Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
File: r1UJ13Yi0who8jYTxagW5ySEAWU.mft (raw, json)
Hash identifier: o5C3zdzCVsirJHKbovYHYAZmqFEm8RqFZUSVvQi92fU=
Subject key identifier: F6:3C:3F:7C:F6:B9:6C:A6:AE:4C:9B:20:A2:96:32:97:F3:17:DB:44
Authority key identifier: AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
Certificate issuer: /CN=af5509d77622d30868f23613c5a816e724840165
Certificate serial: 0196C916C23CB43EEBD4419BFC1DE708044F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
Manifest number: 05EE
Signing time: Tue 13 May 2025 10:00:34 +0000
Manifest this update: Tue 13 May 2025 10:00:34 +0000
Manifest next update: Wed 14 May 2025 10:00:34 +0000
Files and hashes: 1: r1UJ13Yi0who8jYTxagW5ySEAWU.crl (hash: snrRzH9qxUTUTWg2ePWg/dW0HqlPbkvqM2j1yyES05E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:c2:3c:b4:3e:eb:d4:41:9b:fc:1d:e7:08:04:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5509d77622d30868f23613c5a816e724840165
Validity
Not Before: May 13 10:00:34 2025 GMT
Not After : May 14 10:00:34 2025 GMT
Subject: CN=f63c3f7cf6b96ca6ae4c9b20a2963297f317db44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:2a:64:55:88:c5:99:b3:96:91:33:b0:60:
ab:34:82:9e:35:7a:80:da:f0:da:f5:ae:2e:47:d9:
82:b8:e7:fb:ea:bb:65:d2:13:8f:5b:5a:e5:5c:1b:
af:c3:3f:02:8e:2d:22:14:6c:09:eb:76:4b:5e:52:
8d:87:56:ba:88:8e:a0:c6:98:50:ea:01:a5:36:9f:
e4:62:82:9a:5e:e2:1a:f6:e7:27:9d:89:ab:b2:aa:
3b:36:6f:6e:f2:78:03:73:1f:af:01:eb:5d:8b:48:
69:dc:e8:9e:19:c6:6d:7b:26:66:8f:fd:15:bb:c0:
67:e3:19:3c:bd:27:e6:28:7c:44:3c:c4:4b:1f:6b:
3a:84:75:15:52:7e:2f:23:7b:53:59:d4:6e:f6:e8:
82:7c:e8:da:a4:9f:c6:4c:31:e3:11:54:4c:20:28:
5f:a7:f1:9a:18:6c:e2:6f:de:2f:94:8c:3a:ba:c9:
0d:75:27:5d:42:7d:f1:93:e4:71:db:76:e5:96:1d:
c5:7b:95:b2:48:f8:78:47:d0:9a:6c:95:d0:4a:d9:
1b:bc:91:03:83:53:84:d9:f1:e1:34:cd:c4:ac:04:
62:e5:20:4d:7b:37:42:28:bd:c3:55:f9:05:c9:94:
b1:a8:3e:58:5a:c9:b8:2c:89:e3:67:bc:73:dd:f7:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3C:3F:7C:F6:B9:6C:A6:AE:4C:9B:20:A2:96:32:97:F3:17:DB:44
X509v3 Authority Key Identifier:
keyid:AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a1:be:96:79:b7:4a:9c:80:ae:82:dc:3f:8d:f4:d8:ae:a4:
57:5f:b0:e0:87:e0:58:31:62:28:64:db:ea:bf:4b:02:a0:fa:
13:cf:9b:7d:a0:b5:b8:ee:1e:a4:3e:d3:a6:b8:a2:84:19:e8:
57:c3:d3:25:20:03:2f:95:23:ff:f2:9e:45:14:61:42:d7:88:
b5:cc:fc:24:88:b6:8f:a4:38:0e:5b:f2:f2:32:5d:1d:4b:41:
d6:d3:fc:e7:a4:a7:82:ed:45:87:6f:17:d1:98:0a:56:8d:7e:
3a:6d:4a:a5:28:7e:d8:5d:6f:08:2c:50:d8:e5:41:80:82:be:
0f:ce:23:31:4d:2b:86:23:72:97:a2:70:f2:c0:f9:18:1d:37:
cf:49:7c:1d:5f:23:ce:6e:d5:80:50:5b:69:81:99:68:8f:03:
70:b3:c4:b8:5d:cc:ee:f6:8f:ee:7e:8c:37:4d:a2:18:62:00:
ec:44:2e:81:8d:8d:53:bc:f3:68:16:ed:f2:b9:23:5b:70:2e:
78:84:fb:d1:a5:b2:6d:6d:99:f4:bb:99:14:c1:bf:21:f6:77:
f5:00:bc:69:8d:cf:68:7e:13:f0:da:be:70:b4:2b:e1:67:72:
16:0a:01:3b:5d:f4:5a:9e:ad:6b:9b:6a:c5:57:10:f9:6f:e8:
f5:9d:cb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:29:17 2025 by rpki-client