Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
File: p6YlNTs6w-H5XJYlGRWNsSINCo4.mft (raw, json)
Hash identifier: 6ShlCXR3vNIE9yi155qycew4W3ghgtuATUgYotu7hWk=
Subject key identifier: F7:67:28:F9:C2:4A:8D:84:A5:5C:36:20:D5:0B:4B:FE:03:E2:4E:CF
Authority key identifier: A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
Certificate issuer: /CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Certificate serial: 0196B5C710B54852A0C17E6C60AF67C3E7B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
Manifest number: 0997
Signing time: Fri 09 May 2025 16:00:44 +0000
Manifest this update: Fri 09 May 2025 16:00:44 +0000
Manifest next update: Sat 10 May 2025 16:00:44 +0000
Files and hashes: 1: p6YlNTs6w-H5XJYlGRWNsSINCo4.crl (hash: 3kQ9NkH3UcAYDvzHblx4vi31RugOliG59QWCkWZPS5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c7:10:b5:48:52:a0:c1:7e:6c:60:af:67:c3:e7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Validity
Not Before: May 9 16:00:44 2025 GMT
Not After : May 10 16:00:44 2025 GMT
Subject: CN=f76728f9c24a8d84a55c3620d50b4bfe03e24ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:5a:3e:84:01:86:4d:7e:ca:ad:70:f4:c0:
7c:99:85:a2:4a:ec:e2:47:98:b6:4a:c1:5c:cb:dc:
08:5c:35:75:09:8f:f1:c6:03:dd:59:73:b8:d2:52:
4f:52:cd:c7:3e:87:36:b7:ee:f3:f3:a4:23:83:df:
d6:50:a1:50:6d:0c:be:2f:d3:60:e5:55:91:db:a8:
eb:c5:58:c1:f1:d9:73:28:7a:05:f5:6d:a5:23:90:
ef:57:79:2f:a6:c7:aa:2c:09:01:f6:21:77:c2:3a:
19:c1:4c:47:90:53:d7:a0:46:3f:22:5f:4c:1c:4e:
b1:b8:30:d4:14:f8:c5:75:4c:06:e8:fa:f6:92:ae:
45:38:77:23:97:6b:f3:f1:64:22:05:ff:8a:c8:dc:
f1:91:23:0e:c3:54:96:2f:c5:02:fd:9d:60:2d:0c:
69:2c:bd:1c:3f:15:d7:d4:b5:c2:8a:0a:44:af:15:
1e:df:5a:23:10:78:78:a0:87:94:c5:87:24:4b:65:
db:17:47:0f:14:c2:49:8c:b2:22:08:77:65:df:06:
26:b4:0e:a4:12:eb:cd:98:26:1e:b9:08:18:71:49:
5d:04:f6:02:34:e8:4e:48:dd:b1:2b:f3:64:fa:61:
5a:76:3c:36:bd:ea:40:1c:a4:c6:4e:50:88:03:ac:
ff:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:67:28:F9:C2:4A:8D:84:A5:5C:36:20:D5:0B:4B:FE:03:E2:4E:CF
X509v3 Authority Key Identifier:
keyid:A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:77:fc:c1:cc:e6:be:aa:26:9d:df:22:5f:47:31:aa:6d:3a:
c3:b9:13:81:58:4b:b9:c4:f9:03:4a:3c:34:50:56:e4:0d:94:
1a:6e:cd:6e:0d:0c:86:32:3f:fe:a8:33:bd:da:b5:13:8f:63:
f4:88:e7:15:b4:84:1b:6e:6c:55:d8:90:8d:31:38:6e:c4:ee:
ec:9d:20:82:6b:ad:fa:6e:32:c6:7f:f2:c8:9c:f9:89:d4:7a:
4e:6e:7b:b5:0e:0c:03:57:ee:c7:6c:c3:23:ff:fd:4a:ef:41:
74:df:91:bc:ec:36:83:7d:f0:38:2a:ce:2f:9d:26:6a:42:56:
ee:62:82:25:ce:5c:33:a2:cb:70:f9:b3:9a:42:b1:df:fe:cc:
de:91:b9:3f:98:de:c6:23:3f:bc:90:75:3b:b2:52:0e:39:60:
a3:b8:96:54:88:26:00:02:93:63:73:d4:92:b8:d0:5d:8d:44:
17:1e:d9:12:ab:8d:29:80:e0:b8:ee:94:1b:1c:9d:3d:72:19:
e1:5a:59:52:42:1e:bb:91:fa:59:45:8e:3f:79:1d:fb:85:a6:
0b:40:29:55:c6:98:9c:1a:4b:66:25:fb:31:ef:e1:37:d5:8e:
2a:10:88:eb:c7:8a:32:42:4b:5a:ec:e5:c7:e4:2f:30:fa:b5:
85:57:32:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:41:44 2025 by rpki-client