Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
File: AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft (raw, json)
Hash identifier: gBGcssP+GjwW1t4OrS6HF1Ej/+2FYamEqffuFukdWzA=
Subject key identifier: B5:F1:37:1F:C6:AE:0F:BD:5A:7A:4A:B4:F0:3C:5A:1B:91:29:07:10
Authority key identifier: 02:72:BD:3B:32:AE:CA:F2:6C:A8:ED:B3:C8:78:FE:57:95:F2:AB:6F
Certificate issuer: /CN=0272bd3b32aecaf26ca8edb3c878fe5795f2ab6f
Certificate serial: 0196B7B4FED5B891B57CB45C14FACC7BE319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
Manifest number: 06AC
Signing time: Sat 10 May 2025 01:00:14 +0000
Manifest this update: Sat 10 May 2025 01:00:14 +0000
Manifest next update: Sun 11 May 2025 01:00:14 +0000
Files and hashes: 1: AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl (hash: VM78TrKkayiHf3NPBhGwRSycbyb+SNueMfUFJHsiLr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b4:fe:d5:b8:91:b5:7c:b4:5c:14:fa:cc:7b:e3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0272bd3b32aecaf26ca8edb3c878fe5795f2ab6f
Validity
Not Before: May 10 01:00:14 2025 GMT
Not After : May 11 01:00:14 2025 GMT
Subject: CN=b5f1371fc6ae0fbd5a7a4ab4f03c5a1b91290710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:7f:80:64:10:e1:53:8a:b3:a3:c5:a2:d3:
98:01:34:09:63:92:b0:b0:e8:56:15:43:f9:f5:ff:
ae:4b:7f:ad:f8:d4:39:e1:18:31:08:01:49:44:49:
5c:fe:56:e2:9b:4f:4c:57:aa:cd:37:9c:de:04:dd:
f4:99:b7:55:67:38:9c:0b:7d:9b:61:f0:c8:3a:0f:
65:ad:b6:bf:19:7d:6f:69:b6:b4:1a:a4:af:d3:66:
54:c1:f6:20:24:42:86:aa:38:ad:41:35:a3:5c:3d:
7d:a4:b2:51:c9:fa:d6:9b:7b:46:dc:36:be:74:1c:
f1:f1:9c:16:49:f3:3d:c2:6a:e3:a5:aa:08:cd:58:
c9:63:df:e4:a6:15:0a:51:fb:51:8e:b3:a1:6b:a9:
4b:d9:36:e9:6d:e2:82:4b:70:ed:f4:c6:8c:80:8c:
9f:52:01:a3:e2:e3:b1:f7:4f:c0:75:7a:a3:42:c5:
95:4e:a1:f1:f4:c1:e6:cd:b7:2c:ac:ab:97:ce:0b:
dc:f8:cb:c2:9d:e9:9a:3a:a0:5a:b7:cf:01:da:91:
a7:dc:92:a2:04:0e:ea:be:ce:61:95:73:c9:01:44:
89:83:ae:f4:87:bc:17:2c:ef:28:c2:b2:d6:5a:10:
df:b2:af:07:a8:8a:f5:56:df:cb:33:23:b9:c9:30:
bd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F1:37:1F:C6:AE:0F:BD:5A:7A:4A:B4:F0:3C:5A:1B:91:29:07:10
X509v3 Authority Key Identifier:
keyid:02:72:BD:3B:32:AE:CA:F2:6C:A8:ED:B3:C8:78:FE:57:95:F2:AB:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2c:cf:51:66:fe:40:c1:a0:4a:10:7a:0f:30:be:31:4f:8b:
24:09:72:5d:5e:cf:41:21:d7:8c:40:94:75:f1:9b:59:49:fe:
ec:b2:80:1b:23:02:9f:b8:15:71:27:0b:12:8c:85:ef:f5:24:
0d:e5:02:f9:b5:56:e8:37:1b:0e:52:be:05:4d:09:37:5f:ae:
15:c8:74:31:1a:8d:f8:ca:1a:e1:73:a9:17:4d:28:8a:17:c3:
56:93:41:ee:80:f1:4d:8d:a7:cf:bf:f0:c3:41:e7:72:31:58:
b1:3a:bc:39:d8:d5:9a:01:fc:b6:b0:39:81:25:17:48:94:56:
a0:b1:8e:e4:7a:ce:2d:39:85:be:7a:d0:14:9b:2b:69:c1:8d:
0b:97:f2:0c:7d:e7:16:e7:34:3f:7b:a8:5b:46:7d:34:1d:3d:
b4:1c:14:f9:d7:97:34:ca:a8:a2:e2:d7:b1:1a:53:99:3d:24:
b1:12:cf:48:d0:9a:d1:93:65:8b:52:10:10:4f:44:8c:37:10:
7c:14:8f:f2:3c:9a:f4:95:21:f7:cb:7c:ad:bf:47:15:42:69:
5f:93:a9:20:b5:bb:fa:bf:50:3f:ac:b2:66:30:75:da:37:e5:
80:3f:01:b7:14:7a:b7:d0:b8:2b:32:e3:73:c9:ba:8d:13:2e:
c7:a6:9c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:51:05 2025 by rpki-client