Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File: INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier: 40NIjqLmGaHuCHLttVhUZkZLqLpswjtmUhgjpa49Oh0=
Subject key identifier: 2D:BC:11:0A:CF:3E:81:8B:12:AD:AA:D9:F1:C3:56:E5:94:34:E3:99
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial: 0196B7B52BDECC8A331069AC3FBD62CD5B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number: 152C
Signing time: Sat 10 May 2025 01:00:25 +0000
Manifest this update: Sat 10 May 2025 01:00:25 +0000
Manifest next update: Sun 11 May 2025 01:00:25 +0000
Files and hashes: 1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: +1TU1zBsU8xpsHFr2v8Mwd8Bkjf4cLpgYcndEqg70PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:2b:de:cc:8a:33:10:69:ac:3f:bd:62:cd:5b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Validity
Not Before: May 10 01:00:25 2025 GMT
Not After : May 11 01:00:25 2025 GMT
Subject: CN=2dbc110acf3e818b12adaad9f1c356e59434e399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:a9:7b:b8:ae:4b:b4:27:91:8a:43:b1:da:
c4:90:0d:3e:3d:2e:22:25:5e:19:5f:01:a6:ac:67:
3c:8a:27:6a:5b:14:30:5f:a9:34:44:02:34:f0:ec:
bd:d8:29:c8:e3:e1:b2:31:1e:fd:ba:52:50:cf:99:
20:bc:8a:b0:2d:da:52:20:e0:62:35:7a:78:e5:1c:
40:64:03:dc:f8:4b:7c:fc:67:0d:0e:d2:3b:7b:26:
32:de:0f:9f:c4:44:4f:c1:5d:4c:41:c3:18:ad:19:
de:46:6c:bd:b6:9c:5c:8c:f3:16:81:79:4f:51:17:
ea:ac:d9:41:19:f0:37:a8:ed:0b:c6:6e:6c:0e:f1:
db:79:7f:d4:2f:d2:89:f9:85:2b:52:40:6f:30:ae:
b4:85:32:20:36:af:2a:5c:d0:4d:d9:27:2d:dc:f9:
25:5c:fb:97:ba:de:9f:24:91:15:44:64:5c:2d:8f:
03:c2:99:0e:86:10:bb:ef:80:23:7e:8b:8b:43:7f:
33:9a:79:d8:79:d8:66:de:bb:4d:7e:98:d3:d8:4f:
aa:a3:4c:20:2a:6f:3e:02:40:b7:f5:80:32:bb:24:
a9:bb:32:e8:35:af:61:22:ef:cc:55:a8:51:22:3b:
5a:f8:6d:08:29:04:dd:59:c9:1a:ab:62:d9:a4:3a:
35:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BC:11:0A:CF:3E:81:8B:12:AD:AA:D9:F1:C3:56:E5:94:34:E3:99
X509v3 Authority Key Identifier:
keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0a:49:4e:72:c5:05:79:95:f2:dd:40:87:52:93:58:6c:5f:
27:9b:e3:cc:0a:86:f4:2c:2c:58:b6:0c:48:16:5d:68:8c:a4:
34:9b:49:a2:e7:b8:f5:3e:e1:88:20:90:17:76:a9:84:94:34:
5f:4e:f7:8e:c5:93:5a:55:37:30:5f:46:c6:0f:44:a8:7a:47:
09:11:ba:8e:13:fa:3b:87:bf:c1:52:57:d9:e2:89:df:4f:c3:
11:33:54:30:06:4a:43:51:77:f7:5d:af:02:b3:4f:4a:db:e3:
ad:1d:6e:e8:25:57:7a:02:6d:48:17:54:70:5a:06:f1:00:73:
35:7d:32:37:b9:89:a2:c9:58:6b:47:1d:ef:93:9a:85:1a:da:
fc:45:ef:3f:d4:f0:ff:c0:4a:45:ca:a3:e8:f6:6d:1f:85:cd:
dd:5d:59:77:14:cc:65:31:01:ca:4f:2a:be:da:da:b2:1c:97:
fb:30:ac:ed:68:ca:f5:53:96:52:10:ab:7f:a2:84:ed:11:3e:
30:69:89:1d:1d:78:86:16:3b:73:10:3b:c1:91:21:31:f2:06:
37:bd:fe:7a:07:15:3a:d8:c7:6f:3d:0f:fc:bf:56:c1:43:ea:
b6:03:47:90:ae:2a:b8:95:28:9d:2f:ba:be:af:e3:89:03:27:
79:c9:d4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:07:48 2025 by rpki-client