Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
File: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json)
Hash identifier: UtUXTXSoKwLCNSzXA9OKvbBCRnWPJBRugAmT7MjnP50=
Subject key identifier: 3D:02:B2:64:7A:7B:E3:E5:7A:7A:AD:66:B1:2D:C9:ED:CB:9F:AE:7F
Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
Certificate issuer: /CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Certificate serial: 0196D0D02BE85389AB72F8991CA6AFFFB222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
Manifest number: 086D
Signing time: Wed 14 May 2025 22:00:25 +0000
Manifest this update: Wed 14 May 2025 22:00:25 +0000
Manifest next update: Thu 15 May 2025 22:00:25 +0000
Files and hashes: 1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: fuVXEFs/ZogowBbhIHcWT46ei8DRoy7OImthxNalH2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:d0:2b:e8:53:89:ab:72:f8:99:1c:a6:af:ff:b2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Validity
Not Before: May 14 22:00:25 2025 GMT
Not After : May 15 22:00:25 2025 GMT
Subject: CN=3d02b2647a7be3e57a7aad66b12dc9edcb9fae7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:32:ba:8e:2d:2e:94:d1:6d:c3:d4:e8:68:
52:97:73:60:16:07:b5:9d:bb:d4:20:09:70:37:44:
92:18:8c:f2:05:4f:59:04:d8:3d:3a:68:de:8d:6f:
2d:b3:09:38:38:16:78:29:e2:12:63:20:c1:9a:02:
e1:01:dd:8d:b7:5b:6f:c1:bf:fe:06:0e:86:f7:20:
11:84:79:fd:d1:49:d4:22:1a:6c:0f:4a:5b:90:06:
6c:f7:9c:20:b9:0b:43:b7:ae:3b:23:42:11:e8:c4:
f2:90:85:7c:49:3a:20:82:fb:98:bc:54:a2:ec:fa:
e4:43:da:b7:0d:b5:8d:c8:44:75:50:07:05:67:ff:
e3:ce:1e:59:f4:9a:82:27:fe:c9:aa:e4:75:2e:dd:
f0:ec:5c:b7:6c:f0:81:a2:7f:b9:d8:b5:0e:b5:a0:
c8:61:18:32:e1:35:f4:0e:a3:5c:cf:60:a0:7b:c1:
01:a8:2d:be:4b:6c:0e:29:9d:2b:17:76:08:f5:d9:
4e:ff:05:2f:03:07:85:95:e2:02:cb:7a:74:34:9e:
f3:f9:bd:47:42:75:01:e7:1c:26:21:a8:c8:40:9c:
06:09:9a:24:9d:1c:7a:e3:ac:da:79:cb:51:68:54:
3c:41:77:7d:b8:e0:dd:7f:fe:44:19:d8:b7:72:3c:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:02:B2:64:7A:7B:E3:E5:7A:7A:AD:66:B1:2D:C9:ED:CB:9F:AE:7F
X509v3 Authority Key Identifier:
keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ce:e8:7c:90:a7:d8:5d:63:49:f8:24:91:00:77:6b:f1:fb:
a9:70:47:68:ac:01:4c:f9:86:74:31:f6:7c:e4:16:4d:57:55:
88:b3:24:44:3e:9a:59:01:94:20:27:67:b6:a4:9d:da:f8:7d:
db:34:52:1f:26:4c:d9:a7:16:18:1b:88:13:87:1d:3a:09:cc:
e6:6e:d8:03:69:bb:57:df:27:15:2f:c0:17:be:d1:98:de:25:
1b:e5:1c:59:4c:78:89:6b:67:61:11:43:d7:f5:9b:49:f4:b5:
28:1f:95:a5:4c:41:81:72:70:e1:67:74:e6:04:01:a7:09:a8:
04:eb:04:1f:86:b2:a3:6d:e4:ce:7b:38:ca:ae:8e:9c:23:90:
9a:62:8e:c8:54:46:d4:83:af:7e:79:b0:92:4c:8f:9a:d5:53:
92:d5:6a:be:5e:48:8b:7b:52:8d:b8:49:73:57:e2:e8:26:17:
b8:60:f3:43:5d:82:89:80:36:dd:9e:8d:f5:82:85:fa:b1:cf:
65:d0:45:6a:77:79:c4:64:74:46:dd:01:88:06:ba:ab:0c:84:
21:4d:08:e2:94:0c:fe:5b:22:3b:0a:95:4c:7e:49:4a:d0:c3:
8e:07:80:18:a3:f8:8d:c9:52:d6:30:73:5c:30:92:54:ab:fa:
50:5a:99:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:32:13 2025 by rpki-client