Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
File: RzLsDpHbv5TdodZQRH0miXbWIJo.mft (raw, json)
Hash identifier: j0b/XR+9c6X68GeksaUwWXP8EH2UyHK/6ECSrg6uOKk=
Subject key identifier: F0:86:07:36:4C:42:83:EA:BA:DD:19:11:37:3B:6F:08:48:11:CE:7B
Authority key identifier: 47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
Certificate issuer: /CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Certificate serial: 0196BAED366F1A95C61E50D9D3D59AA134E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
Manifest number: 09E9
Signing time: Sat 10 May 2025 16:00:30 +0000
Manifest this update: Sat 10 May 2025 16:00:30 +0000
Manifest next update: Sun 11 May 2025 16:00:30 +0000
Files and hashes: 1: RzLsDpHbv5TdodZQRH0miXbWIJo.crl (hash: 9ToT+0WVmVqJJM8Q8hzBzuEjSyChVgbDyxd3up0+2F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:36:6f:1a:95:c6:1e:50:d9:d3:d5:9a:a1:34:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Validity
Not Before: May 10 16:00:30 2025 GMT
Not After : May 11 16:00:30 2025 GMT
Subject: CN=f08607364c4283eabadd1911373b6f084811ce7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5c:cf:a0:21:35:ba:6b:55:11:22:49:5b:33:
50:7f:49:23:a3:25:76:01:63:9e:dd:5e:25:ef:5b:
16:6f:bf:95:4d:66:95:d7:2e:bc:cb:40:c9:17:62:
55:2d:f2:f5:98:f1:d8:ba:35:29:04:8a:4c:31:0f:
aa:f1:ef:a7:10:11:03:3b:ea:c0:90:18:a7:99:91:
5f:c5:df:2a:65:20:10:2d:21:06:67:53:c9:fe:4d:
36:7e:b0:71:f4:3e:aa:87:c6:ef:9e:87:ac:41:05:
19:96:56:36:61:61:64:34:6c:a8:30:8a:6a:7e:21:
65:4e:f6:1f:9e:67:96:aa:21:97:38:a4:20:63:64:
e9:a7:8d:61:e2:7e:9c:ef:7b:31:d0:8a:18:9e:ee:
f0:32:2b:6d:c7:ba:ba:cc:07:4a:e7:0c:b5:72:19:
32:f3:4c:3d:50:79:a0:07:47:f8:13:98:cc:b1:ae:
fb:87:62:95:ae:3d:e5:5d:00:39:c6:98:24:0d:24:
61:68:25:c6:dd:d9:26:32:9b:31:ce:65:e1:a9:ea:
72:16:0b:58:2e:29:54:be:39:0d:f4:78:ed:f4:a9:
e8:89:ca:5e:d6:b9:5f:f0:e1:cd:86:d3:52:40:40:
77:0c:40:19:2c:10:ad:47:5f:11:33:19:3e:4b:6a:
2b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:86:07:36:4C:42:83:EA:BA:DD:19:11:37:3B:6F:08:48:11:CE:7B
X509v3 Authority Key Identifier:
keyid:47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:36:d6:23:1d:45:09:c7:33:83:28:8f:27:79:04:59:7b:93:
dd:ef:45:a1:b9:99:f1:91:59:d4:e1:98:1e:73:f5:b7:a4:38:
72:23:98:eb:5f:95:a7:36:02:60:6e:b4:4c:80:5f:15:15:0d:
57:6c:50:11:04:52:17:2f:9b:1b:b5:ec:5d:cf:0c:9d:e7:af:
c3:5b:0d:f2:42:19:3c:05:09:5a:e3:f8:dc:4a:d8:c2:34:3e:
7a:98:9c:0a:0e:68:57:a9:76:93:97:cc:88:19:62:28:a3:79:
64:f7:87:87:69:f6:b4:ee:82:ea:c7:3b:62:04:13:dc:88:48:
43:78:00:c6:de:19:1b:48:09:1a:bd:ee:50:a8:c0:a0:22:ab:
6e:02:26:38:cc:bf:8c:5a:51:88:cb:e1:89:96:b9:23:fc:55:
92:af:2a:d4:52:cd:ef:1a:8f:c6:31:00:72:fb:02:32:bf:62:
a3:08:33:4f:6c:6e:0a:e6:29:48:dd:2f:9b:e7:3c:06:df:c9:
c1:71:95:c7:11:31:56:69:d5:a7:50:cf:2a:f4:37:dc:90:d6:
c1:85:68:64:0d:d7:f4:3f:5c:96:db:7c:60:51:3c:28:f4:55:
98:a0:65:66:73:9b:73:2b:2d:a2:aa:3c:29:c3:c8:21:b8:57:
6f:e2:2f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:16:24 2025 by rpki-client