Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
File: tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft (raw, json)
Hash identifier: GE4CniJm6GAYBQGP0xC3TUwLWeBjyENjVRUbP7X3vcU=
Subject key identifier: 52:5E:5A:76:FD:D3:A4:60:42:97:8C:56:CA:8E:D0:6F:BD:35:3B:C7
Authority key identifier: B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41
Certificate issuer: /CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
Certificate serial: 0196DA7927F32FCCFB60A5993B66BE546835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
Manifest number: 0D2B
Signing time: Fri 16 May 2025 19:01:35 +0000
Manifest this update: Fri 16 May 2025 19:01:35 +0000
Manifest next update: Sat 17 May 2025 19:01:35 +0000
Files and hashes: 1: tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl (hash: Ri00NMGR75Spp3X1dHSDpqrCikhSZQI6harzXbK9qDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:79:27:f3:2f:cc:fb:60:a5:99:3b:66:be:54:68:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
Validity
Not Before: May 16 19:01:35 2025 GMT
Not After : May 17 19:01:35 2025 GMT
Subject: CN=525e5a76fdd3a46042978c56ca8ed06fbd353bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:9e:b6:a6:29:4b:6f:4a:b2:ad:e9:83:32:
fe:d7:55:14:24:01:ad:51:0e:c0:6e:51:99:a6:b8:
c6:1b:70:a1:a3:82:0f:71:4c:c3:21:98:d1:0a:89:
a9:22:51:ab:f3:6e:4d:ab:5f:7b:74:03:ec:33:93:
0c:fe:51:64:58:3f:9b:b1:a9:c2:f2:d8:4b:74:c6:
21:47:02:07:71:a1:24:c1:19:d0:21:02:01:6b:f3:
25:e0:99:f4:75:e8:a6:52:80:a6:a4:6c:80:09:fb:
4e:c7:e4:46:98:b9:cd:ae:49:25:64:34:dc:dc:cf:
5a:ac:7b:6d:1d:e0:ab:83:68:ca:b8:cb:8b:36:46:
c9:30:df:4a:59:fb:ec:18:3d:a6:ae:f3:e7:d5:dd:
4c:9c:35:fa:3e:a3:3e:b7:5a:77:77:ce:a0:10:14:
c2:70:ff:ee:c4:26:0a:99:3b:31:c6:45:1c:a8:9b:
4b:a2:aa:9e:12:48:f1:9a:cc:f3:2b:a4:01:e1:d9:
b2:a7:9b:5c:c2:34:a1:de:42:43:9e:a8:bc:d4:30:
bd:b0:1d:7a:48:11:2b:72:e9:6f:0f:6a:d9:79:06:
a9:62:3f:8c:cd:9e:bf:37:56:b3:44:cb:0b:8e:89:
3f:c5:14:24:6f:7a:2f:3a:5d:e1:54:36:9e:61:c5:
b0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5E:5A:76:FD:D3:A4:60:42:97:8C:56:CA:8E:D0:6F:BD:35:3B:C7
X509v3 Authority Key Identifier:
keyid:B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9f:1b:59:94:77:98:6a:b5:b6:28:ab:45:c3:13:40:84:23:
ab:96:d4:c8:3b:40:3a:31:b9:49:c6:6b:d8:99:df:86:3d:43:
a8:89:4d:e3:a1:44:15:e7:d4:e0:fc:f3:73:d1:de:6c:d2:a3:
33:37:1f:90:ce:30:b4:09:8f:c0:9a:d4:8f:51:f1:4d:01:01:
1f:e9:b0:5c:a2:33:4c:af:08:68:c7:8e:50:07:d7:0c:50:2f:
8a:94:5b:06:b3:61:8a:82:17:29:2c:ce:9d:06:8f:05:ad:59:
e7:dc:2b:ad:98:6b:e8:d3:18:84:c1:4d:6f:22:be:6d:dc:a3:
05:0a:46:ce:83:a8:46:27:68:fe:82:6e:51:59:80:06:23:f9:
9b:d0:9b:30:a3:c0:63:59:0a:f5:2a:ad:19:6e:f2:d6:e5:96:
46:6e:38:15:fb:02:28:95:5f:36:47:bd:39:c9:2a:64:d3:40:
cd:cd:98:1b:d5:ef:87:6b:33:43:b1:be:a5:31:e6:a0:03:50:
ca:94:9a:f6:6f:0f:e2:d5:fe:3b:3e:e4:fd:2c:30:f0:11:a3:
d5:34:9e:03:d8:6f:7f:02:29:5c:1b:77:b7:3d:26:da:e1:7a:
42:0e:f6:67:02:b1:44:de:27:d1:b8:2b:03:ca:a5:63:2d:12:
bd:f7:9f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:35:07 2025 by rpki-client