Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
File: v74mhOFXoAYDw7KrDcUlKF6_64k.mft (raw, json)
Hash identifier: QwNYnY9UnqvV9FgYsQ0Ts4GmIytjY6MfDvi+k7+XPfo=
Subject key identifier: 14:87:DA:9E:E9:43:9D:6B:F9:60:74:F9:01:87:E3:D0:FE:16:37:35
Authority key identifier: BF:BE:26:84:E1:57:A0:06:03:C3:B2:AB:0D:C5:25:28:5E:BF:EB:89
Certificate issuer: /CN=bfbe2684e157a00603c3b2ab0dc525285ebfeb89
Certificate serial: 0196C917A60EDFA82F387565CBEEEC67CCE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
Manifest number: 0213
Signing time: Tue 13 May 2025 10:01:32 +0000
Manifest this update: Tue 13 May 2025 10:01:32 +0000
Manifest next update: Wed 14 May 2025 10:01:32 +0000
Files and hashes: 1: v74mhOFXoAYDw7KrDcUlKF6_64k.crl (hash: E6Ed+17jpUcw/iinCK4avB3JuNnCjDFN5h+4V0Ai1/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:a6:0e:df:a8:2f:38:75:65:cb:ee:ec:67:cc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbe2684e157a00603c3b2ab0dc525285ebfeb89
Validity
Not Before: May 13 10:01:32 2025 GMT
Not After : May 14 10:01:32 2025 GMT
Subject: CN=1487da9ee9439d6bf96074f90187e3d0fe163735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a4:78:47:03:61:40:13:81:91:3e:96:75:6a:
11:8a:2a:d8:fd:96:13:fa:6d:b8:4b:fc:b8:0d:11:
55:a4:58:95:0c:55:1e:88:2a:00:cd:a9:ab:4e:c4:
23:e2:e6:56:92:6c:a3:7b:f2:bb:1d:0f:05:cf:68:
37:ab:f6:42:a8:e9:a7:fe:e9:68:b9:3a:0c:86:98:
0b:d2:60:68:32:75:9d:6d:f7:02:5a:d4:82:57:28:
04:cc:1b:1f:27:c7:30:95:f3:af:42:52:4f:b0:d1:
4b:c2:79:3f:97:19:ce:a8:78:0c:1d:62:cc:b9:cf:
ae:b3:0c:6d:59:c8:80:ce:5d:0b:f5:b4:71:c4:d0:
31:4f:6e:15:50:87:05:95:86:28:9a:09:6c:0a:6e:
84:33:5f:d9:93:14:d0:45:3b:3e:57:29:88:e3:40:
1d:7e:19:ee:17:8c:8d:57:aa:6a:d5:1f:66:42:7c:
ec:38:0b:a3:55:67:4f:57:54:ab:b3:37:be:76:dd:
fc:b0:23:66:9b:23:9e:ca:60:b2:14:30:26:36:02:
b9:93:6b:47:a7:0b:aa:a4:51:c9:3f:50:cb:f4:8f:
40:4b:4c:29:cf:b8:af:29:d0:85:30:0a:89:23:f0:
3d:36:2e:45:05:b3:30:32:74:01:87:91:c4:5e:35:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:87:DA:9E:E9:43:9D:6B:F9:60:74:F9:01:87:E3:D0:FE:16:37:35
X509v3 Authority Key Identifier:
keyid:BF:BE:26:84:E1:57:A0:06:03:C3:B2:AB:0D:C5:25:28:5E:BF:EB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:04:f8:d0:07:89:3d:42:38:5c:fd:f8:d0:94:85:d4:d1:81:
c6:33:3e:bf:0a:18:20:70:64:cd:a8:46:d7:25:fe:59:f5:25:
50:21:f6:1d:45:f4:bb:1f:f6:5f:51:5c:1b:45:5c:c2:e0:00:
4f:b4:1f:cd:5b:d1:8b:95:ab:16:7d:36:cb:63:83:ab:b6:52:
07:fb:62:58:4d:c2:24:ce:5e:c8:8a:04:b8:a4:7f:49:d5:e6:
29:de:e4:ca:ad:84:90:eb:c7:19:86:a2:fa:13:4a:e3:f7:a3:
36:21:87:39:18:07:c4:90:8d:95:dd:c1:7f:c4:c6:04:0b:00:
33:db:14:76:03:81:dd:3a:29:f2:96:f2:df:4f:16:4e:26:cf:
fe:8f:a2:b8:f4:f2:aa:b0:42:de:03:d1:4c:c0:33:d7:78:fc:
c5:2c:cf:54:bf:52:d2:dd:f1:a1:85:5f:ce:35:7a:44:56:35:
a4:00:9a:5b:0c:bf:ef:80:df:55:f1:6e:89:fc:b2:3b:aa:28:
68:9c:88:d8:9b:17:91:b4:a0:dd:a8:25:ab:7f:d4:fe:b4:c8:
07:a7:4d:70:66:81:42:ea:37:7a:ab:0e:c8:f1:c3:73:aa:9f:
00:98:66:da:b9:e9:54:a5:e9:02:80:50:ad:28:13:48:11:0d:
5f:f6:91:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:13:48 2025 by rpki-client