Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
File: u_D5EC2y6-GvHQdRaEQ4anlj71w.mft (raw, json)
Hash identifier: gg8zfUadsPDgqaUWZmDvhUaDjGhDk0DuWSA0uYT4VrQ=
Subject key identifier: C9:D9:DB:FD:C8:92:A9:2E:8B:F0:04:C1:06:7F:77:47:5F:BE:92:55
Authority key identifier: BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
Certificate issuer: /CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Certificate serial: 0196CC17983A0F718A42963C993CBB6E88B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
Manifest number: 043C
Signing time: Wed 14 May 2025 00:00:20 +0000
Manifest this update: Wed 14 May 2025 00:00:20 +0000
Manifest next update: Thu 15 May 2025 00:00:20 +0000
Files and hashes: 1: u_D5EC2y6-GvHQdRaEQ4anlj71w.crl (hash: 7OmTvf7Kg3Hlv3AM5DC6YeZvBYoCMKAWsEMRf5EHy2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:17:98:3a:0f:71:8a:42:96:3c:99:3c:bb:6e:88:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Validity
Not Before: May 14 00:00:20 2025 GMT
Not After : May 15 00:00:20 2025 GMT
Subject: CN=c9d9dbfdc892a92e8bf004c1067f77475fbe9255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:52:0b:bf:28:68:50:c3:e0:48:31:cf:a9:a1:
b0:33:36:39:c9:4b:d9:e3:68:51:73:c8:43:40:23:
99:ed:e9:26:06:2b:aa:71:d2:e8:70:40:eb:9e:d4:
00:ec:ab:c5:ba:d4:d0:1b:72:31:26:67:c1:de:55:
6e:f0:25:62:45:51:44:01:10:74:5a:48:7d:36:af:
c0:4a:dc:af:00:66:f9:37:c5:10:03:93:6c:0d:bb:
39:46:f6:00:92:06:0f:2e:05:bb:e4:5e:46:dd:c6:
3e:34:1a:d1:23:a5:9b:ec:44:ba:30:c6:51:82:e4:
ce:5a:8b:c1:d1:cf:30:ec:21:cf:c4:7d:4f:b7:40:
9d:2b:cd:64:7b:e8:24:03:29:f8:66:dc:7e:24:01:
d7:e4:36:57:5c:f1:73:f0:59:ba:c0:97:a5:06:d1:
a7:80:fb:a9:6d:c5:85:c0:f7:84:d6:99:c0:4e:d3:
db:64:90:9c:d9:ea:5b:dc:53:73:cd:18:36:4e:67:
8b:4e:8f:29:2f:bc:19:40:ac:d7:7a:e1:59:e7:02:
28:04:08:f3:b9:dc:3d:9c:68:2f:c6:93:39:76:d8:
b4:7e:8b:86:74:ff:b9:db:99:4c:7f:32:55:10:2a:
02:5b:7a:58:81:3f:aa:4e:5c:08:e5:24:59:66:e2:
5d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D9:DB:FD:C8:92:A9:2E:8B:F0:04:C1:06:7F:77:47:5F:BE:92:55
X509v3 Authority Key Identifier:
keyid:BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b2:40:89:6b:93:46:86:88:36:47:af:4c:4f:17:98:d1:24:
df:3b:6d:e5:07:2d:76:2b:9a:ed:ab:3d:87:7a:53:bc:6e:21:
69:bd:32:2e:75:62:bb:3c:8c:ab:11:56:c7:74:e6:e7:a0:d0:
df:5a:ff:68:79:4b:cb:45:20:ee:a4:6b:41:23:84:45:a6:87:
37:e6:e2:84:91:29:58:8a:77:c7:09:87:0c:0d:b5:a3:81:37:
91:98:c1:83:44:9d:c4:e9:d7:dd:4f:bd:3a:7d:23:70:4e:ab:
b3:94:08:19:60:25:ce:00:20:a0:86:e0:30:fb:81:08:37:de:
32:92:79:6b:48:19:53:1f:08:9f:2b:e0:bb:ec:0d:dd:65:82:
d5:7a:c0:79:bc:41:9f:0b:18:22:9f:26:d1:bd:de:92:0b:09:
21:cb:a7:b2:1b:45:4b:f7:af:19:a8:bf:3d:4f:82:ad:e8:ce:
ae:19:21:e6:22:9b:54:31:de:9e:81:a6:6d:af:b2:f4:db:91:
1d:fe:f5:64:2f:29:77:6e:30:31:23:ec:b4:7a:48:92:a0:3f:
0c:0c:d8:d7:32:50:cc:1b:5d:b4:49:2b:5b:ab:de:01:12:5b:
d5:00:2d:f4:d7:e1:46:53:2f:be:84:08:62:a3:de:7f:15:a5:
72:08:1b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:47:21 2025 by rpki-client