Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
File: mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft (raw, json)
Hash identifier: 4YZVRBVPdJeDZcvFMPy/r/56mcuMWRxVM5OFjrrCOSA=
Subject key identifier: 40:5F:12:58:37:FE:C8:77:C4:3F:E3:A6:6C:D8:C1:AA:22:37:1F:1E
Authority key identifier: 99:72:14:8C:73:62:C2:C9:39:9B:B3:AF:74:15:92:C4:25:16:C5:47
Certificate issuer: /CN=9972148c7362c2c9399bb3af741592c42516c547
Certificate serial: 0196BCDBDDA3A5979E891A65296FB62DAAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
Manifest number: 106F
Signing time: Sun 11 May 2025 01:00:47 +0000
Manifest this update: Sun 11 May 2025 01:00:47 +0000
Manifest next update: Mon 12 May 2025 01:00:47 +0000
Files and hashes: 1: mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl (hash: mjen3bH5zktRbWgFQII90LSYHY803b//rHFfN0pO0VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:dd:a3:a5:97:9e:89:1a:65:29:6f:b6:2d:aa:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9972148c7362c2c9399bb3af741592c42516c547
Validity
Not Before: May 11 01:00:47 2025 GMT
Not After : May 12 01:00:47 2025 GMT
Subject: CN=405f125837fec877c43fe3a66cd8c1aa22371f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:45:55:87:b8:e3:29:80:b6:ef:b7:4d:8b:
de:f2:e0:c2:d6:f9:b4:f8:08:f2:36:f7:2f:7b:6d:
89:e4:aa:71:21:1d:f2:3d:72:68:4b:00:c4:bd:77:
59:1f:83:85:40:aa:d4:4b:08:82:4d:12:9a:3a:4d:
eb:66:77:b1:a4:23:3f:76:2e:38:b2:23:46:00:1c:
65:fe:d8:dc:3a:d8:df:e0:18:90:36:b9:9e:a4:aa:
f2:47:f0:1b:22:1c:be:53:9f:78:e0:26:83:48:f0:
c5:e7:16:d7:e6:42:8c:84:1a:bc:c8:ba:f9:99:74:
3c:b4:e1:d2:f6:98:1a:d6:c0:db:e3:fa:20:fe:e9:
6b:8d:98:83:34:aa:fa:02:3f:84:d4:4b:ce:67:4e:
26:36:07:4a:22:50:02:4d:72:0f:a0:db:8f:8c:be:
73:a1:78:40:23:9d:65:15:ba:12:8c:e4:51:97:28:
8a:cb:b3:35:9c:0d:b5:1b:40:e0:97:9e:24:09:dc:
01:32:d9:66:e3:47:ab:4e:fc:ee:fa:b9:4e:7b:84:
59:8e:fd:2d:7f:87:02:69:49:0b:39:9f:64:52:95:
66:4c:f5:80:fb:2c:01:05:b1:8c:4e:08:af:db:5b:
7a:97:2f:9b:f4:f1:05:a4:8b:b0:61:03:1a:01:fb:
01:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5F:12:58:37:FE:C8:77:C4:3F:E3:A6:6C:D8:C1:AA:22:37:1F:1E
X509v3 Authority Key Identifier:
keyid:99:72:14:8C:73:62:C2:C9:39:9B:B3:AF:74:15:92:C4:25:16:C5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:83:68:b4:fa:6b:69:23:9d:f5:3d:5d:01:2f:12:c4:e4:41:
aa:9c:eb:8e:39:22:7e:50:9b:ad:65:33:05:bf:40:85:75:49:
08:4f:2a:04:5b:5a:0c:50:1c:84:36:51:e1:72:56:15:c6:ec:
e8:f6:3d:eb:17:fb:d0:3f:8e:d4:78:7e:fb:ed:ed:cf:7a:8e:
c6:a5:b7:30:c7:d6:69:89:b7:a3:52:03:b4:96:b5:37:2f:b6:
21:1b:0d:31:df:fa:72:91:86:61:a3:0e:77:04:4d:00:dc:9c:
3b:76:04:85:d2:ad:2a:fe:3a:6f:7c:e0:72:b8:73:0f:51:0d:
4b:24:08:68:d0:3b:45:58:87:70:94:67:f8:1f:9a:54:59:5b:
66:6a:4f:ea:85:d1:4e:21:b2:8e:4e:32:dc:6a:c4:7c:07:ee:
5a:1b:26:d7:70:a6:cb:19:9c:97:59:34:be:5c:bf:9e:01:1a:
ea:db:b6:60:b3:94:f9:40:1d:5b:6a:b0:ee:ab:f3:76:ce:df:
7b:9a:31:4a:e3:93:54:eb:55:96:b2:1b:24:b7:f9:ff:4e:bf:
5a:02:58:c6:cb:f9:cd:3a:c2:c5:8b:79:53:4a:0b:6e:54:99:
bb:c0:3d:5c:21:d3:68:05:0c:84:98:31:02:52:40:8f:d6:09:
70:6c:67:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:33:32 2025 by rpki-client