Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
File: dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft (raw, json)
Hash identifier: 4r1Cmk7wnWrrNIkiV0tQZc4T8nskg9VHRNjywd1uYR8=
Subject key identifier: F0:D5:31:C1:84:4A:23:58:95:42:E4:CF:96:82:EF:D2:2C:77:42:DF
Authority key identifier: 75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A
Certificate issuer: /CN=75923ec546df371d09e68c6b06025ea31261234a
Certificate serial: 0196D69BE3DDAB05C1DF1379A6A79BFDF971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
Manifest number: 153E
Signing time: Fri 16 May 2025 01:01:02 +0000
Manifest this update: Fri 16 May 2025 01:01:02 +0000
Manifest next update: Sat 17 May 2025 01:01:02 +0000
Files and hashes: 1: dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl (hash: oXHkgfbVUq2BHQVDDgAzcBx7NwULUNL+MzAVXg+3ehk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d6:9b:e3:dd:ab:05:c1:df:13:79:a6:a7:9b:fd:f9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75923ec546df371d09e68c6b06025ea31261234a
Validity
Not Before: May 16 01:01:02 2025 GMT
Not After : May 17 01:01:02 2025 GMT
Subject: CN=f0d531c1844a23589542e4cf9682efd22c7742df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:e0:1a:f8:2d:dd:81:2d:00:9a:26:10:84:
dd:96:8b:0e:d0:31:7f:8b:07:d9:b9:67:89:ab:bf:
0b:a0:c0:ff:f5:78:71:be:4d:74:42:03:c2:da:c0:
91:2e:c7:63:88:24:e2:28:73:14:d1:7b:9d:2b:ad:
94:22:7f:08:f7:48:65:e3:87:c8:a1:38:c5:c7:cd:
cd:b2:e2:2a:d3:87:69:09:f9:ca:01:ef:92:95:b8:
e6:30:d4:30:13:28:53:b1:41:4f:09:dd:02:5d:a7:
6c:cd:b6:97:59:3a:27:f0:2f:0d:45:f2:f3:aa:90:
a3:de:9c:e1:8f:e1:57:00:14:dc:55:1c:29:c5:c0:
23:61:5e:bc:5a:b0:e1:7c:aa:dc:b5:02:0a:ae:40:
3f:ee:07:b3:88:41:0b:f6:a6:72:35:af:11:cc:35:
5c:8e:a4:7e:ad:2e:d5:a5:df:9e:85:56:5a:76:ec:
96:8a:85:ad:81:f9:98:b6:80:eb:45:63:0a:f4:55:
7f:fc:6c:5a:dc:7b:7a:f8:83:da:a2:e5:69:d4:1d:
b9:39:d1:2f:e8:66:4b:1c:d0:73:eb:15:55:6c:17:
10:de:45:3d:00:55:b3:10:70:e5:b0:f2:63:fe:06:
aa:05:b3:db:e0:17:2e:ce:cc:9d:1c:7d:b5:50:3d:
e7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D5:31:C1:84:4A:23:58:95:42:E4:CF:96:82:EF:D2:2C:77:42:DF
X509v3 Authority Key Identifier:
keyid:75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:12:37:8a:67:13:d4:d4:16:91:ff:3c:17:03:09:55:be:83:
81:68:84:6d:fb:de:ae:14:25:b0:8c:48:31:bb:bf:63:f6:cb:
10:d8:48:3d:40:17:46:94:6c:56:7e:2c:81:fc:08:d5:34:8d:
74:f4:03:25:80:79:22:35:35:5a:f4:4c:c6:c7:ea:b2:b2:12:
a0:12:b9:f5:0f:8f:8b:74:a2:c9:4e:b7:7f:96:64:dc:67:5c:
35:b1:9f:39:07:73:08:cc:04:59:70:26:bf:5c:c1:24:98:e2:
f0:18:30:70:a5:fe:be:54:71:b4:88:91:2e:9b:cb:fc:49:45:
f6:0f:ea:3e:06:6b:1d:d2:6b:22:0e:eb:a5:c0:c2:49:67:89:
12:ba:65:e4:b5:c4:06:25:e6:b3:d3:42:8f:25:24:4b:b3:42:
1d:c3:ed:a1:dd:a6:61:46:5a:2a:37:94:b6:0d:20:a0:58:57:
af:96:ef:f8:27:ec:cc:6e:2c:32:c8:5e:23:e0:a5:10:73:92:
40:d1:1e:7e:87:c4:44:71:dd:ac:2d:e0:d5:fc:a3:f3:71:06:
48:87:94:70:6e:37:ad:91:ec:ad:ad:36:97:a3:55:82:7e:8b:
0d:25:b1:02:99:af:57:b8:6b:98:d4:1e:90:f8:f0:48:7c:1b:
7b:17:96:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 08:13:59 2025 by rpki-client