Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
File: 9E8rYv2EXJFI4OImQldIw8bpdTk.mft (raw, json)
Hash identifier: XK/SEMlBQV4DlWmeShSrqR6VNgAArWXby/VUUGaLLsY=
Subject key identifier: 68:FC:32:6D:D1:77:15:F7:CB:E3:0A:F5:26:49:27:38:3A:13:A1:6D
Authority key identifier: F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
Certificate issuer: /CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Certificate serial: 0196C2701D57E87D97B3DF8CDED6A59473AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
Manifest number: 04B8
Signing time: Mon 12 May 2025 03:00:49 +0000
Manifest this update: Mon 12 May 2025 03:00:49 +0000
Manifest next update: Tue 13 May 2025 03:00:49 +0000
Files and hashes: 1: 9E8rYv2EXJFI4OImQldIw8bpdTk.crl (hash: ExEAo3FL9We9PgBZ0VKR2osSs7+Kp5KhfJY7oLMeDyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:70:1d:57:e8:7d:97:b3:df:8c:de:d6:a5:94:73:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Validity
Not Before: May 12 03:00:49 2025 GMT
Not After : May 13 03:00:49 2025 GMT
Subject: CN=68fc326dd17715f7cbe30af5264927383a13a16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:9c:cd:69:03:c2:c3:33:91:35:ba:44:1d:
67:5c:5b:6b:2c:84:e5:57:fa:07:66:01:9b:b7:e9:
70:91:92:c3:fd:90:80:dd:2e:24:f2:45:7d:0b:b5:
bf:3a:fd:07:64:2a:92:8e:7c:dc:12:30:89:d3:33:
fa:b4:9a:7f:d7:32:d6:25:2d:af:5d:73:b6:8e:a2:
00:ca:25:52:03:fd:08:90:64:86:f9:c8:f2:4e:b2:
0b:aa:32:0f:22:f7:b8:1b:63:97:2d:0a:8c:4b:ba:
eb:1a:69:18:dc:a7:41:8f:35:a3:8a:b3:29:13:e2:
cb:fa:ca:a0:26:be:9a:a3:7d:f8:e6:a3:db:e3:e5:
45:a8:70:bc:46:79:1a:42:7a:f0:22:08:65:1f:21:
33:ff:90:ad:93:7f:26:12:bc:b1:fc:40:01:7a:ab:
9e:3e:91:ef:a4:b4:d3:23:19:25:b9:d1:10:10:db:
fc:bd:03:89:13:ea:56:79:ca:4b:3e:76:50:eb:3a:
76:a5:ef:7a:8d:07:1f:61:0c:6f:be:56:41:58:a8:
06:f5:63:39:dc:30:88:f5:c7:ca:48:dc:15:ef:45:
33:5f:7c:08:7e:9d:92:82:1d:d2:34:37:52:68:12:
d9:a3:d2:65:86:65:66:c8:61:e8:f9:6e:37:a7:3b:
79:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FC:32:6D:D1:77:15:F7:CB:E3:0A:F5:26:49:27:38:3A:13:A1:6D
X509v3 Authority Key Identifier:
keyid:F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7f:57:98:f1:91:24:92:82:63:04:7d:11:0a:c4:00:a9:45:
b6:13:e8:1c:84:69:3a:91:7c:58:c3:5b:1f:09:b0:2d:f3:d2:
68:69:90:e5:90:0d:8f:ce:b8:3b:7c:94:24:0b:b5:4e:5b:ff:
4b:b1:b6:82:11:00:7d:ab:af:3c:49:9d:42:2d:2d:4c:bd:ce:
63:ba:6c:40:33:dc:7c:29:e4:22:b1:00:5d:f1:70:b1:0c:4d:
8c:b3:52:c5:95:59:f6:c6:46:73:22:bd:a5:02:33:8f:8f:0b:
6c:c9:90:1e:04:8d:3b:f0:4f:06:bb:11:8f:40:e9:6b:36:84:
7a:86:ea:3e:a6:b8:1c:d4:62:e5:d7:83:d7:a5:b3:ac:07:3a:
5d:f8:ac:6f:e5:0b:1b:7c:65:f0:c5:f3:18:a1:6a:31:fc:cd:
da:06:17:93:dd:40:d2:1b:10:b5:8d:3b:c1:78:48:15:ca:3e:
0f:4d:4c:54:11:78:b6:d0:e2:e6:de:0b:a2:21:aa:42:bc:d3:
09:78:da:ff:bd:e1:fd:5b:fd:59:20:4d:5c:1f:1c:fb:fd:41:
ad:69:ea:ad:4f:ed:e9:67:af:00:61:19:90:fb:4d:af:63:2a:
16:61:70:8f:bd:de:7e:7d:cc:7d:04:90:13:22:9f:1b:09:75:
7d:1b:43:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:03:42 2025 by rpki-client