Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
File: F1yfOANJZKGpKvgMdo-D0IVAeT4.mft (raw, json)
Hash identifier: oBlUhAFe/UxZ0mQF0co2xrVnvrHIM8dLIP7N05mPctI=
Subject key identifier: 16:96:C9:AC:42:E1:6B:D8:BF:A7:9F:C2:4C:D8:73:F2:9F:93:A1:68
Authority key identifier: 17:5C:9F:38:03:49:64:A1:A9:2A:F8:0C:76:8F:83:D0:85:40:79:3E
Certificate issuer: /CN=175c9f38034964a1a92af80c768f83d08540793e
Certificate serial: 0196C3BA01DF2856EECE1B00BC69A924FDFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
Manifest number: 14C6
Signing time: Mon 12 May 2025 09:01:09 +0000
Manifest this update: Mon 12 May 2025 09:01:09 +0000
Manifest next update: Tue 13 May 2025 09:01:09 +0000
Files and hashes: 1: F1yfOANJZKGpKvgMdo-D0IVAeT4.crl (hash: EOSLg6T+n0BdxCJZFabOMvucRpZAyvZthrvSemta0y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:ba:01:df:28:56:ee:ce:1b:00:bc:69:a9:24:fd:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175c9f38034964a1a92af80c768f83d08540793e
Validity
Not Before: May 12 09:01:09 2025 GMT
Not After : May 13 09:01:09 2025 GMT
Subject: CN=1696c9ac42e16bd8bfa79fc24cd873f29f93a168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f6:b2:93:59:96:40:25:ca:20:fd:50:34:c5:
ce:2d:fb:20:3d:1d:0a:6b:d3:9f:11:53:9f:a8:db:
3f:e3:96:9a:24:97:84:f9:fe:64:02:31:e6:67:63:
d8:3f:64:b0:e9:67:7a:96:c2:ab:88:d4:0c:4b:b4:
52:08:b0:3d:30:9b:7a:50:d7:73:7d:56:29:32:34:
0e:a5:3e:b3:49:0d:55:7b:40:31:78:56:56:de:c6:
f7:27:9e:ee:a9:b3:9a:e7:8a:51:c9:49:59:41:00:
cf:60:7e:b4:5a:7f:50:c1:84:40:57:5c:06:29:76:
1e:b7:ed:9f:36:14:f9:16:31:d4:20:1f:77:5e:b3:
5a:a0:b7:cc:24:94:a7:51:8b:be:55:3c:d3:51:71:
b4:6f:cd:9d:64:b5:e0:8a:27:bb:da:32:ee:9e:b7:
f4:d0:3e:b7:91:a0:fa:e4:f3:77:31:31:66:ff:10:
10:bf:74:98:34:77:82:57:27:2a:da:7c:0c:9e:be:
86:a7:98:38:30:91:8c:09:cd:5f:1e:d1:28:a7:1b:
9a:99:6e:a7:74:7f:bc:fc:40:4c:5e:64:97:6f:e0:
b6:9d:c0:f3:7c:e7:8d:98:79:e7:53:d7:de:93:71:
54:a9:a3:94:bc:8d:44:b7:39:d3:02:72:02:b0:a8:
ba:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:96:C9:AC:42:E1:6B:D8:BF:A7:9F:C2:4C:D8:73:F2:9F:93:A1:68
X509v3 Authority Key Identifier:
keyid:17:5C:9F:38:03:49:64:A1:A9:2A:F8:0C:76:8F:83:D0:85:40:79:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:78:41:4b:46:be:ab:87:e3:31:58:08:63:ce:e1:4d:eb:04:
28:c6:36:a2:35:02:c3:2e:38:2f:3b:92:15:b4:1b:7d:26:b9:
b0:bf:b6:62:7e:4c:9e:2c:e6:e2:df:e5:70:03:a1:d3:6f:f4:
6d:fc:2b:bf:3c:c5:f3:39:66:5e:79:91:f6:43:b8:68:5b:cf:
fd:b6:4d:db:39:b7:fb:64:d4:7d:68:9d:c6:67:19:dc:c9:ed:
69:08:7e:6d:45:91:ec:be:5d:13:31:65:4e:4b:bc:aa:1f:fc:
51:06:6f:f4:19:59:89:a2:27:26:b5:29:02:5d:8e:e2:8c:fe:
50:09:97:25:8d:cd:33:fc:85:c7:cc:42:f8:c8:63:6f:26:cf:
9c:5d:b0:48:60:c9:2e:d5:e8:1a:44:c3:fa:52:e2:cd:96:89:
77:ed:cf:51:38:c5:51:e8:d3:3e:3b:dd:c3:f6:82:11:d4:1f:
54:1c:af:05:f1:f1:45:6c:d8:bf:73:8d:e6:b9:8a:5e:31:ed:
94:0c:b8:f4:5c:6f:30:20:e8:32:6d:db:2c:70:a2:a8:57:b2:
32:40:19:c2:1b:26:06:3d:8d:07:f5:d0:12:9a:f5:7a:69:5f:
50:61:b8:cf:cc:fa:48:8b:ef:eb:97:50:24:07:25:18:e8:54:
d3:a4:07:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:20:26 2025 by rpki-client