Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
File: 0sAfMj0dJYn5qbRi_nDzawn6xjI.mft (raw, json)
Hash identifier: r+0JBqMEz98tM9gRxleQ/UT8Z6b76WVrZLWdIzuUZrs=
Subject key identifier: B0:38:73:04:D1:9A:D1:15:99:9C:C9:A7:09:58:07:1D:24:34:89:19
Authority key identifier: D2:C0:1F:32:3D:1D:25:89:F9:A9:B4:62:FE:70:F3:6B:09:FA:C6:32
Certificate issuer: /CN=d2c01f323d1d2589f9a9b462fe70f36b09fac632
Certificate serial: 0196CA2957E3B0EFB60A848892DE87979F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
Manifest number: 0567
Signing time: Tue 13 May 2025 15:00:29 +0000
Manifest this update: Tue 13 May 2025 15:00:29 +0000
Manifest next update: Wed 14 May 2025 15:00:29 +0000
Files and hashes: 1: 0sAfMj0dJYn5qbRi_nDzawn6xjI.crl (hash: Rt+hvk4J7BYc0Oxay7NtB3sP7hwwpuFkvd3nQBYAvzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:29:57:e3:b0:ef:b6:0a:84:88:92:de:87:97:9f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c01f323d1d2589f9a9b462fe70f36b09fac632
Validity
Not Before: May 13 15:00:29 2025 GMT
Not After : May 14 15:00:29 2025 GMT
Subject: CN=b0387304d19ad115999cc9a70958071d24348919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:c1:8f:c5:21:d8:98:d9:db:68:a2:de:17:
6f:a6:7e:df:13:3f:ea:7a:07:f9:c2:3b:9f:a9:7f:
3f:ab:8d:ab:fa:79:ca:5c:57:d1:9d:fd:8d:66:3e:
54:bd:0d:2e:fa:37:36:2d:48:d7:56:17:ab:cf:bf:
b6:fe:b8:ff:6a:f1:f3:87:0d:77:0b:38:76:f4:58:
ed:5b:eb:fd:7c:b5:06:71:40:2b:a6:49:b8:1b:0f:
ea:83:f6:79:6f:8f:32:4f:00:a8:13:e9:20:4d:ba:
2e:c9:c5:8c:f7:82:53:d7:fc:fd:b7:b5:f2:b9:ed:
62:e3:7f:dd:e4:03:1e:f8:27:71:5e:ac:f9:6e:6f:
9e:f2:4c:68:be:97:8a:f2:6c:7f:f6:60:9b:e4:a7:
fe:a3:33:d6:0a:11:d1:87:64:d8:f0:d0:6d:30:30:
61:ba:66:5a:99:9a:97:b3:11:04:88:2e:8d:c8:16:
c3:40:21:aa:d6:48:7e:fc:0a:95:06:15:25:7d:0a:
53:d3:04:0f:71:33:1e:3f:6e:39:04:84:8c:af:99:
9f:37:7d:31:b1:37:af:e8:9d:48:3d:12:9b:d2:57:
23:da:f0:4f:72:ee:9f:72:d1:b8:94:08:70:d7:1f:
66:15:55:ff:87:98:b3:68:3c:3f:d8:eb:68:0b:ae:
27:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:38:73:04:D1:9A:D1:15:99:9C:C9:A7:09:58:07:1D:24:34:89:19
X509v3 Authority Key Identifier:
keyid:D2:C0:1F:32:3D:1D:25:89:F9:A9:B4:62:FE:70:F3:6B:09:FA:C6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:5f:9d:01:a6:4e:b1:ea:ae:8b:c7:36:85:63:6c:ae:95:83:
cb:87:85:65:cd:e6:29:f4:6e:0a:eb:52:41:01:c8:c3:96:e2:
a2:c6:33:7c:ad:86:6c:65:6e:06:d3:08:2c:3b:27:24:71:84:
88:1d:7d:cf:ca:e8:3f:c2:bc:01:cf:0b:a8:49:92:8e:22:2b:
54:e5:8f:75:25:44:df:36:83:b1:0c:03:12:58:6a:99:a8:8d:
9c:54:b1:23:cf:0d:2f:f4:c6:eb:3e:e5:b6:4b:2d:65:86:f6:
6f:5b:59:b2:7b:6e:d6:4c:b8:99:5c:2b:04:6c:05:72:60:ff:
94:6c:49:02:38:2f:47:27:ba:77:db:d9:3e:3f:05:a4:27:93:
36:36:9c:f9:b7:a3:bd:77:3a:28:e0:80:b1:b2:93:70:c2:86:
81:1c:b9:69:e0:dd:ff:d3:50:e0:85:2d:1a:77:4c:6c:d9:4d:
08:29:85:f5:c4:49:d9:56:5b:5a:e3:43:10:3c:01:a8:76:b3:
a4:78:71:03:8b:32:b7:e1:b8:35:d2:69:09:5d:f5:82:ef:1e:
dc:ef:cb:56:c5:dc:ed:21:7a:19:9e:2b:fd:e9:6f:da:1a:c9:
f0:22:5e:7b:66:bb:4f:8f:18:36:89:ff:59:51:14:a2:1e:a4:
7a:60:38:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:04:38 2025 by rpki-client