Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
File: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft (raw, json)
Hash identifier: 9WmQtLml3QlshdPCprkZQbJ0mprHdXeVeePH8R12AQo=
Subject key identifier: B3:EB:DF:C2:91:F2:C7:E6:A9:FC:1A:F9:D4:F6:D3:30:39:00:8C:FF
Authority key identifier: E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
Certificate issuer: /CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Certificate serial: 0196D13E9598D02E8E6EE8212298E196E9C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
Manifest number: 0CBF
Signing time: Thu 15 May 2025 00:01:01 +0000
Manifest this update: Thu 15 May 2025 00:01:01 +0000
Manifest next update: Fri 16 May 2025 00:01:01 +0000
Files and hashes: 1: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl (hash: KHosz3yiE4u7fzONlWhiTenbfL2OotpXhYR9u2KTCwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:3e:95:98:d0:2e:8e:6e:e8:21:22:98:e1:96:e9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Validity
Not Before: May 15 00:01:01 2025 GMT
Not After : May 16 00:01:01 2025 GMT
Subject: CN=b3ebdfc291f2c7e6a9fc1af9d4f6d33039008cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:da:00:fb:b8:91:97:c8:a0:df:28:12:2d:dc:
76:81:bd:0a:91:1e:39:ce:8d:84:9a:f0:f9:b6:77:
00:3e:6c:25:32:75:2a:2b:61:d5:24:b1:4a:6e:0c:
83:3b:9e:43:1a:f2:59:eb:9c:46:b9:90:11:d7:78:
88:06:53:6b:51:9f:b1:81:21:f6:01:1b:49:cc:0b:
e6:c4:02:8e:68:c7:e1:c3:cf:91:8d:8d:b0:77:e2:
72:61:d8:fe:3c:6c:1b:3f:1f:11:4d:6a:dc:01:50:
41:1a:de:d0:f4:a4:e0:59:c1:a6:36:95:30:49:68:
9a:fe:b5:d8:1e:78:c3:2e:d5:02:4e:d2:e1:22:c8:
89:6e:de:fd:1c:51:eb:c1:f3:a4:a7:ba:f0:0c:79:
b9:23:8f:8c:84:81:b8:66:e8:02:5e:94:2d:70:15:
e1:ff:a0:3e:61:04:74:0f:0f:e7:e6:19:ab:25:d2:
7b:03:33:fe:77:51:d6:d0:d2:8d:fb:1c:82:d3:c7:
99:85:97:c0:87:12:cf:5f:ec:4d:dc:be:b6:00:a2:
ff:8e:c1:0a:f6:eb:6b:2e:1c:3d:16:cc:3a:0f:dc:
c4:82:81:0b:27:55:d7:33:b4:f6:e5:29:fc:db:e8:
6e:ff:b4:bf:73:fd:aa:62:80:ff:cc:9d:a8:de:79:
c1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EB:DF:C2:91:F2:C7:E6:A9:FC:1A:F9:D4:F6:D3:30:39:00:8C:FF
X509v3 Authority Key Identifier:
keyid:E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b4:68:93:2c:82:55:ce:75:b1:49:0c:1b:b3:5d:20:bd:0b:
23:f5:5b:70:e5:cb:1c:ea:e5:0e:94:94:27:bc:a3:b4:7c:1b:
98:6c:b6:37:5c:8c:b3:82:ee:c8:6b:16:89:41:40:06:4e:33:
62:b4:48:c5:36:8d:8f:22:f0:74:d6:1a:f2:84:21:b0:54:94:
4d:60:cc:ad:48:bc:76:13:3c:67:a7:db:6f:37:30:c8:29:3a:
12:79:a5:cf:94:1f:04:fb:e8:6d:02:78:e7:12:39:f1:9b:02:
27:a4:96:ac:af:d2:34:e8:ea:e4:fc:a8:92:e8:9e:59:09:c8:
48:66:0b:e1:6f:bc:60:4d:53:03:70:2a:f7:b8:9d:96:aa:1e:
fb:04:4f:cd:9c:50:96:cb:68:19:85:26:9a:30:6b:26:db:3e:
ea:0a:d6:92:a0:4c:bf:bd:1c:f4:0b:c3:4c:b7:5b:9d:62:51:
f9:2f:44:aa:9b:c9:c5:b7:ba:7c:19:b9:0b:e5:88:09:7c:cf:
a0:34:ee:0d:88:06:32:90:3b:f8:af:bd:70:ff:6f:d9:37:2c:
34:4f:4f:bd:a2:17:c4:e1:e2:95:28:bc:54:11:f3:5b:bb:8e:
36:95:70:dd:be:b6:69:c9:39:38:64:1b:40:fb:0e:05:8f:be:
80:68:93:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 10:31:52 2025 by rpki-client