Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
File: rSzoJufkLt3WnfrTpZqbmqTigYM.mft (raw, json)
Hash identifier: IYPIq7woAyT/do8aalRCl/Mqu5S7Bakm93eTetsbJSI=
Subject key identifier: E3:79:14:7E:BC:63:71:5E:89:6A:BE:D4:77:7D:9D:97:9B:D9:F2:24
Authority key identifier: AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
Certificate issuer: /CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Certificate serial: 01965A26F6B2BE19AD5E397CBEDA69DC8B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
Manifest number: 13FC
Signing time: Mon 21 Apr 2025 21:00:24 +0000
Manifest this update: Mon 21 Apr 2025 21:00:24 +0000
Manifest next update: Tue 22 Apr 2025 21:00:24 +0000
Files and hashes: 1: rSzoJufkLt3WnfrTpZqbmqTigYM.crl (hash: PHYxkTCKUatoBZAi7pxHg3KmZUBsGrZQx5DRGyOGF68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:26:f6:b2:be:19:ad:5e:39:7c:be:da:69:dc:8b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Validity
Not Before: Apr 21 21:00:24 2025 GMT
Not After : Apr 22 21:00:24 2025 GMT
Subject: CN=e379147ebc63715e896abed4777d9d979bd9f224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:6b:c0:45:6a:60:b2:d2:40:e0:c1:34:38:
03:d7:67:8b:8b:06:2e:0c:3a:59:93:55:eb:d3:f7:
be:44:99:7c:3f:c8:78:52:a3:96:87:9f:0c:eb:a9:
4a:e7:9f:66:47:be:af:10:1e:8a:9d:22:82:a8:ba:
9c:e4:57:a5:09:a4:96:a6:03:44:16:c7:93:82:97:
79:f6:7b:22:2d:28:de:10:0a:a6:69:9a:52:10:92:
59:b1:22:82:b7:ab:4f:00:7a:7d:f0:f0:af:72:e7:
56:4b:4c:cf:58:04:f0:6e:f9:9f:4e:8f:e7:f9:fc:
ca:fc:9b:d6:a9:42:0e:5a:6d:b5:81:98:36:25:b1:
ad:ff:bc:16:e6:e8:bb:75:b8:b4:72:51:de:f7:12:
16:5e:59:b3:31:d1:b1:26:2e:17:a5:ca:e1:0a:1d:
21:d5:3b:2d:c5:2c:2d:1b:08:dc:e7:b5:ea:94:4a:
30:bb:90:96:f6:c4:46:c2:73:64:02:3d:df:35:9a:
56:cd:7b:7f:83:6e:2f:75:fc:e4:23:ce:02:7a:4c:
13:39:cf:99:55:b9:2e:5f:c1:e7:eb:83:79:c5:09:
3e:f5:02:93:03:43:84:89:c2:b8:6b:71:f9:4b:1b:
3a:8e:f1:b0:2f:e9:da:c8:e9:fa:68:7f:4a:be:dc:
b8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:79:14:7E:BC:63:71:5E:89:6A:BE:D4:77:7D:9D:97:9B:D9:F2:24
X509v3 Authority Key Identifier:
keyid:AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:01:db:fc:56:96:c5:fa:e3:b8:40:ea:9f:e1:0e:dc:c8:89:
d2:e2:0e:51:6e:a4:e0:af:78:cb:f4:ab:9c:db:bb:24:80:87:
52:39:06:2d:5e:fd:b7:d1:0e:68:85:a9:12:3e:ad:03:d1:9c:
93:d3:41:f7:10:6f:d7:ce:47:36:bd:e2:53:e7:21:1a:59:4a:
c9:6f:dc:40:bd:ee:15:82:50:b5:fc:93:33:f4:69:dc:3b:cf:
77:93:5c:f2:e9:57:c0:b2:80:be:29:22:d2:2b:c8:18:bf:12:
8a:a6:6f:c9:3d:ee:d9:d9:c6:17:7b:f1:cd:40:6e:25:75:c2:
05:69:d2:fa:58:8f:65:a9:a3:a7:82:55:59:db:a2:3c:0c:fd:
9f:be:f5:3c:31:59:aa:a4:79:35:70:3e:50:bd:2f:f4:31:39:
ed:74:12:99:7c:b2:6e:ec:cb:8c:50:34:ad:9a:11:1b:ba:bc:
ae:38:8b:38:10:61:92:c5:fe:e4:44:f6:f2:07:43:fa:53:3a:
64:90:5b:e2:35:28:10:12:2a:57:91:62:d3:aa:d1:ce:61:29:
4c:df:02:72:43:03:d9:6b:00:8a:14:81:af:6d:77:7a:8c:f8:
87:31:da:24:90:46:62:6e:91:fc:a5:6b:44:5c:03:a5:88:5c:
f7:d4:6b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:49 2025 by rpki-client