Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
File: h66JOPDgseq2FIgzbSPKORh9bqM.mft (raw, json)
Hash identifier: xt7QAoX6Y4HSnBE45ntn+Fxk+W5i2KAUwUjI4iEA5nQ=
Subject key identifier: B8:17:1B:09:3B:BC:F6:C4:D1:95:63:E3:4A:46:29:CF:60:D3:B5:20
Authority key identifier: 87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
Certificate issuer: /CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Certificate serial: 0196C013E39992C86EC85D3481F1C928898F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
Manifest number: 0448
Signing time: Sun 11 May 2025 16:00:50 +0000
Manifest this update: Sun 11 May 2025 16:00:50 +0000
Manifest next update: Mon 12 May 2025 16:00:50 +0000
Files and hashes: 1: h66JOPDgseq2FIgzbSPKORh9bqM.crl (hash: 51GsnPkYVitcq9q4GWR9CqOGApV6j42azNIUfMsDJDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:e3:99:92:c8:6e:c8:5d:34:81:f1:c9:28:89:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Validity
Not Before: May 11 16:00:50 2025 GMT
Not After : May 12 16:00:50 2025 GMT
Subject: CN=b8171b093bbcf6c4d19563e34a4629cf60d3b520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:7c:ee:3d:d1:6e:e1:34:13:bc:b0:64:54:
26:63:db:95:ef:ad:07:f2:bb:5c:88:34:97:e1:03:
09:0e:c8:3f:13:50:0e:e2:73:b0:8a:26:1a:e1:07:
ae:42:98:c4:47:75:ce:9f:63:19:b7:ae:bd:a2:a8:
a0:86:69:05:c8:bb:ee:6a:b9:cc:6d:3d:87:98:69:
ea:1f:80:34:a2:ed:82:9f:2f:ad:76:95:6d:24:ae:
6d:d4:11:df:4a:d1:c6:30:fb:7c:f1:0d:71:ed:b1:
b6:38:15:94:06:5f:80:62:90:89:e2:45:8f:3f:b3:
fe:21:e4:de:93:72:1d:d6:e5:b0:51:d5:85:87:8a:
82:6d:1e:53:ea:84:97:e4:d7:3b:d3:2e:50:a0:6c:
f3:81:7b:f8:49:ab:ee:d7:1a:c3:84:dc:22:9b:7e:
01:e7:53:b7:ff:d4:23:91:bf:56:ca:59:ca:a4:73:
d4:8e:90:6f:94:ab:6e:34:cb:49:de:f8:bd:73:da:
8c:25:c4:be:df:dd:3b:90:ff:15:77:8a:39:da:b4:
88:61:42:61:43:b0:00:48:f9:7b:15:3f:eb:03:6a:
a1:68:81:2b:25:d3:00:01:0e:1c:c0:22:a0:c0:04:
19:38:f3:a0:6a:2d:56:1c:43:e0:bf:48:39:94:4f:
74:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:17:1B:09:3B:BC:F6:C4:D1:95:63:E3:4A:46:29:CF:60:D3:B5:20
X509v3 Authority Key Identifier:
keyid:87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6c:cf:ed:dd:5e:f8:f0:74:41:ea:bf:4c:ad:76:2f:e5:54:
21:c5:0b:88:49:cb:e4:c6:5f:2a:05:91:24:0b:e6:53:ff:98:
73:45:e2:d5:fd:4c:f8:a1:54:70:0e:2b:c0:71:5a:42:6f:9d:
0b:8b:68:8f:42:fc:9f:64:ba:39:d4:50:ca:3a:fa:53:9d:62:
72:86:02:ca:8d:49:f9:d6:99:97:f1:25:2e:2a:58:a2:08:a9:
e7:0d:ec:e4:28:1b:44:2d:a9:56:c7:99:2f:8a:15:f9:4e:74:
81:cf:1b:a7:8c:99:5f:85:41:3b:3f:e7:b5:0f:0d:de:0a:81:
ca:1f:b3:06:aa:2b:66:28:45:51:dc:ea:c4:a8:2e:39:1d:89:
e3:59:1e:4a:0a:d1:04:e5:4f:ae:b3:b3:99:da:fb:9d:37:c5:
c7:be:db:c7:b0:25:26:4f:6b:9d:37:18:6e:15:a9:26:bf:e5:
0a:26:ba:51:35:3f:1a:2c:52:14:38:f3:22:46:fc:88:01:f0:
ab:7c:fb:78:f9:b5:79:4a:60:95:e5:1f:0b:fd:60:35:51:c0:
e1:75:9e:db:d5:b6:4b:aa:00:0e:e3:22:6c:2b:70:8f:f2:8b:
a5:18:c2:35:c7:28:fb:97:53:57:3f:f4:a6:95:e8:b0:a4:fa:
cd:a0:99:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:21:50 2025 by rpki-client