Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier: oBL0+WC69qHZuCurXwZ0A9j6mrtpl97hCfdeREI0DKA=
Subject key identifier: 5A:95:9A:95:7D:A8:F0:08:4C:81:F4:35:EB:4A:27:EC:98:58:05:B9
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial: 0196C34BB0E847CDE8AD74F412880995A7CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number: 0893
Signing time: Mon 12 May 2025 07:00:39 +0000
Manifest this update: Mon 12 May 2025 07:00:39 +0000
Manifest next update: Tue 13 May 2025 07:00:39 +0000
Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: L9b1EtloM3+qgTKjcMkJRXk+id6W/e0iGbtj2ArbIV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:b0:e8:47:cd:e8:ad:74:f4:12:88:09:95:a7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Validity
Not Before: May 12 07:00:39 2025 GMT
Not After : May 13 07:00:39 2025 GMT
Subject: CN=5a959a957da8f0084c81f435eb4a27ec985805b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:14:cf:31:d2:de:44:66:4f:1d:aa:9b:1f:8a:
9b:9e:30:9e:49:67:bd:3f:6a:6a:8b:b3:a2:98:f3:
1e:f1:38:05:b8:73:fb:67:1e:f2:9b:8c:8a:25:95:
f1:d0:3a:d3:4e:d4:cd:10:de:84:c2:de:8f:ad:5d:
1d:76:d4:ff:05:c8:f6:b5:99:e2:ff:60:2e:9f:0b:
c3:a7:e2:36:01:4a:5d:44:fd:d2:01:53:17:98:da:
2f:36:42:1c:85:ea:d1:dc:03:fb:08:21:4b:16:9a:
50:70:3b:12:31:08:ba:49:64:c1:bb:a4:9b:cd:2b:
c0:17:5d:8f:8c:01:42:78:c6:51:9d:e1:90:37:82:
0d:af:28:46:6c:7b:8a:2c:bf:8b:41:4e:b9:48:48:
66:96:1b:ab:b8:54:78:b7:6c:3e:73:98:89:01:1f:
4f:ad:a9:38:ca:57:0f:78:ae:25:d9:83:c3:88:a8:
65:e0:47:b5:7f:9d:6a:f1:a0:e4:4b:79:8f:5d:4a:
ab:1c:83:08:41:42:04:96:17:fe:9a:af:79:94:9b:
b8:8d:66:9d:f0:2b:7a:16:23:68:b7:58:7d:76:65:
df:92:df:bf:cd:f1:e0:8b:a3:32:98:be:1a:05:3a:
11:e0:08:44:97:73:b0:8b:d3:ad:5b:8d:40:8c:7f:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:95:9A:95:7D:A8:F0:08:4C:81:F4:35:EB:4A:27:EC:98:58:05:B9
X509v3 Authority Key Identifier:
keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:41:06:9d:83:63:cd:7e:fa:77:14:20:1e:b5:a6:83:6b:cc:
95:c5:80:75:96:21:4e:52:6c:8d:99:07:ff:0a:ad:23:d6:b3:
4e:47:e5:2b:39:74:ae:8c:25:3f:33:40:9c:3d:c3:04:dd:89:
ed:6a:e3:7e:0b:f1:1a:0b:db:e0:3b:bd:eb:64:f8:f3:16:4e:
da:d5:f8:1d:a0:f2:67:41:70:0a:ff:e1:df:1c:3b:79:04:0f:
b1:32:ec:c6:96:63:48:01:06:b0:40:19:73:d8:b1:3e:37:1d:
53:75:15:af:45:32:47:99:0f:3b:c4:5a:e3:d6:42:fd:8f:fc:
1d:72:17:14:3f:0c:61:9b:46:fb:46:1d:69:7c:a5:14:83:bb:
c1:bb:42:d8:96:8f:49:b9:f0:ae:cb:17:43:da:bf:e1:38:3a:
6f:3b:cd:b4:d4:75:fb:8b:c4:cd:dd:2e:33:b6:25:09:3c:7e:
5f:ac:46:be:d6:97:ff:ed:b4:8f:3a:1b:ce:5d:ef:9e:fb:3b:
b0:37:50:9f:8c:a1:24:78:cb:1e:f9:cc:84:07:0c:c3:0a:a5:
73:d0:7d:77:8f:8b:27:67:dd:c3:c2:85:2d:8d:c0:7d:fa:a3:
4b:37:ad:7f:e6:06:e9:7a:38:83:a1:f7:24:2e:28:e1:f9:6f:
54:12:61:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:47:42 2025 by rpki-client