Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
File: 1bFX6mgu908PHvZ_oekWDRfNLpM.mft (raw, json)
Hash identifier: hwF8BgdNS2+6YR6e5b2C7RLljJ06yUC1jaZQMYU5oak=
Subject key identifier: 3B:13:A6:21:DA:22:89:60:A2:A8:08:18:F6:0A:9F:51:4F:32:46:EC
Authority key identifier: D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
Certificate issuer: /CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Certificate serial: 0196A0896816BDA558FF0D39C648BE31809D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 13:01:21 +0000
Manifest this update: Mon 05 May 2025 13:01:21 +0000
Manifest next update: Tue 06 May 2025 13:01:21 +0000
Files and hashes: 1: 1bFX6mgu908PHvZ_oekWDRfNLpM.crl (hash: Z/tYcoy9D0u6bF7CEcPJkeufH9JXwKTjrEDBSpwP0SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:89:68:16:bd:a5:58:ff:0d:39:c6:48:be:31:80:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Validity
Not Before: May 5 13:01:21 2025 GMT
Not After : May 6 13:01:21 2025 GMT
Subject: CN=3b13a621da228960a2a80818f60a9f514f3246ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:e8:02:03:8b:64:29:85:01:ae:1b:93:26:
4e:80:dc:e8:e5:0d:10:ab:a5:4b:d4:19:5b:6f:9a:
7a:c2:ec:9d:7c:12:86:1f:9d:0c:8d:4d:62:48:53:
5f:8c:8f:bb:cc:8d:f4:5d:7a:b2:b5:79:91:12:54:
a3:03:4c:16:56:51:64:1f:ab:e3:d5:ed:d4:6b:19:
ed:1e:9b:56:f8:bc:ef:00:37:23:f1:f4:aa:22:a7:
f1:60:4f:fe:42:bf:e3:be:5b:59:d5:f6:fd:f2:76:
b4:a7:57:af:5b:50:e0:76:67:cf:3d:dd:91:8a:a2:
f5:6e:1c:7d:98:40:8a:51:8f:c6:8f:4d:a5:a9:a5:
ca:81:dc:60:b1:dd:2c:77:07:59:b8:99:ff:89:10:
55:7a:6a:94:57:9a:b1:a1:d0:bf:01:12:7a:a1:c7:
5f:4e:ae:fb:f9:42:7e:ef:3e:a7:a4:73:d9:83:51:
ea:26:d1:ab:92:b3:34:f9:8c:41:78:b7:3b:ba:50:
90:be:42:ac:2a:e9:ae:97:d6:1b:e0:d5:ee:de:84:
49:74:d1:1e:d9:5a:8c:03:a9:fe:88:13:57:12:09:
4a:d0:e0:6f:4e:15:a1:4b:17:36:01:a9:ae:6a:d0:
de:46:43:8c:5d:57:e8:7a:42:10:47:dc:2b:d0:0f:
13:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:13:A6:21:DA:22:89:60:A2:A8:08:18:F6:0A:9F:51:4F:32:46:EC
X509v3 Authority Key Identifier:
keyid:D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f7:b0:24:2f:1f:48:5f:d1:71:0b:b6:24:e7:c5:98:d1:4b:
5b:3b:85:98:0e:92:f6:c6:e0:a2:5e:33:77:fa:1a:ef:72:9b:
a7:6e:da:9e:cb:ca:25:a6:15:dd:d1:18:89:5f:97:cc:57:0d:
d4:45:72:18:93:6e:1d:e8:cb:bc:b6:16:02:79:7c:5d:be:9a:
c9:62:3f:84:d3:79:1c:be:82:5e:ef:1c:a5:71:24:58:20:bb:
2e:0b:46:f2:d3:44:79:ac:e5:a4:24:a1:1c:2c:6f:d4:3d:d8:
40:27:0b:5d:0f:fa:15:9a:2e:dc:7d:9f:71:85:01:33:1a:47:
46:a4:50:eb:65:9b:d4:35:08:82:e9:00:a8:ea:fc:d5:10:1e:
20:76:95:29:66:49:5e:13:93:a5:40:86:55:9f:97:57:0f:46:
1d:dc:82:d7:64:c4:4d:51:0d:0a:bf:a9:50:41:46:d3:eb:a1:
d6:e0:4f:ab:44:0e:62:36:f2:fe:b9:f7:6e:13:1d:b7:c5:c4:
48:70:08:8a:50:12:2e:15:33:71:72:8e:67:5c:dd:d1:d3:46:
44:b9:14:3e:ce:d6:ac:39:f8:b5:7b:01:7a:ab:93:13:46:c4:
98:04:9b:e2:db:4d:6e:1a:37:ff:f1:c7:f0:03:23:3e:a5:d7:
0c:da:b7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:36:08 2025 by rpki-client