Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3bde7e-619a-484f-9d6a-49a2542f639e/1/H7SyOkTfxa5WnnTPuw8D6Se1YeI.mft
File: H7SyOkTfxa5WnnTPuw8D6Se1YeI.mft (raw, json)
Hash identifier: BwtaC6vzPFrr0uunjAjJTldl6MbiInv502ji0XQqP4Q=
Subject key identifier: 42:18:DE:1A:F5:24:4B:CF:C2:A4:7C:59:C5:9A:08:3F:5D:A0:44:09
Authority key identifier: 1F:B4:B2:3A:44:DF:C5:AE:56:9E:74:CF:BB:0F:03:E9:27:B5:61:E2
Certificate issuer: /CN=1fb4b23a44dfc5ae569e74cfbb0f03e927b561e2
Certificate serial: 01965538404BE1B9693C515994AD31F72DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7SyOkTfxa5WnnTPuw8D6Se1YeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3bde7e-619a-484f-9d6a-49a2542f639e/1/H7SyOkTfxa5WnnTPuw8D6Se1YeI.mft
Manifest number: 0C73
Signing time: Sun 20 Apr 2025 22:01:11 +0000
Manifest this update: Sun 20 Apr 2025 22:01:11 +0000
Manifest next update: Mon 21 Apr 2025 22:01:11 +0000
Files and hashes: 1: H7SyOkTfxa5WnnTPuw8D6Se1YeI.crl (hash: BzVkEJpsnp1tRwd9huuP/9xWK2dUxAqag969e9Z0u0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3bde7e-619a-484f-9d6a-49a2542f639e/1/H7SyOkTfxa5WnnTPuw8D6Se1YeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3bde7e-619a-484f-9d6a-49a2542f639e/1/H7SyOkTfxa5WnnTPuw8D6Se1YeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7SyOkTfxa5WnnTPuw8D6Se1YeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:40:4b:e1:b9:69:3c:51:59:94:ad:31:f7:2d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb4b23a44dfc5ae569e74cfbb0f03e927b561e2
Validity
Not Before: Apr 20 22:01:11 2025 GMT
Not After : Apr 21 22:01:11 2025 GMT
Subject: CN=4218de1af5244bcfc2a47c59c59a083f5da04409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c2:67:69:01:91:3a:3e:c1:74:32:49:27:4a:
7a:f1:e5:65:ad:ec:32:92:40:64:3d:2b:2c:1b:eb:
31:8f:63:5c:5f:b0:1c:92:a0:2b:c5:4d:b5:eb:65:
ab:6f:bb:85:fc:44:1a:72:a8:a9:3a:ce:f3:fe:57:
7e:09:5c:26:a1:b9:c0:c6:f4:15:af:db:34:6c:7f:
79:9b:19:c8:3d:b1:e7:87:8c:a5:33:17:8b:ec:11:
e6:fb:e6:fe:f0:e1:67:8d:a8:95:64:b4:58:d0:91:
f2:89:a4:d9:27:04:2b:a5:e1:b5:d4:35:24:59:1d:
ce:ff:9b:54:40:3d:03:f7:1d:a7:49:b2:0b:62:71:
41:ea:c4:ff:6f:f4:4c:dc:27:78:50:b6:21:f2:6c:
7a:d3:84:f5:a9:d2:36:b2:f2:80:91:4b:3a:aa:8d:
fb:36:c5:68:dc:9d:d7:84:d8:26:81:e7:0c:9a:a5:
fc:ff:9f:37:9c:1f:42:79:10:02:b9:e5:31:54:77:
cb:b0:d0:19:b8:83:c4:92:d7:43:ed:01:76:2d:1c:
b9:ae:d5:a7:cf:9b:5c:e1:c1:64:1c:be:99:d1:e5:
1c:ef:f2:30:be:93:1c:5b:9e:ec:cf:6e:9c:13:53:
73:6b:2f:4a:1b:ec:cb:87:7c:47:52:3a:c0:ee:09:
d7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:18:DE:1A:F5:24:4B:CF:C2:A4:7C:59:C5:9A:08:3F:5D:A0:44:09
X509v3 Authority Key Identifier:
keyid:1F:B4:B2:3A:44:DF:C5:AE:56:9E:74:CF:BB:0F:03:E9:27:B5:61:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7SyOkTfxa5WnnTPuw8D6Se1YeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3bde7e-619a-484f-9d6a-49a2542f639e/1/H7SyOkTfxa5WnnTPuw8D6Se1YeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3bde7e-619a-484f-9d6a-49a2542f639e/1/H7SyOkTfxa5WnnTPuw8D6Se1YeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ed:60:dc:81:c2:9e:f5:93:ff:6f:29:f8:d7:d3:31:ff:a9:
eb:be:83:91:f7:5a:1b:8a:e2:44:44:6c:fb:00:8f:59:d9:76:
39:f3:81:15:27:01:53:b4:c5:56:de:6e:db:21:63:1b:1c:2e:
00:33:d8:41:a0:b2:5e:1d:55:94:d9:41:b2:5e:c3:09:28:a8:
f3:d4:a6:f3:39:b6:95:a7:81:be:5e:24:5a:a4:a8:cb:f6:db:
56:62:ad:65:77:ac:3e:00:f0:5a:88:0e:98:ed:c8:24:2c:a6:
5b:31:a8:3f:0f:68:cc:3c:e1:19:6b:ab:a1:81:fa:4c:01:79:
de:7a:4d:c8:85:e8:b0:e9:78:50:db:e0:49:3c:bc:e0:c3:23:
7a:fc:1b:71:9f:d0:9f:fe:e5:16:71:90:87:5a:47:f7:36:af:
8e:48:d6:1f:6c:24:98:6f:d8:1b:13:67:d1:ec:e6:c3:50:ee:
6b:a1:39:73:ec:f4:79:b4:d0:e8:d1:b0:8d:be:d0:ee:c6:fe:
7d:3e:fd:93:4f:c5:28:8d:c0:7a:41:a0:e6:94:35:b7:34:b9:
d8:e7:27:50:2b:d2:51:39:3a:40:97:40:78:ba:0b:52:16:8a:
ec:69:74:a7:b0:3d:6f:52:db:5e:42:1e:a4:7d:d5:24:2f:22:
7c:18:73:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:29 2025 by rpki-client