Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
File: tDtWqlNz6PXng0dnQkDv98KCctw.mft (raw, json)
Hash identifier: Z92AQyGblq1V9NkxYGZeaMDoek7vqPiwG7RcXihDBAA=
Subject key identifier: 32:AD:32:50:D7:C7:B7:5F:23:9D:4E:29:01:D0:07:12:21:DF:B9:D6
Authority key identifier: B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
Certificate issuer: /CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Certificate serial: 0196AE0DD1E1F67DC3BE807B31CE5C87C8E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
Manifest number: 0E64
Signing time: Thu 08 May 2025 04:01:03 +0000
Manifest this update: Thu 08 May 2025 04:01:03 +0000
Manifest next update: Fri 09 May 2025 04:01:03 +0000
Files and hashes: 1: tDtWqlNz6PXng0dnQkDv98KCctw.crl (hash: qQJZAFQEuHnMYisg6I3NGqIbmtoyXxkAz4cqbQEXDAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:d1:e1:f6:7d:c3:be:80:7b:31:ce:5c:87:c8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Validity
Not Before: May 8 04:01:03 2025 GMT
Not After : May 9 04:01:03 2025 GMT
Subject: CN=32ad3250d7c7b75f239d4e2901d0071221dfb9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:51:51:79:20:7c:20:4a:36:bf:f8:82:e0:
92:99:8c:3e:3f:67:43:0d:97:90:1a:6e:bd:8b:3c:
6d:1b:82:26:c1:8a:7e:ca:81:36:bf:98:55:c6:4e:
ca:13:1c:55:db:21:d8:6e:34:09:46:c6:0b:a2:74:
fb:08:23:a5:05:7c:0b:9b:8f:7e:8d:dd:57:9f:ec:
70:28:39:1d:5f:72:c8:de:e8:d1:55:79:30:f2:b0:
1a:4d:7e:f4:dc:26:43:70:78:29:a1:e0:35:56:78:
4a:bf:36:ed:14:a1:8d:09:35:a7:3c:5f:72:5f:9c:
36:d2:86:47:ea:be:37:57:cb:23:04:00:a4:67:69:
36:37:9c:97:5d:a1:37:2f:25:2f:8e:8a:7e:f3:5f:
e5:8f:a7:6f:4c:62:41:64:4d:87:25:91:a2:6d:10:
2d:23:f1:60:b0:b1:66:03:c9:ac:e2:78:59:a4:1c:
a7:5c:8c:0c:f8:2d:bf:99:a8:38:52:39:f4:86:60:
4b:a1:25:20:72:88:42:d3:c1:70:3b:da:55:be:65:
52:c7:aa:7c:b7:f6:47:db:d5:ce:50:c9:23:0a:a0:
5b:77:d7:5e:a3:3e:a8:59:e2:b7:7c:e0:3d:0d:41:
a1:c4:e8:c6:71:cd:5e:be:05:4b:19:29:d1:d1:f8:
50:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AD:32:50:D7:C7:B7:5F:23:9D:4E:29:01:D0:07:12:21:DF:B9:D6
X509v3 Authority Key Identifier:
keyid:B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:12:cf:f2:e9:23:71:f5:03:37:76:f6:16:b0:7e:a5:87:3f:
c8:76:58:e1:82:e3:08:ad:4c:2d:b1:b2:ec:84:e9:ae:ad:31:
d5:a6:8a:3f:b3:5c:74:5e:8b:f5:7d:12:f2:ad:7a:20:31:6a:
93:93:6b:7b:a8:41:d4:15:94:4f:e4:de:96:4a:3a:89:74:4d:
6b:f6:e5:f2:06:bb:4c:6e:29:1e:6c:15:27:b8:5c:8b:9a:09:
b2:69:10:ba:64:40:d1:f0:3d:07:56:e0:41:ea:1b:93:7d:78:
f9:de:56:eb:7b:4a:96:c3:d8:b6:fa:1a:e3:e7:72:e2:ab:2f:
a0:cd:1f:a8:20:b9:c7:68:e1:a9:bc:0b:93:5d:3d:0e:f3:a2:
d0:ec:72:f0:42:4e:16:8e:f2:52:24:5b:20:a1:22:c5:f0:11:
15:08:a4:4c:e1:13:37:e5:cc:d0:b3:4d:7d:f1:47:3a:e8:c8:
06:87:19:67:a0:41:63:2f:61:ab:d7:29:a7:f8:89:6f:64:ad:
19:25:07:d8:89:a6:ec:8c:b5:1e:7b:6a:66:5f:5b:f3:9f:59:
db:df:80:12:f2:c4:63:e2:7b:15:6c:03:8c:b5:0c:ef:84:45:
67:f4:e4:8b:a8:d1:f8:00:47:5f:fa:d6:b8:70:42:4b:94:cc:
80:a6:37:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:21:50 2025 by rpki-client