Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier: bnCTyyW8jqVpnMuSaBH0apLYHKe4i/pJohylqP2gVvE=
Subject key identifier: 16:42:D8:07:44:70:59:88:DA:2C:26:FB:AB:FF:AC:F0:8D:58:0D:02
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer: /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial: 0196CEE28EF059B7AA7BC38AFBBEB5BE14A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number: 153A
Signing time: Wed 14 May 2025 13:01:16 +0000
Manifest this update: Wed 14 May 2025 13:01:16 +0000
Manifest next update: Thu 15 May 2025 13:01:16 +0000
Files and hashes: 1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: SE8vmXY2F31V+NteG1IPwOiHmtS7IOzirFRRZpQCrv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:e2:8e:f0:59:b7:aa:7b:c3:8a:fb:be:b5:be:14:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
Validity
Not Before: May 14 13:01:16 2025 GMT
Not After : May 15 13:01:16 2025 GMT
Subject: CN=1642d80744705988da2c26fbabffacf08d580d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:45:4f:99:39:6e:22:6c:4c:21:47:ee:97:b7:
cb:5f:93:44:9b:c4:47:3f:81:3b:e1:de:b8:5a:03:
00:05:f6:90:da:76:a6:56:a0:4b:dd:0a:fd:d7:d6:
93:b2:ac:74:59:3d:69:27:87:2a:2c:86:9d:b4:4a:
05:d1:d3:20:d4:7b:d8:6f:25:52:93:40:36:d2:dd:
80:f4:dd:84:8b:92:c0:6d:b9:fd:c9:da:a2:aa:ec:
7c:6a:33:37:67:eb:ee:c3:01:fc:68:ca:5d:5e:6a:
b1:bc:1d:c2:e7:20:06:2f:77:e3:af:a3:11:5c:2d:
18:b0:64:fb:05:a3:a6:c8:17:81:e3:39:ec:2e:02:
4a:26:7b:79:00:4f:d0:d3:b1:e3:26:44:a4:af:6c:
0c:b9:24:8f:2f:0a:9e:f0:44:21:fe:19:51:87:fb:
23:82:3e:d6:76:a5:40:a1:ba:34:57:36:14:33:e3:
e1:1d:3a:88:74:7a:28:48:68:aa:fc:40:65:f3:00:
b0:03:84:29:5f:fb:84:57:fd:24:0b:99:23:60:ec:
07:bf:d5:64:b8:7a:e0:bd:d3:59:6d:d4:bb:f4:bc:
09:bc:6f:50:8b:af:8d:87:a6:c3:8a:db:df:f2:c9:
03:8d:39:80:5c:97:56:77:08:e1:b9:6d:37:75:85:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:42:D8:07:44:70:59:88:DA:2C:26:FB:AB:FF:AC:F0:8D:58:0D:02
X509v3 Authority Key Identifier:
keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5f:7a:d4:cb:49:71:56:a3:3a:e8:d8:45:34:05:09:ed:86:
46:f4:4e:0e:87:3c:e9:32:f6:76:6a:ab:d3:91:89:9b:e6:79:
14:64:63:2d:19:a2:64:44:c8:5f:3f:c6:39:76:fb:ed:ad:d1:
c8:c3:f6:97:f3:b0:4c:db:ad:d3:78:b6:92:92:93:bf:85:ff:
b9:e1:5f:d1:d1:f6:3f:67:ac:13:01:a1:91:3c:32:0a:95:cf:
b6:b4:96:b1:ba:e7:b3:1e:46:48:b0:30:93:2f:bf:52:80:50:
cb:1c:d8:9b:b2:d9:42:45:8a:4e:35:39:03:c7:ba:e7:25:a3:
21:16:ed:e9:7f:c8:25:6e:fc:23:d0:85:06:84:5f:8d:dc:db:
1d:32:c6:08:e6:11:0b:f9:61:2f:45:1e:1b:f6:55:f8:28:c5:
0f:f3:d4:11:84:19:e2:d9:22:9f:85:55:7a:16:ab:c5:af:4a:
72:b1:28:83:c8:2b:66:84:09:ce:12:a8:bf:de:c7:4e:79:1e:
e5:ea:20:dd:99:16:5c:92:82:e5:d5:5a:17:a1:6c:d1:2e:26:
bd:8b:cb:7f:b4:a9:73:b5:d2:8b:c6:a3:1f:4a:42:38:cc:6c:
97:e1:f7:4a:71:24:f5:43:36:22:6a:af:17:0f:11:86:1c:15:
01:a6:6c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 22:13:43 2025 by rpki-client