Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
File: c2MktbTBPXYGw5LDdONbvmSiTlA.mft (raw, json)
Hash identifier: TXqwjpNsM6WiH4VKual0M2Yd99FT/POE4g6jv36XdtE=
Subject key identifier: A9:BC:FF:4B:E3:9E:9C:CA:49:79:0D:AA:C4:A6:5C:46:A9:5C:26:28
Authority key identifier: 73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
Certificate issuer: /CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Certificate serial: 0196B7B6570A8C5CED8F04E0064671F6FC2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 01:01:42 +0000
Manifest this update: Sat 10 May 2025 01:01:42 +0000
Manifest next update: Sun 11 May 2025 01:01:42 +0000
Files and hashes: 1: c2MktbTBPXYGw5LDdONbvmSiTlA.crl (hash: Z77ru+qUdVlzYQyRtQJlfFrBicy4k2iz8weTCGNLVxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b6:57:0a:8c:5c:ed:8f:04:e0:06:46:71:f6:fc:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Validity
Not Before: May 10 01:01:42 2025 GMT
Not After : May 11 01:01:42 2025 GMT
Subject: CN=a9bcff4be39e9cca49790daac4a65c46a95c2628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:82:a0:e8:a0:f0:9d:55:b9:e3:d0:09:fd:
73:b5:69:cb:f6:df:30:db:b4:a1:fc:c5:25:e8:c9:
96:ed:40:c9:66:15:f7:f7:b2:7a:18:38:8a:0a:c7:
e5:c3:15:16:5e:21:98:42:2c:44:cf:92:8b:81:8c:
ea:22:65:b1:d2:26:60:e8:0d:40:1e:c7:c0:17:45:
29:fb:0e:89:a4:f7:7b:95:1c:57:a6:4e:70:cb:0c:
ca:50:48:fc:87:81:43:b3:4f:9d:94:92:cf:6e:82:
69:74:6f:7b:f7:a0:05:5f:0c:23:22:c1:f7:2e:11:
11:f0:ff:0e:30:c0:c1:30:f4:ea:fa:ac:18:12:36:
e2:a5:58:ee:2b:36:1f:5f:0b:09:3d:5e:3b:a4:1f:
8d:c2:da:82:f2:62:60:00:0b:ab:9f:4d:f2:cf:7b:
96:ec:66:b3:be:9d:ec:48:82:d4:73:01:19:ba:88:
6d:38:c4:db:57:be:33:43:b1:a5:0d:59:92:74:ed:
47:f7:58:fd:56:c1:11:fe:34:84:74:98:e3:97:14:
b9:6c:54:3d:3b:cb:83:e1:29:80:64:df:cc:e9:7f:
9b:25:45:72:0e:db:d1:bb:83:c7:25:d5:f8:34:47:
04:e4:9e:58:cd:64:59:78:d1:5f:5d:28:10:59:35:
18:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BC:FF:4B:E3:9E:9C:CA:49:79:0D:AA:C4:A6:5C:46:A9:5C:26:28
X509v3 Authority Key Identifier:
keyid:73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:6d:76:de:5e:40:2b:6d:06:19:c4:d8:fc:87:de:a1:af:2d:
6c:cd:e5:0c:70:df:1f:b2:9b:b6:3e:4d:47:03:9f:ca:22:b9:
f2:0b:ae:7b:83:c2:d2:ef:2d:19:9e:87:8c:59:5c:77:ee:55:
16:16:e8:91:1f:ec:6b:d1:dc:d2:cd:9a:28:7b:89:32:b6:20:
cc:c3:b2:83:e4:27:6d:af:02:99:01:bf:6f:60:6d:3a:57:32:
4f:ad:ba:f7:4b:39:f8:41:4b:58:ba:16:e1:7b:14:ef:f2:3e:
42:f6:a6:d9:6b:9d:62:b3:c8:1b:cb:e3:e4:5c:de:77:d7:6d:
3a:4c:06:10:a8:5c:c0:3b:b3:6e:1a:2f:b4:72:cc:c6:aa:3f:
9c:34:f3:9a:75:4c:6e:34:85:c4:50:38:e6:71:70:96:79:66:
05:77:c6:6c:44:03:96:58:fe:14:a2:97:ca:83:3a:39:0e:f6:
eb:89:a5:52:8b:28:60:a4:40:ec:95:cd:e3:4b:ef:05:d3:60:
5f:6b:1b:ed:05:fa:be:03:53:8e:40:c5:2b:79:41:86:75:dd:
9b:22:b8:72:3d:94:bd:84:fb:08:64:53:89:8d:11:24:81:06:
8d:89:96:d3:2a:9a:be:c4:2d:eb:4f:07:f0:ef:c5:49:dc:96:
0a:f7:39:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:13:43 2025 by rpki-client