Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
File: SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft (raw, json)
Hash identifier: 2HX9d32ZimyWWpADte+i9H0uWT56HIO/LyhFEO36FOo=
Subject key identifier: B9:A6:54:D1:59:D8:DC:34:7F:C5:0A:F3:31:DA:28:7D:00:EB:4A:6A
Authority key identifier: 4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E
Certificate issuer: /CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
Certificate serial: 0196B8230DD4F2FDA79DE7D0629AB1823A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
Manifest number: 0DB9
Signing time: Sat 10 May 2025 03:00:27 +0000
Manifest this update: Sat 10 May 2025 03:00:27 +0000
Manifest next update: Sun 11 May 2025 03:00:27 +0000
Files and hashes: 1: SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl (hash: kEgBoGMP2nKy+DxYtQ4dN83WWBY3Zni/ttBAtrL5DSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:0d:d4:f2:fd:a7:9d:e7:d0:62:9a:b1:82:3a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
Validity
Not Before: May 10 03:00:27 2025 GMT
Not After : May 11 03:00:27 2025 GMT
Subject: CN=b9a654d159d8dc347fc50af331da287d00eb4a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:6f:33:aa:d7:ff:fe:49:55:b8:6f:88:27:
8e:45:ee:8b:38:1a:96:8e:ec:75:40:67:84:1d:94:
44:ec:e6:f7:b0:42:27:66:70:ac:cd:b6:23:8e:a9:
97:01:45:38:f0:b5:ac:29:f8:73:e8:2b:52:83:69:
dc:67:ca:3d:ee:bc:74:d8:a5:75:52:33:a4:e9:a6:
3d:5b:a9:8a:1e:be:fe:a6:d8:92:21:29:13:c5:85:
ab:f8:e2:28:6d:0a:54:be:cb:f1:3b:3a:7c:52:26:
44:68:27:9c:dc:74:06:a7:ca:20:c8:c5:07:19:52:
17:f3:8a:ce:f2:10:3a:01:15:15:f9:3d:1e:f6:10:
fb:27:06:78:3a:d8:7c:d8:c4:dc:2d:d6:2e:50:cc:
e1:e3:90:63:63:2a:7b:cc:a2:3a:34:aa:12:2c:75:
c3:d5:c2:44:07:e8:dc:ed:0e:e2:87:bb:c2:b7:20:
66:d2:76:b2:ce:9e:54:1b:4f:1a:c5:a3:3f:02:5a:
73:0c:45:04:19:15:45:cd:87:61:e7:5b:10:87:69:
ef:7d:79:f4:3f:fc:d9:5d:db:20:ba:78:2e:4a:20:
25:ae:93:26:79:e5:4e:75:82:58:d4:81:85:f0:1b:
6e:3f:b7:ce:34:89:6d:8d:01:e0:f9:cb:38:14:ac:
6e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A6:54:D1:59:D8:DC:34:7F:C5:0A:F3:31:DA:28:7D:00:EB:4A:6A
X509v3 Authority Key Identifier:
keyid:4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b6:08:6d:19:38:4b:61:d4:a6:d4:54:0f:dd:34:00:00:6d:
27:8b:65:2f:82:0b:47:e4:f0:06:3f:96:07:11:21:15:92:4d:
c7:9f:47:13:bd:ea:c6:4f:7b:2e:0e:a0:f6:78:b3:0d:49:42:
d5:87:25:78:c2:b8:55:de:58:4a:82:ec:1d:b4:71:3d:9e:bf:
d0:d3:66:14:a7:93:c6:84:b0:a9:f3:c3:9e:4b:5b:85:ce:40:
c8:82:47:ce:d9:58:97:8d:4c:6b:52:50:fd:0d:73:00:e6:36:
db:36:a7:32:33:e9:1e:83:f2:61:f6:c3:8c:55:54:59:83:8d:
b9:ac:42:ae:c7:50:1e:a2:d6:5f:1b:3c:d9:18:f3:be:c0:4c:
88:c7:69:52:be:21:40:fc:c6:43:27:52:f9:cf:0a:74:76:8b:
90:4c:8b:e7:b3:8b:fc:2a:41:d6:89:6e:55:70:cd:3f:0a:07:
c2:36:7a:c6:8e:6f:45:0a:c1:0d:f0:78:90:e7:43:9e:fb:a3:
72:92:c5:dd:b0:ba:d6:c5:02:85:5f:3d:d2:83:8a:fc:ea:1b:
7d:88:a6:be:c5:08:e5:2e:3c:e9:6a:eb:26:a6:50:9b:09:fe:
da:ed:d3:67:d4:f2:47:2d:2f:50:47:47:5d:ae:34:c4:42:9d:
87:6c:91:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:47:55 2025 by rpki-client