Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
File: d11030Q8uAUXzkFQ3OImYpQPHXw.mft (raw, json)
Hash identifier: 47luA+IxIRskh/zPyk3/9CvAN8N8RoRG8E0heeV+cZc=
Subject key identifier: 76:67:51:8A:57:3B:A4:7A:19:4D:35:31:28:50:2C:15:53:1A:00:E5
Authority key identifier: 77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C
Certificate issuer: /CN=775d74df443cb80517ce4150dce22662940f1d7c
Certificate serial: 0196B2586890447753532BE761F076636834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
Manifest number: 0969
Signing time: Fri 09 May 2025 00:01:00 +0000
Manifest this update: Fri 09 May 2025 00:01:00 +0000
Manifest next update: Sat 10 May 2025 00:01:00 +0000
Files and hashes: 1: d11030Q8uAUXzkFQ3OImYpQPHXw.crl (hash: 1I+uq9CwjxmnnKEVUsygK9xWAKbvjreeCTbhBiO/2ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:58:68:90:44:77:53:53:2b:e7:61:f0:76:63:68:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775d74df443cb80517ce4150dce22662940f1d7c
Validity
Not Before: May 9 00:01:00 2025 GMT
Not After : May 10 00:01:00 2025 GMT
Subject: CN=7667518a573ba47a194d353128502c15531a00e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:09:1e:cf:94:50:e5:3c:ce:d3:c2:57:cf:
62:29:86:db:b5:ca:f6:b2:f7:28:61:f7:7c:15:22:
97:31:fd:71:a2:99:b3:01:ff:73:f0:cc:70:59:2c:
ed:76:35:cf:77:75:d0:79:69:02:d9:39:38:ed:94:
b4:57:a5:57:62:be:fa:26:47:55:80:f9:1f:06:9d:
2d:a0:1b:6a:c3:2a:aa:93:b8:1d:ff:15:ec:07:6b:
45:f5:cf:dd:fd:1b:4a:85:b7:27:54:fb:9e:f4:7a:
38:0b:39:da:a3:75:58:85:2b:da:4e:33:aa:9e:30:
7d:73:d4:ef:eb:62:58:65:cb:77:15:a5:22:6a:31:
d7:c7:f5:16:10:d7:05:62:06:03:2e:4f:f4:af:2d:
1d:c5:05:47:9f:1d:7f:6b:64:73:85:74:5d:eb:82:
76:70:90:7b:6c:43:30:ef:6e:76:04:e1:19:e2:fe:
f3:84:13:f8:e1:14:61:7c:e9:b7:70:f5:c4:45:e7:
ab:3f:18:8f:89:04:10:16:53:14:11:c8:f5:93:61:
eb:0c:27:2c:a7:86:a3:1a:4b:60:02:67:43:e7:6f:
7e:ec:73:10:c5:c3:44:ce:67:43:39:b2:56:83:bf:
c0:c5:53:f2:10:6e:64:83:f3:4a:d7:ed:e6:06:19:
90:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:67:51:8A:57:3B:A4:7A:19:4D:35:31:28:50:2C:15:53:1A:00:E5
X509v3 Authority Key Identifier:
keyid:77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:69:b7:2b:12:e0:49:0a:ee:c5:32:ac:53:80:37:e2:38:09:
b2:a7:a8:4a:60:03:63:28:d2:03:db:ad:9f:37:57:35:b4:61:
66:a1:a9:69:a5:56:ca:d4:4b:b2:59:89:4a:0d:5a:b9:1c:c0:
47:32:9c:1c:d9:ad:83:47:c9:8c:2b:b8:05:9d:c6:11:ba:f7:
bc:c9:25:ea:1e:39:c4:2c:9a:56:1c:3e:85:0f:2a:19:79:03:
6f:6e:59:4e:ee:7b:eb:45:eb:9a:68:f1:85:8b:89:64:17:47:
55:db:11:8c:1f:3a:f1:19:2e:54:15:a6:90:dc:47:5a:75:1f:
84:4a:8c:60:4a:39:af:ec:87:94:06:75:be:cd:8c:fd:c6:b3:
ab:8a:c2:1b:1a:b0:2b:8b:c1:62:79:e3:2f:27:d6:21:5f:46:
48:dc:9a:9b:a4:79:b6:98:cf:ab:f5:67:1e:f7:90:b6:13:86:
5e:1e:9f:0a:99:2b:70:45:d3:13:62:ec:f7:35:89:5b:d4:32:
08:58:a7:8d:a9:ef:14:f9:d4:4c:10:42:be:e6:ae:7a:01:ac:
2b:7d:61:e4:40:4e:e3:61:4a:03:9f:65:31:10:e5:3d:f3:eb:
84:4f:a1:83:2b:15:07:a1:72:c9:5d:03:c9:78:43:9c:3f:aa:
72:63:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:48:46 2025 by rpki-client