Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
File: 79XDTJ_TJEnLwIirENkbWkq1Nho.mft (raw, json)
Hash identifier: eyg+U4L9xxWqSVFflMZJekXQZdfMD+6B65EcTRi9UnU=
Subject key identifier: FD:95:74:81:73:70:E7:4A:38:BC:38:53:25:31:C0:8F:85:06:75:66
Authority key identifier: EF:D5:C3:4C:9F:D3:24:49:CB:C0:88:AB:10:D9:1B:5A:4A:B5:36:1A
Certificate issuer: /CN=efd5c34c9fd32449cbc088ab10d91b5a4ab5361a
Certificate serial: 01965E03C0367C599F594FC7139883EC3A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
Manifest number: 04DA
Signing time: Tue 22 Apr 2025 15:00:26 +0000
Manifest this update: Tue 22 Apr 2025 15:00:26 +0000
Manifest next update: Wed 23 Apr 2025 15:00:26 +0000
Files and hashes: 1: 79XDTJ_TJEnLwIirENkbWkq1Nho.crl (hash: 2d+wfxiwv8lfVjjC/MqGEE9xrzG3mNTOTwlU4wbh6sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:03:c0:36:7c:59:9f:59:4f:c7:13:98:83:ec:3a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efd5c34c9fd32449cbc088ab10d91b5a4ab5361a
Validity
Not Before: Apr 22 15:00:26 2025 GMT
Not After : Apr 23 15:00:26 2025 GMT
Subject: CN=fd9574817370e74a38bc38532531c08f85067566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4f:22:af:a7:62:55:2f:1a:68:de:e1:2b:93:
b7:2b:9e:e5:22:29:ea:e2:c1:8c:32:36:ad:13:e6:
83:93:3e:b1:f4:7d:b9:6f:81:9a:83:24:a8:38:b6:
64:72:c5:a1:b7:f8:b4:6a:5c:65:93:29:7c:aa:66:
fb:99:0b:5c:b7:37:11:ea:a8:0b:33:2c:30:e5:0c:
74:1b:4e:ab:86:3a:b1:7f:29:63:05:b6:fc:65:83:
d6:21:33:38:d3:03:19:cf:0e:f6:e5:87:c6:26:9a:
c7:f9:68:89:ba:77:ff:d1:a8:ff:15:95:dc:20:7e:
b6:be:07:90:5b:34:38:e3:71:65:b9:f2:e0:d4:9a:
ee:78:de:0f:fb:29:2a:71:b8:9d:54:65:10:57:bc:
01:55:bc:ad:fd:62:86:db:fa:03:43:4f:e8:e8:93:
b6:67:97:60:50:91:1d:31:f7:dd:87:ce:3f:ec:77:
e5:45:a5:af:6b:af:ad:4d:9b:63:1c:95:2b:02:b2:
5c:48:8c:d2:f2:10:8d:83:7b:02:6e:60:40:47:1e:
41:f8:ae:07:5c:64:3f:05:d5:67:29:d6:bf:d4:b8:
95:c8:81:c2:a3:c1:24:ac:01:02:3a:25:d8:61:6d:
48:5b:d0:9c:9e:a1:70:5b:35:25:cf:87:98:1d:71:
6b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:95:74:81:73:70:E7:4A:38:BC:38:53:25:31:C0:8F:85:06:75:66
X509v3 Authority Key Identifier:
keyid:EF:D5:C3:4C:9F:D3:24:49:CB:C0:88:AB:10:D9:1B:5A:4A:B5:36:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a6:87:4c:be:e9:4a:91:e1:c2:69:2b:2c:43:2e:f7:c5:30:
91:0d:eb:e4:df:64:4e:98:81:8f:24:2a:df:03:e8:b0:39:08:
ce:4b:75:2a:00:80:15:f3:fd:a7:02:e6:80:1d:a9:ec:36:65:
72:8f:7f:0d:4e:22:46:ef:e8:cd:8d:28:ff:d1:98:dd:75:81:
2a:39:40:70:f8:92:f2:89:92:14:3d:51:0c:5e:c9:7e:de:8a:
db:17:21:36:07:04:29:91:98:7d:3a:e7:a8:cc:d9:9b:3b:13:
cd:a9:4b:19:3f:73:ef:c4:ce:f7:92:dc:a8:5c:55:5e:8b:06:
c5:e5:97:4f:cc:f7:86:c1:88:94:dd:09:58:23:7e:51:90:1c:
cb:d8:ca:45:1d:9f:8e:40:95:b4:7c:c4:8a:80:0e:b3:5c:31:
ea:74:49:71:7d:1e:c7:96:78:3e:b9:91:86:b2:88:84:ab:33:
6b:0a:94:fb:07:48:b4:3d:fa:72:ae:32:c6:10:ce:6e:7e:41:
7d:10:1b:e1:43:e5:5f:57:d7:12:b6:40:87:68:b7:91:53:b7:
67:67:89:1a:92:18:df:da:62:e6:e8:a4:aa:14:ad:53:d5:c3:
af:86:ef:77:54:a5:93:4b:88:7d:d8:95:ae:e1:37:21:90:bd:
aa:c6:66:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:01:02 2025 by rpki-client