Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
File: sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft (raw, json)
Hash identifier: 2jjfc4J5VB2+QlwmoSTUWkZO7sVU5xYHrrREqh61fNU=
Subject key identifier: 6D:60:6A:FB:E0:25:29:D5:67:74:CF:76:D1:9E:62:3A:E4:40:49:C7
Authority key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
Certificate issuer: /CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Certificate serial: 0196BF6FC93F9156F19520B1DAC367C7D3CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
Manifest number: 0EC4
Signing time: Sun 11 May 2025 13:01:36 +0000
Manifest this update: Sun 11 May 2025 13:01:36 +0000
Manifest next update: Mon 12 May 2025 13:01:36 +0000
Files and hashes: 1: sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl (hash: lzxKinfq4J+jUU9YE2uOCpPgsCWVNxara1YTDluyYv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:c9:3f:91:56:f1:95:20:b1:da:c3:67:c7:d3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Validity
Not Before: May 11 13:01:36 2025 GMT
Not After : May 12 13:01:36 2025 GMT
Subject: CN=6d606afbe02529d56774cf76d19e623ae44049c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:cc:fb:c3:b4:89:81:e6:f7:ec:da:ac:8b:
11:f5:5d:1f:74:e5:36:f4:4a:fc:a3:16:b4:9a:ac:
32:26:6c:66:5c:2e:dd:b6:37:47:06:78:f1:41:b4:
fd:e8:99:18:87:b2:02:62:0a:f1:ec:b4:9d:70:10:
a3:c1:84:d8:65:bb:95:7d:5c:99:33:b4:94:15:02:
05:63:72:5e:36:9d:b6:7b:b7:ed:c2:93:c1:9f:cf:
9a:4f:11:3c:a5:e8:03:ef:fd:50:fb:cd:4f:3f:cb:
65:c6:c1:d6:6d:fc:07:6d:fb:45:e7:43:e5:6e:b2:
06:2b:8f:67:a9:08:29:3f:0a:c7:38:4d:64:1d:a4:
8d:61:d0:2f:e3:f7:20:4d:07:6c:26:a9:91:c8:b1:
f2:17:df:b6:83:e3:fe:48:4c:de:6e:84:d9:75:79:
45:4e:ef:69:60:3a:12:d0:78:b9:cb:15:1c:aa:9d:
1a:4c:db:63:34:07:53:50:3a:aa:f4:b6:86:09:24:
57:6d:5d:99:58:38:d3:ef:76:8d:5b:99:b4:c4:aa:
62:ff:a6:a0:b2:e7:38:bd:b6:2a:6d:60:d5:d2:10:
59:be:b6:99:3c:0f:71:5b:35:24:2b:da:16:46:ab:
9d:b5:73:53:28:71:1d:c4:35:af:32:0c:40:7e:37:
62:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:60:6A:FB:E0:25:29:D5:67:74:CF:76:D1:9E:62:3A:E4:40:49:C7
X509v3 Authority Key Identifier:
keyid:B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0d:d6:7f:ca:e1:c8:f6:ca:09:a7:c5:2e:1e:8a:7d:90:cf:
03:3c:0f:1b:89:ff:35:95:24:ff:f2:ab:86:96:85:94:df:d9:
7c:d9:83:42:22:37:4d:3e:ce:94:1f:cf:96:72:39:26:37:e4:
ec:f8:bd:c1:31:9f:8d:85:2f:3e:04:26:b4:b7:12:a5:aa:b5:
2a:0a:24:92:df:40:a5:68:d6:aa:6b:23:70:49:34:e0:b0:59:
31:c7:35:03:61:8c:1f:8e:ca:1f:78:43:41:72:e7:55:c2:74:
94:68:9b:64:32:cd:4c:5f:44:a4:46:1f:34:f8:ab:7c:98:92:
39:0b:9f:1a:17:7f:d9:ba:13:08:b3:47:c6:5f:e3:c0:45:62:
a6:17:44:d0:4c:b4:19:55:0f:21:2d:fd:46:ee:84:a8:5a:fd:
a9:ac:78:98:b0:3a:1b:d2:78:3d:08:45:4e:8b:aa:8a:e3:53:
c4:96:3c:06:9e:94:39:6a:85:ff:c6:11:a7:91:d0:74:1a:46:
a6:a3:a6:be:3a:67:7a:d1:de:bd:e9:ff:37:1a:d1:1f:26:3b:
88:c4:90:ee:90:8b:a7:11:2f:6f:29:45:76:a7:88:97:70:59:
aa:31:f0:67:a0:03:f2:d0:bd:ce:14:2a:45:2c:1d:e1:78:3f:
fb:38:f6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:03:31 2025 by rpki-client