Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
File: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft (raw, json)
Hash identifier: xMBLmVSFsts2uVQTxx8m6/seheyTeDsW817xDqi+1vc=
Subject key identifier: 7A:10:39:89:37:64:AF:F4:2B:40:DB:65:ED:D1:10:AF:4E:71:A1:7F
Authority key identifier: 8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
Certificate issuer: /CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Certificate serial: 0196B6A2E523688C9B5AE101E845DA3EB48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
Manifest number: 137D
Signing time: Fri 09 May 2025 20:00:50 +0000
Manifest this update: Fri 09 May 2025 20:00:50 +0000
Manifest next update: Sat 10 May 2025 20:00:50 +0000
Files and hashes: 1: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl (hash: uUEJHUv9BBomd2XYk/Ns0Ll5BCyX5dMVE44y04uejeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:e5:23:68:8c:9b:5a:e1:01:e8:45:da:3e:b4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Validity
Not Before: May 9 20:00:50 2025 GMT
Not After : May 10 20:00:50 2025 GMT
Subject: CN=7a1039893764aff42b40db65edd110af4e71a17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:9f:af:c0:e0:2c:2b:11:02:1a:7a:13:69:
fe:a5:a1:0e:28:43:41:75:f8:66:75:9a:3c:c2:0a:
6a:f9:e1:c0:9a:f5:fa:dd:cb:83:3e:3e:80:ac:c1:
15:cc:8e:9a:dd:ab:86:f4:df:a3:43:2e:fc:64:77:
0d:32:72:0d:65:ec:b6:1c:89:db:ce:8b:ab:2d:a5:
0e:4a:fc:29:62:03:e2:53:f8:8b:ca:d8:8a:c1:5a:
da:08:b6:36:cd:71:58:e0:66:79:db:7c:33:f0:4e:
6f:33:06:a5:ba:1c:63:e8:c0:ce:cb:5b:f2:3c:29:
cb:8e:32:cb:25:70:4f:4f:3e:d9:57:d7:da:f1:4b:
f3:3a:70:8c:8e:34:b9:64:2e:94:85:10:38:f7:2e:
aa:09:48:7e:0c:7b:1b:06:9c:8f:6b:86:49:00:62:
1b:55:08:00:0d:08:20:75:a0:1b:0b:74:44:72:e0:
12:d3:62:e1:48:8d:f5:42:3a:a5:33:33:ee:9a:41:
e2:f3:da:3a:50:48:f0:88:9b:43:27:97:33:0e:be:
09:84:c5:06:81:4e:e8:a1:5f:72:75:d9:0b:16:57:
78:52:96:7d:47:9a:ac:ea:d9:32:61:1e:4f:58:5e:
c7:e1:ed:e4:72:dd:8b:0e:36:2c:25:07:a0:69:e9:
31:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:10:39:89:37:64:AF:F4:2B:40:DB:65:ED:D1:10:AF:4E:71:A1:7F
X509v3 Authority Key Identifier:
keyid:8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:03:0c:ed:6c:f4:fe:5c:13:33:d8:c6:62:76:ce:c8:93:7c:
1c:49:bb:dd:05:d8:9e:11:54:f6:64:57:03:8b:ed:72:47:4a:
75:64:be:96:c0:2e:e5:a3:19:71:f2:96:1d:57:37:3c:19:98:
ea:0f:af:26:9d:67:5a:94:bb:f3:92:1f:86:40:e8:b9:fc:72:
68:de:a2:48:72:ea:f9:95:66:84:18:4e:a9:06:fa:9d:eb:73:
7c:e6:63:da:fa:02:0b:ff:f5:09:79:47:03:5a:4a:6c:27:b0:
e3:e3:f7:4f:94:b9:cb:ab:cf:b8:22:d7:04:05:e4:cc:e2:89:
b3:d9:9c:bd:ac:a9:84:d5:6a:f1:1c:28:d4:9f:5e:3d:09:3e:
dc:60:0a:90:7d:3c:27:09:e3:8d:cf:c5:3c:b5:1c:29:8a:b1:
b9:08:6d:a0:5a:39:11:39:c9:4e:9a:48:96:1f:85:43:0c:53:
a1:ac:87:f7:24:30:a8:68:ff:29:27:ee:04:9b:c7:80:f5:2c:
53:8b:40:61:19:98:95:92:2c:60:a6:e2:4b:cf:eb:7a:1a:7b:
32:d8:c1:6d:c1:f5:e4:16:5b:88:96:fd:ed:50:cc:a5:ae:20:
e9:d8:c4:0c:b5:a8:fd:30:cb:7d:55:e8:6d:12:61:19:3b:d4:
96:aa:73:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:52:37 2025 by rpki-client