Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
File: idSzdf1Mr9XfusQG3SWmHSLdNso.mft (raw, json)
Hash identifier: ZUESiJ1IiWfr8dUCyDszazXrQYuwF82ZjER5v6rdpjI=
Subject key identifier: 93:EC:60:9D:D7:8C:2F:1E:53:3F:49:63:03:7C:15:D7:5E:14:F7:17
Authority key identifier: 89:D4:B3:75:FD:4C:AF:D5:DF:BA:C4:06:DD:25:A6:1D:22:DD:36:CA
Certificate issuer: /CN=89d4b375fd4cafd5dfbac406dd25a61d22dd36ca
Certificate serial: 0196A6545AEF8837841A212FA053C97BE054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
Manifest number: 10A5
Signing time: Tue 06 May 2025 16:01:08 +0000
Manifest this update: Tue 06 May 2025 16:01:08 +0000
Manifest next update: Wed 07 May 2025 16:01:08 +0000
Files and hashes: 1: idSzdf1Mr9XfusQG3SWmHSLdNso.crl (hash: bePs3zmO6vZ+9j75zSoe5Km3rVI0SJGA019oew7N0w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:54:5a:ef:88:37:84:1a:21:2f:a0:53:c9:7b:e0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d4b375fd4cafd5dfbac406dd25a61d22dd36ca
Validity
Not Before: May 6 16:01:08 2025 GMT
Not After : May 7 16:01:08 2025 GMT
Subject: CN=93ec609dd78c2f1e533f4963037c15d75e14f717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:b7:ea:89:83:1c:69:9f:55:f1:76:8c:5b:
bc:11:d3:d5:41:f2:97:23:27:d8:22:4d:6f:c5:a1:
23:02:c0:66:a6:d3:d0:ac:4d:02:9c:d3:da:01:52:
2e:a7:71:28:82:b8:d0:70:ee:3c:30:90:d4:bb:ef:
2d:c6:23:d6:d5:a8:0d:d1:46:18:37:9e:a4:e8:50:
b4:96:fd:f8:d8:99:6c:5d:33:91:73:35:24:60:3d:
10:16:79:a4:d7:1e:77:0a:eb:88:17:48:e0:1e:06:
11:b9:86:4d:c1:37:c6:ba:03:57:d7:be:44:bc:cf:
1d:b5:cc:c2:3a:dd:fc:a0:70:05:38:f9:b3:2c:49:
52:29:ef:47:1b:6a:1a:b6:ef:a0:30:6b:2d:81:33:
c4:af:28:d7:07:10:30:9f:5a:7a:fd:27:27:02:14:
ec:fd:67:a4:b8:0d:b0:49:3b:8d:77:a5:b5:bf:a8:
1f:f2:cb:c9:cf:c2:d7:43:f6:c3:96:00:37:4c:90:
fd:19:70:83:f6:a3:c7:a4:30:77:11:80:cf:41:30:
16:70:11:0a:ab:a9:cb:9b:b3:9c:51:8e:b1:ee:8b:
5a:13:39:1a:57:98:e2:4c:2c:99:2a:ec:ae:f6:34:
e4:ce:56:c4:00:e5:7c:25:f7:89:e0:87:d5:e6:a0:
87:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EC:60:9D:D7:8C:2F:1E:53:3F:49:63:03:7C:15:D7:5E:14:F7:17
X509v3 Authority Key Identifier:
keyid:89:D4:B3:75:FD:4C:AF:D5:DF:BA:C4:06:DD:25:A6:1D:22:DD:36:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4e:71:95:c3:3d:08:60:02:02:6b:13:cb:c7:b2:e3:0b:92:
29:a0:f8:45:f4:6e:c9:ce:ab:a7:02:79:ab:3e:8d:f5:cf:b7:
5e:42:00:14:e6:c9:93:d2:d1:d6:c1:45:41:e6:9f:c1:96:cf:
9d:35:a6:f9:d9:2a:fe:ab:f0:14:71:57:80:1e:81:ca:3e:58:
b3:58:3c:b2:b6:d6:01:ae:84:48:e3:72:75:44:2f:e5:00:53:
0e:24:ab:49:7a:3e:46:0a:0b:12:7b:f9:04:72:b8:89:74:15:
87:6f:9a:fc:1a:21:2b:81:aa:02:18:5a:73:bd:8c:0a:44:92:
dd:43:f9:d8:0b:c1:7c:e7:2d:66:a9:a1:5b:ef:36:45:53:74:
b3:73:d8:8e:3a:3d:21:dd:78:ba:6e:3a:40:49:0b:e5:66:06:
7e:bc:09:b6:07:3c:a7:02:a6:77:ea:58:79:cd:98:e4:5d:e4:
eb:ea:4d:6a:47:90:fd:36:62:6f:7b:31:05:01:10:27:b6:fc:
b9:5d:25:f9:28:4b:44:17:c6:6b:c3:e0:5a:0a:0e:6a:cb:36:
33:85:8b:90:7a:92:e1:cc:ce:68:ae:62:4c:fb:67:a4:6c:af:
c5:66:46:0c:44:e9:e7:41:13:88:ab:71:b2:ca:97:45:58:34:
8a:41:6d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:35:12 2025 by rpki-client