Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
File: g4fa4eZQhWzIVx5GLr2evrZccDg.mft (raw, json)
Hash identifier: U9dxMRALydvdpGMUKenP0Qx82IHdW1eO5KOJvAzfD5E=
Subject key identifier: 86:96:93:8B:EC:21:D5:E9:19:C8:10:A2:95:78:72:05:28:1C:92:77
Authority key identifier: 83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
Certificate issuer: /CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Certificate serial: 0196B7B61531F3096E909149065840F7E88F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
Manifest number: 152E
Signing time: Sat 10 May 2025 01:01:25 +0000
Manifest this update: Sat 10 May 2025 01:01:25 +0000
Manifest next update: Sun 11 May 2025 01:01:25 +0000
Files and hashes: 1: g4fa4eZQhWzIVx5GLr2evrZccDg.crl (hash: yDkZO0+Tf2QBbjN96SLj//Q5hejW5+S76QxyHvAwEIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b6:15:31:f3:09:6e:90:91:49:06:58:40:f7:e8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Validity
Not Before: May 10 01:01:25 2025 GMT
Not After : May 11 01:01:25 2025 GMT
Subject: CN=8696938bec21d5e919c810a295787205281c9277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:54:9d:f3:cd:8d:36:a8:56:a6:24:3f:19:
a6:93:70:c5:7b:b4:b6:e2:c9:17:8b:9f:07:92:f8:
82:f2:41:67:d9:67:48:53:7a:61:c1:5d:99:1a:1e:
3e:85:c4:93:ee:3a:22:7c:ba:9e:11:bf:0e:36:34:
c8:75:45:a9:ee:07:11:20:8d:ad:59:df:ef:16:a4:
92:f5:09:ac:0c:12:cd:2d:ee:d5:ca:b4:6e:2b:af:
d7:1b:a2:96:79:58:cb:70:a5:78:11:49:62:d0:83:
0e:cf:d5:b0:2d:07:ea:c9:10:2d:94:6f:ae:60:5d:
1f:23:f2:6c:5d:61:4b:61:23:58:e6:46:c6:e9:62:
22:ca:cb:53:9e:77:fd:cd:b2:80:f0:27:3c:8d:c6:
53:58:41:e0:3b:7c:b5:33:15:f7:9f:7b:a0:e7:c7:
e1:10:94:76:2f:5c:21:b7:d5:ef:e9:62:48:fa:cf:
25:08:a0:48:82:17:ac:2b:03:56:83:f6:a5:2b:d2:
0c:ea:e6:a5:a0:7e:5b:8b:dd:f4:f0:42:b9:73:29:
d9:2f:a8:f6:71:89:10:09:58:6d:77:fa:87:c0:60:
41:f2:7c:f2:74:fc:2c:c3:8c:3c:9b:be:7e:77:e4:
44:8f:94:fe:f1:2b:bd:52:00:87:5d:4f:6d:5e:fa:
49:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:96:93:8B:EC:21:D5:E9:19:C8:10:A2:95:78:72:05:28:1C:92:77
X509v3 Authority Key Identifier:
keyid:83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9b:56:dd:c7:18:76:0d:a9:b3:90:b9:8b:89:c6:61:25:e2:
46:9d:87:d0:78:b8:42:eb:84:20:9c:83:f3:55:82:54:19:74:
4a:df:71:a0:78:f1:5c:66:fa:42:1e:b7:c6:6a:56:37:85:73:
5b:b2:b4:ef:77:5c:21:1a:2f:46:48:42:46:4b:2b:7a:aa:e1:
58:6e:88:27:5b:3c:88:a3:42:79:20:ba:f0:07:14:69:1c:7b:
0a:1b:1d:f0:29:3c:5a:57:3b:a9:a6:3d:cf:17:a6:8a:33:f3:
e4:bc:d9:27:4c:72:dd:84:fe:79:59:ca:26:8a:0d:d4:64:f4:
87:d6:56:82:fe:5b:43:bb:8d:14:77:bc:12:06:96:56:19:5e:
77:04:ff:8a:94:e1:57:a5:f1:92:3e:95:0a:93:aa:73:b3:72:
50:43:f3:fe:b3:49:29:d9:11:ae:54:b9:77:1e:05:bc:9e:ba:
7f:e3:04:3c:31:bc:3b:f9:ca:d3:64:89:93:28:7d:d1:dc:63:
79:36:1d:74:32:32:ae:63:bf:d2:a5:59:17:13:e5:07:fd:d3:
ab:81:5b:f3:b7:b9:28:6e:b3:03:23:26:c7:6f:5e:42:05:ca:
52:ae:2e:68:f1:f3:4e:d7:3a:83:3b:d1:b9:0f:c8:31:1c:c5:
5b:8c:ac:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:15:06 2025 by rpki-client