Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
File: stNBgAdlZtcr7mHzoybFbgq7gEo.mft (raw, json)
Hash identifier: modd3KMGFb+jOW2FOqfiBs07FW/nn4mn87ubCpyV2c8=
Subject key identifier: 9D:CB:86:B5:7F:29:ED:FB:B7:31:95:B5:F1:DD:6B:E5:20:13:E2:F4
Authority key identifier: B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A
Certificate issuer: /CN=b2d34180076566d72bee61f3a326c56e0abb804a
Certificate serial: 0196C34BDFA2A91257BF972F19A9CFC68158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
Manifest number: 0E10
Signing time: Mon 12 May 2025 07:00:51 +0000
Manifest this update: Mon 12 May 2025 07:00:51 +0000
Manifest next update: Tue 13 May 2025 07:00:51 +0000
Files and hashes: 1: stNBgAdlZtcr7mHzoybFbgq7gEo.crl (hash: 57nTQtXRLDV5FkimxmnkwiZIsvFtgHiw9LDgQOaxhwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:df:a2:a9:12:57:bf:97:2f:19:a9:cf:c6:81:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d34180076566d72bee61f3a326c56e0abb804a
Validity
Not Before: May 12 07:00:51 2025 GMT
Not After : May 13 07:00:51 2025 GMT
Subject: CN=9dcb86b57f29edfbb73195b5f1dd6be52013e2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:b8:21:27:b3:82:9a:0a:41:98:c4:c3:be:
41:88:ed:96:f1:79:4a:58:a8:da:83:bf:96:7a:67:
05:5e:4c:29:40:55:cf:dd:14:6c:79:60:b1:e7:04:
45:00:46:32:15:e9:26:ff:64:d3:73:42:7d:d1:44:
c2:01:9a:43:f4:fa:64:26:36:13:fe:46:53:44:c3:
ac:c7:cd:98:36:d2:5b:76:9c:5d:c6:47:41:4c:d1:
4f:23:68:49:93:fa:38:4a:14:1f:2b:9c:30:a8:f3:
89:a6:79:a1:4e:02:05:47:59:19:a5:f1:57:4c:ce:
51:cf:30:e2:c0:05:73:f6:d9:3b:cd:4f:02:16:41:
e2:d8:29:c9:4d:91:85:27:af:97:1f:8a:45:4b:39:
93:78:4c:11:ae:ed:83:e4:6c:97:d7:93:75:50:dc:
6b:75:92:a1:ed:80:68:33:97:3d:54:25:30:3b:96:
30:e3:5c:eb:1a:51:57:8e:8b:4b:ab:89:83:01:5f:
06:f7:51:c4:5a:44:f1:f4:bb:5a:cb:33:07:68:80:
47:e7:2d:0f:7f:c2:93:35:f4:e0:d0:5d:0e:fc:0a:
65:12:68:5c:fc:22:7f:e1:cf:6a:8a:c1:fb:45:2d:
e4:48:0b:3b:a0:3b:d5:59:67:25:53:1d:a5:26:d3:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CB:86:B5:7F:29:ED:FB:B7:31:95:B5:F1:DD:6B:E5:20:13:E2:F4
X509v3 Authority Key Identifier:
keyid:B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:33:b9:c7:2a:0a:8d:10:62:bd:ef:b9:32:7e:1d:5a:03:d6:
7f:ad:27:e9:17:31:07:55:c7:8c:41:00:4c:b6:be:28:98:e1:
30:11:74:5a:73:43:91:89:62:2a:57:15:7f:51:1d:24:22:e7:
2e:63:3b:57:dc:6c:31:84:dd:ae:41:e0:16:74:69:2b:fa:ff:
ed:d1:30:fe:3d:5a:ec:aa:e2:aa:39:a5:de:e8:62:63:ec:dd:
f5:57:ed:cf:59:9e:f5:f5:06:a2:8e:04:34:82:36:ce:3d:2b:
23:44:fe:99:d0:71:38:bf:a7:b0:9f:b7:df:f5:38:38:68:c5:
f4:3b:53:8f:6d:42:be:01:ab:19:86:f4:aa:b6:60:a6:15:ad:
1a:aa:86:09:4f:b4:40:67:50:fa:ca:f2:38:b5:3e:89:06:eb:
31:19:e1:52:2d:e6:ac:95:ce:43:57:2e:19:89:93:72:4e:55:
8e:8f:11:0e:fb:db:ae:1b:c3:15:1a:44:09:66:c7:8f:13:da:
75:70:23:d0:68:75:ad:53:f8:88:a5:f8:88:f9:2f:4c:8a:19:
52:fb:4a:86:01:42:2d:ec:46:a5:50:b8:43:46:e8:eb:4e:db:
68:22:7a:cf:5b:a3:6e:3b:40:e1:dd:a2:52:dc:d1:d3:de:d6:
fc:62:bc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:18:15 2025 by rpki-client