:e5:2d:c5:55:97:fa:44:
9e:f3:c3:50:6b:c4:3b:ca:6e:f0:ec:34:0a:14:c7:
23:77:74:a1:00:ca:55:e2:d8:a7:48:0f:69:a5:d5:
fa:04:7b:99:36:1c:79:75:f3:4f:c2:72:0e:57:38:
5c:8f:a6:4e:60:f6:03:f2:76:c5:e2:e3:c0:ab:d0:
41:68:e0:83:9d:7e:1d:d8:46:2c:56:f6:a3:4e:d4:
da:01:b3:6e:86:2a:8a:da:b9:67:29:bd:3d:2f:a9:
b6:a6:cf:01:ec:68:0b:16:19:37:eb:f8:ed:e1:eb:
b9:9d:af:89:0c:0d:07:35:2e:e6:67:09:0b:b9:17:
b8:1c:e4:c6:9d:9e:24:73:10:e5:56:ff:8f:9b:0d:
7a:ad:53:53:13:13:64:37:b2:01:74:d9:6a:22:b9:
3b:ab:77:15:e8:3e:aa:c2:f4:2a:0f:46:c9:90:eb:
75:69:21:b2:a3:7f:8b:e6:fc:8f:44:0a:b4:74:d2:
88:e5:0b:53:d2:76:c7:e6:dd:43:b6:65:0f:08:2c:
3c:6d:77:91:d2:01:e8:28:68:9a:f4:9e:05:39:02:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:58:CE:FC:54:94:06:71:DE:C2:F6:CF:63:F2:B1:23:D7:18:DA:9D
X509v3 Authority Key Identifier:
keyid:84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:50:59:fc:67:f0:61:67:2d:c7:85:4f:48:99:f7:77:99:3b:
c7:f9:56:2b:37:46:54:7d:4d:e8:fb:c2:f8:83:a2:cf:a2:a0:
b7:dd:8e:3e:a5:d8:f3:1e:44:f9:a1:d1:ac:a4:34:62:7e:28:
ba:fb:85:9f:b4:35:43:a7:90:c0:2f:94:c2:4f:67:1d:0c:39:
79:6e:da:77:1a:8a:4d:bb:a8:e0:d2:1c:dd:ee:d8:5d:e4:bc:
5a:9a:d6:99:8b:6a:57:98:2e:fb:48:98:f3:92:a0:e2:4c:9d:
ce:a3:a0:d3:c0:75:28:66:5f:83:37:0a:d3:c5:a9:5f:ec:5f:
cd:b7:22:d6:37:fc:db:76:ff:b5:2c:75:90:ae:e6:ac:8a:fe:
6d:4c:26:5f:0b:25:92:da:ed:25:82:cb:27:50:89:17:b4:34:
c3:07:c7:35:9a:41:aa:d8:f4:b8:78:ce:74:71:47:a4:59:c1:
b3:16:7f:f9:ea:74:ca:c1:87:8e:bf:cd:30:2b:bc:01:a2:15:
0b:66:fa:93:8f:5d:e2:70:03:ff:35:c3:b9:9d:9c:71:36:b6:
07:ba:23:f8:31:b7:56:c8:e0:6b:43:41:ea:bd:f6:cf:dd:73:
95:8e:dc:61:74:e1:8e:4b:7b:4e:93:f5:78:91:e4:03:9a:1a:
f0:5a:0c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:55:49 2025 by rpki-client