Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
File: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json)
Hash identifier: hrlzmK/R5yULLIcqpO3z7BJEziIbrkSlgaUFsMy1w98=
Subject key identifier: 8E:AA:F4:87:18:71:58:B5:6A:9C:CB:84:40:C5:7B:B0:F8:89:88:0C
Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
Certificate issuer: /CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Certificate serial: 01965CF1EEE1624F15449366AD0D0B7803FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
Manifest number: 0831
Signing time: Tue 22 Apr 2025 10:01:21 +0000
Manifest this update: Tue 22 Apr 2025 10:01:21 +0000
Manifest next update: Wed 23 Apr 2025 10:01:21 +0000
Files and hashes: 1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: TNZTLk3SVZAyEcGpB/7q0bSjqnwzcUQIJEXeARDRZio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:ee:e1:62:4f:15:44:93:66:ad:0d:0b:78:03:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Validity
Not Before: Apr 22 10:01:21 2025 GMT
Not After : Apr 23 10:01:21 2025 GMT
Subject: CN=8eaaf487187158b56a9ccb8440c57bb0f889880c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:78:dd:42:4e:95:cd:87:b0:2e:08:62:a1:
66:85:a8:32:eb:7a:b2:1e:9f:34:68:7b:d3:92:3d:
cf:00:26:d9:11:91:84:19:a4:ac:eb:4e:04:c7:7b:
a3:4d:4e:71:5d:2c:63:d0:b5:b2:d3:ca:64:c1:8b:
99:6c:e6:02:23:d7:0b:0e:36:9b:cb:77:30:20:1c:
89:8f:a9:69:3e:e5:1f:98:f5:3c:a8:ad:79:c0:23:
04:14:1a:ea:78:94:24:6b:4e:4c:7b:fb:58:79:f8:
86:0f:85:fd:36:aa:70:07:37:e8:2b:8f:12:c4:a9:
2e:b7:2e:7d:a5:dc:3e:a1:80:f8:3e:dd:2a:1a:79:
3d:cf:6e:78:6e:c4:b7:58:83:1a:15:75:85:21:77:
98:28:a4:1a:4b:46:c5:25:91:ac:b7:4d:a5:80:2b:
49:5f:f8:c0:9e:2d:95:f5:fb:c2:2a:60:7f:f5:df:
7e:1a:52:2e:a6:f1:04:df:0d:a5:ce:57:49:f4:4b:
2c:14:86:fe:44:9c:14:91:aa:50:33:ce:55:87:66:
b5:cb:67:6c:8a:5a:d4:23:e7:2c:45:9d:1d:53:07:
16:e6:fd:0c:53:33:91:f4:4d:68:14:90:93:d7:af:
de:9e:16:71:dd:ba:dc:bd:39:53:89:df:29:b7:0b:
bb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AA:F4:87:18:71:58:B5:6A:9C:CB:84:40:C5:7B:B0:F8:89:88:0C
X509v3 Authority Key Identifier:
keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b3:bb:ec:f9:d4:f1:40:f2:cc:49:4f:21:63:3e:b8:ee:fd:
0d:d2:fb:1d:02:f6:5e:07:9a:57:be:6b:d8:8d:e1:8b:12:4e:
bd:77:9f:23:ef:ec:e5:94:e8:39:ca:a4:1c:3d:4a:35:64:92:
d3:8a:5b:4f:e1:73:0f:b9:86:92:81:12:23:64:fb:29:8e:4d:
5a:67:28:df:16:bf:9b:2c:fe:c4:d0:17:9f:20:d5:a1:04:ce:
db:69:10:57:1c:d9:14:f4:70:7f:3f:e6:d5:5d:5f:7d:b8:ce:
7a:32:b4:c3:6d:ef:b4:9e:95:5b:ca:97:a2:3e:02:b9:ec:67:
c0:b0:34:81:fc:d5:92:d0:d7:01:73:f0:79:f4:4d:50:93:03:
43:2a:d9:a1:37:a3:af:97:39:a9:60:7c:e4:3a:0b:28:ae:3c:
43:38:b4:ab:ca:57:d2:69:6d:b2:0a:bb:2d:0f:00:ae:4e:85:
9c:a5:70:46:96:ec:e6:85:a4:81:70:13:c3:4e:83:11:c8:12:
f8:cb:58:c2:8e:c8:00:7e:fe:7f:02:3f:90:34:19:28:e8:d0:
36:24:69:73:23:2a:c8:e6:8b:88:01:fa:b0:aa:61:74:6a:55:
2e:13:d6:17:cb:66:83:59:9a:d1:9e:ae:44:be:9f:95:75:bc:
d0:8d:db:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:13:18 2025 by rpki-client