Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
File: 41wFcLO3dz0eEYgufdLGJVN-sJw.mft (raw, json)
Hash identifier: 1w4C87E13oetZKDzlMZo+WQINBuYpHdVYO2EjxCkz3Q=
Subject key identifier: 4C:24:E7:0E:A5:FA:55:54:C1:85:EF:17:AD:7C:39:43:9E:E0:A1:76
Authority key identifier: E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C
Certificate issuer: /CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
Certificate serial: 01965B02CD008B77D2131BA341D782307C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
Manifest number: 1239
Signing time: Tue 22 Apr 2025 01:00:32 +0000
Manifest this update: Tue 22 Apr 2025 01:00:32 +0000
Manifest next update: Wed 23 Apr 2025 01:00:32 +0000
Files and hashes: 1: 41wFcLO3dz0eEYgufdLGJVN-sJw.crl (hash: jxgATa2oYwqP4VIDujcOm3MXqzz4LfhEAg+8V6Bozsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:02:cd:00:8b:77:d2:13:1b:a3:41:d7:82:30:7c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
Validity
Not Before: Apr 22 01:00:32 2025 GMT
Not After : Apr 23 01:00:32 2025 GMT
Subject: CN=4c24e70ea5fa5554c185ef17ad7c39439ee0a176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:1e:26:7b:74:18:b2:9b:62:98:76:ad:f3:
81:a0:1f:33:b2:fc:c0:5d:5f:bb:91:c4:35:f8:58:
50:15:69:ef:a3:da:d3:c4:f2:dc:06:43:b0:e6:0a:
6e:02:da:90:8b:76:07:48:98:31:9e:2f:08:c2:5e:
26:5a:98:27:e9:7e:ea:3a:03:92:e4:cf:9d:2f:a0:
21:68:17:8d:a3:c3:8e:d2:f0:92:92:3d:f1:bb:9e:
c3:bd:37:fe:3f:5b:7a:6d:7a:fe:b9:db:6a:cd:1a:
e8:74:e9:39:c9:83:c6:e2:b9:ce:96:76:1d:4d:b7:
0d:f5:b2:68:73:f9:d2:6b:ee:e5:6e:8f:16:05:e1:
6e:1c:25:47:d9:b0:de:1a:0b:44:a4:93:28:76:f7:
c8:db:24:55:66:c1:02:82:fb:48:e1:8b:32:da:bf:
c0:22:16:3c:56:d0:49:d4:05:83:d7:14:28:34:f0:
0f:0e:bd:39:2d:35:6e:b1:d1:ac:c9:e3:0d:fc:2e:
04:c4:99:30:94:08:83:e9:ae:a7:c2:dd:bf:61:2c:
ab:a9:c3:84:f6:75:77:d7:fa:0d:f9:a8:d5:d7:0d:
8c:a1:a4:58:ad:bd:36:17:c2:8f:ce:e9:57:8b:92:
d1:e7:cb:b9:ad:15:8b:c2:7d:b6:c5:fd:64:33:80:
76:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:24:E7:0E:A5:FA:55:54:C1:85:EF:17:AD:7C:39:43:9E:E0:A1:76
X509v3 Authority Key Identifier:
keyid:E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e2:07:7b:e3:bc:2f:32:09:de:7b:76:b3:af:82:b6:51:e4:
f9:e1:3b:21:8d:90:cd:bf:d5:1b:14:1b:db:45:2b:de:7c:11:
0e:1e:c1:8c:06:d9:11:95:74:cd:a0:d9:4d:4b:c4:85:b7:f6:
97:01:84:f6:1e:0e:64:33:a3:35:1b:21:2c:91:af:bb:fc:de:
b4:88:75:c1:95:e3:f6:59:86:94:29:52:ff:be:01:a4:f6:d3:
3c:b5:c5:d8:52:e2:ec:ad:46:c2:ad:91:f2:3d:d8:12:34:fc:
d9:c7:15:29:9e:cd:2d:f5:66:71:7c:09:20:8b:38:f3:5b:5a:
4c:b1:d7:8f:15:f8:e1:45:12:80:6e:15:05:c8:97:0b:9a:ac:
ca:db:57:3c:3f:29:f0:ba:81:f4:58:ef:09:41:d0:55:5b:37:
6e:c4:17:94:2b:6b:ca:48:f1:b9:24:89:c8:81:93:2f:0d:76:
b2:88:cc:30:05:1a:5e:fd:3b:6f:ef:87:31:34:0d:6e:0c:ec:
06:a8:36:df:2f:94:f8:3d:9a:52:40:d5:66:68:93:59:33:e9:
9e:fd:09:ff:72:e7:fb:8b:d2:4f:cf:bf:97:f9:02:45:ad:df:
f2:6a:e2:a3:91:7d:bd:10:a0:2a:41:6f:ed:68:15:13:d0:17:
49:f6:b1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:15:20 2025 by rpki-client