Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
File: bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft (raw, json)
Hash identifier: d+Cy1vvAYqapXvzO7U0wLY7C+50lsYOJaHyJw5kbJzI=
Subject key identifier: 9F:48:79:7C:4F:D3:86:75:AA:F0:55:50:F6:5A:FA:78:80:42:4A:E4
Authority key identifier: 6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7
Certificate issuer: /CN=6c29244ac40267eec47a91708f89cf5366eaa8d7
Certificate serial: 0196AFFCA6A749D05E1B1FBFFCC1C55B7112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
Manifest number: 0DC1
Signing time: Thu 08 May 2025 13:01:32 +0000
Manifest this update: Thu 08 May 2025 13:01:32 +0000
Manifest next update: Fri 09 May 2025 13:01:32 +0000
Files and hashes: 1: bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl (hash: is2E72FH4f0VeMpsVBmOu/4oeE5KoxAAee/w2kV+6cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:a6:a7:49:d0:5e:1b:1f:bf:fc:c1:c5:5b:71:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c29244ac40267eec47a91708f89cf5366eaa8d7
Validity
Not Before: May 8 13:01:32 2025 GMT
Not After : May 9 13:01:32 2025 GMT
Subject: CN=9f48797c4fd38675aaf05550f65afa7880424ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:5f:5b:65:6d:5e:42:e9:c8:5f:51:1a:9c:
89:b3:6a:16:a4:47:98:13:4d:1c:d7:dd:7e:dd:67:
40:1a:b0:72:46:4a:1b:8a:1c:43:2f:e5:20:da:5b:
32:a3:6d:b6:54:58:b7:2d:d2:eb:b3:eb:b1:72:a0:
2a:b1:f8:4d:f9:b3:8b:04:6c:fb:01:86:b4:b7:4f:
98:4f:61:2d:59:39:de:a2:37:3e:36:ac:65:c7:fd:
51:36:36:a9:af:22:21:5e:85:e4:44:f2:96:be:e7:
06:37:28:22:05:fd:00:23:ca:07:73:bc:a9:53:f5:
7a:ea:2f:18:ed:e3:dc:82:23:11:ae:b8:cc:7f:7d:
7b:9d:c4:2f:b7:03:1e:78:eb:14:29:3f:5c:e3:4a:
61:c7:8b:9e:a2:bc:52:18:a5:c6:ac:95:92:4f:83:
18:ea:76:9a:2e:ac:6d:f7:41:3d:4c:63:f1:45:fc:
a9:f9:d5:fc:36:4c:89:b2:60:67:c8:61:de:62:8f:
de:8e:5a:b5:1d:ea:63:17:44:d4:fc:61:f2:70:db:
6d:74:46:0d:b9:51:92:13:05:89:71:7d:38:7d:63:
8f:62:4f:2f:50:3c:9d:f0:fa:cc:71:8a:ee:75:b8:
a1:d7:49:85:af:f2:51:c2:52:ac:38:5f:6c:d1:cb:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:48:79:7C:4F:D3:86:75:AA:F0:55:50:F6:5A:FA:78:80:42:4A:E4
X509v3 Authority Key Identifier:
keyid:6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7e:b3:40:17:d8:c2:a8:41:b8:ab:d5:00:fa:89:9a:af:bd:
17:a2:df:80:31:ba:c2:62:b1:22:29:1c:aa:93:90:ad:22:3a:
76:1f:d8:30:d6:b1:33:19:54:a4:ab:86:73:f3:3e:85:70:a8:
86:1e:d1:c0:cd:0b:4e:a2:ed:12:f1:64:4e:53:d6:52:b3:25:
3e:5b:df:84:0d:28:bf:3c:44:41:6c:d0:9b:c1:d4:3c:7b:0a:
2c:b9:4e:a1:76:f5:2a:bc:4f:44:5c:a2:a5:49:23:d4:bc:86:
13:03:28:fc:0a:25:2f:c8:d9:75:2a:c2:97:b1:7d:f9:14:ca:
31:69:f3:ea:2b:cb:d5:03:c0:be:ae:76:fd:d7:ed:b2:4d:c3:
84:e1:e8:46:89:76:df:14:75:4f:b0:a0:53:5b:af:28:27:6b:
68:a6:00:64:d0:80:60:94:ec:80:ee:35:ef:7f:95:c9:b0:a8:
1d:51:21:55:c7:d9:c0:50:69:ed:85:39:98:21:7d:95:1e:41:
bc:7a:ac:5a:af:b3:0f:2d:ed:e1:23:3a:1d:f0:dc:df:b2:27:
97:1d:e0:e4:ed:30:31:b0:b8:d2:9c:5b:06:c0:40:a3:8d:a6:
1b:4d:c0:5d:c3:c8:67:06:5e:ef:94:7b:09:a2:fc:12:58:f4:
a2:db:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:55:54 2025 by rpki-client