Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
File: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft (raw, json)
Hash identifier: wpLhOm8aW8XyQtPcYb43SZ25VhJiCg/p4ZHxaWfmb8c=
Subject key identifier: 89:18:0D:04:88:BA:EB:16:04:6F:1A:2C:E7:15:8D:07:B4:FD:EB:6D
Authority key identifier: F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
Certificate issuer: /CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Certificate serial: 0196AF57104BDCBB5607EF466D1A5DE42F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
Manifest number: 0161
Signing time: Thu 08 May 2025 10:00:40 +0000
Manifest this update: Thu 08 May 2025 10:00:40 +0000
Manifest next update: Fri 09 May 2025 10:00:40 +0000
Files and hashes: 1: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl (hash: ypuLlFjqJrD6lXq+BspCjSvTqsYRUUTbiXQwRPNlW/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:57:10:4b:dc:bb:56:07:ef:46:6d:1a:5d:e4:2f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Validity
Not Before: May 8 10:00:40 2025 GMT
Not After : May 9 10:00:40 2025 GMT
Subject: CN=89180d0488baeb16046f1a2ce7158d07b4fdeb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:26:24:80:fc:68:3e:ef:ee:fb:d8:61:2f:
6f:bc:c8:dc:7c:59:fd:62:54:aa:2c:91:6b:f4:fa:
bc:09:27:21:c8:fa:5c:2f:f1:e2:4c:a3:fb:7f:d5:
3e:47:78:d8:ce:03:9a:cb:f2:96:37:89:67:bd:7d:
31:3b:29:55:04:3a:68:a3:53:b0:da:34:e3:17:1c:
5a:93:7d:cc:23:8a:b8:c4:d0:45:85:36:09:2b:38:
64:d6:3d:20:ce:c6:99:71:0c:80:29:c7:f1:e6:74:
a2:34:f0:ed:0e:ee:13:4c:76:4b:f1:65:76:5b:bf:
b1:da:32:ff:a2:39:73:e3:d9:f3:f2:17:68:68:4c:
cb:77:af:96:04:dd:8e:2e:b1:6b:77:29:2e:91:27:
3d:b2:42:5a:ab:82:00:46:32:a9:76:bb:ba:5f:b3:
f3:f0:99:d7:90:04:fb:aa:1f:9c:a2:07:d3:ad:6b:
a3:11:c3:f9:04:f1:ab:63:82:84:1d:24:c8:ab:f4:
67:a9:58:95:cc:de:fb:0d:c0:18:9c:90:08:61:b3:
75:da:09:aa:14:06:07:d1:e4:77:f2:22:23:e6:b3:
00:4f:c9:f4:21:81:7c:12:de:ff:2b:29:cd:7d:69:
94:2a:5b:2b:bf:7c:1b:1a:96:0c:f6:75:66:58:72:
64:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:18:0D:04:88:BA:EB:16:04:6F:1A:2C:E7:15:8D:07:B4:FD:EB:6D
X509v3 Authority Key Identifier:
keyid:F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:15:d8:89:d5:96:1c:75:20:2f:63:59:f0:70:c7:c4:36:5b:
86:99:8b:3c:f2:5e:d3:ab:01:57:5c:67:07:a8:b2:a4:45:82:
85:fb:f9:16:75:d6:26:c4:32:0c:a1:38:89:c5:74:42:38:7c:
2d:c7:0c:58:78:9f:c9:0d:5c:f0:5b:99:47:8b:b2:50:f7:a4:
d8:99:fe:04:2a:19:f1:d9:88:7b:aa:6e:6f:4e:f3:1e:bc:b7:
fb:cd:8a:82:8b:59:c6:ff:4b:72:16:ef:e3:05:e7:d3:5b:92:
2d:fc:06:61:b3:4d:4b:14:4b:ef:70:a1:eb:65:fa:65:71:85:
4c:24:78:95:74:8b:f6:0b:40:9e:30:06:3c:3f:2d:b5:2a:98:
0e:dc:be:47:24:10:8b:58:96:32:a4:f1:62:94:64:bb:c7:7b:
07:3d:7e:6c:ca:9b:b2:65:16:b6:fe:33:a5:28:5d:a2:a0:e3:
c2:7e:ba:c7:b8:dc:86:42:c5:87:7a:05:bd:58:0f:d6:60:ad:
7f:43:5a:bb:29:25:f4:1f:43:b4:12:33:42:1e:6e:2a:2d:4c:
6b:09:39:b0:aa:5a:5c:61:da:7b:c0:f4:5e:e0:35:2e:e7:30:
82:1e:5b:5f:e7:0b:6e:46:d3:e7:e8:9d:6a:fb:07:5e:8e:2c:
f3:7b:38:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:19:55 2025 by rpki-client