Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier: OwFolMJS0vTofHRBGjuOJU3L2UVZ9S8dbTH3k8H6hS4=
Subject key identifier: 9F:FC:50:53:5A:34:4C:A8:D4:33:F9:0A:11:0B:CD:5E:3A:68:CB:46
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial: 0196BCDBAE603B0613A7A5B7FCAA71953E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number: 04DB
Signing time: Sun 11 May 2025 01:00:35 +0000
Manifest this update: Sun 11 May 2025 01:00:35 +0000
Manifest next update: Mon 12 May 2025 01:00:35 +0000
Files and hashes: 1: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: 0VPXN1yO01ydYunKuu7y17MIZMRK25u6hWpqzoIYwiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:ae:60:3b:06:13:a7:a5:b7:fc:aa:71:95:3e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
Validity
Not Before: May 11 01:00:35 2025 GMT
Not After : May 12 01:00:35 2025 GMT
Subject: CN=9ffc50535a344ca8d433f90a110bcd5e3a68cb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:64:87:82:95:9c:a3:36:38:f1:e2:64:3c:
a2:90:66:79:aa:e3:31:5b:3e:ee:c0:ae:52:fd:c0:
a2:75:d7:4f:fb:0d:63:af:8a:61:50:5f:f2:49:cb:
e7:27:60:f5:b2:9c:1a:94:b3:a2:44:88:14:3c:2b:
85:a4:51:4e:16:f6:d9:13:19:50:19:70:e3:18:46:
16:21:ff:04:12:33:1b:15:31:2f:5f:06:7c:7b:df:
60:67:cc:52:5f:06:c8:88:75:4c:f1:8d:94:26:dc:
2d:08:8f:36:f0:1a:fa:39:68:68:f7:f6:7e:15:f7:
b6:9d:4c:7d:f1:0d:5d:93:fd:9c:f0:d6:97:5f:82:
c7:be:c9:56:07:b8:90:b2:a8:aa:c7:be:b6:b3:2d:
46:e7:1b:8b:25:90:32:17:40:e3:ab:f6:f1:2e:b4:
0e:bb:2d:73:cf:ab:e8:e5:6a:8a:61:7e:a9:c6:0c:
f0:a0:42:71:74:3d:6c:85:b1:c8:e7:e6:a4:4f:04:
8d:bb:cf:4e:c0:e7:5e:4d:9b:e0:df:de:7f:08:d8:
9e:04:ff:27:ab:21:ff:1d:d7:ac:63:47:90:5c:67:
04:c8:69:29:e3:c1:03:67:6a:05:14:3e:7f:da:16:
f3:dc:df:a7:62:2e:d9:27:46:c6:cc:33:30:c3:bc:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FC:50:53:5A:34:4C:A8:D4:33:F9:0A:11:0B:CD:5E:3A:68:CB:46
X509v3 Authority Key Identifier:
keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2b:97:0a:96:76:e4:d7:f8:5e:62:3f:06:a3:43:86:79:39:
54:ff:26:90:c0:37:00:c2:2e:9d:18:a6:2d:6e:39:7f:7c:0c:
c9:59:c9:15:7b:56:61:87:0b:89:0c:17:19:7d:0c:69:13:0d:
56:31:ab:f2:1f:32:0b:cd:c1:91:dd:2e:b6:0c:b4:c3:d2:f6:
84:50:a1:0b:bc:c8:58:a8:18:e6:d7:1e:70:c1:6c:4d:21:4e:
cd:87:cf:b6:9a:42:35:66:25:55:c7:3e:56:a6:1b:87:44:ce:
07:a0:ce:4a:5e:96:ea:34:84:66:2b:7e:1a:22:df:8a:f3:82:
74:48:ad:c6:3b:2e:d4:39:6f:bb:b9:16:b4:ae:8b:f7:e4:f1:
c0:8d:b3:b7:17:a7:c4:96:76:eb:91:e3:4a:b1:85:89:e4:0c:
06:1b:70:ba:52:0d:c7:c1:ef:1c:41:c4:1e:36:73:3e:79:0d:
3b:38:de:0a:4d:9b:63:73:77:e8:9d:2a:1d:9c:f1:2b:53:65:
9d:bd:33:dd:89:c0:c0:27:3a:f0:1c:b8:6b:e8:d6:7a:f6:6d:
d6:01:9b:a5:3a:77:f2:df:62:9c:3b:18:9c:a4:1b:d9:27:3f:
b7:c2:0e:ee:5b:35:40:f5:91:88:c6:b5:5e:df:cf:2a:c9:0e:
07:ad:fb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:29:31 2025 by rpki-client