Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
File: ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft (raw, json)
Hash identifier: NwpKBLpCVYtxZCavORUm+QcYRiJBCHSX/Eu1rsGRi7Y=
Subject key identifier: 0C:11:32:D9:6A:02:35:43:2D:B8:41:35:FF:7B:D3:B4:5A:A7:5D:85
Authority key identifier: 7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA
Certificate issuer: /CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
Certificate serial: 01965537FC615A04071E9EDF657FF8F9EA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 22:00:54 +0000
Manifest this update: Sun 20 Apr 2025 22:00:54 +0000
Manifest next update: Mon 21 Apr 2025 22:00:54 +0000
Files and hashes: 1: ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl (hash: B9c4wTVzw7TPB0wDTVfKZ9OpXwOveDdGturnpAQNtKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:fc:61:5a:04:07:1e:9e:df:65:7f:f8:f9:ea:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
Validity
Not Before: Apr 20 22:00:54 2025 GMT
Not After : Apr 21 22:00:54 2025 GMT
Subject: CN=0c1132d96a0235432db84135ff7bd3b45aa75d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ce:d8:e3:ba:d4:20:47:b3:7e:6d:1a:c6:c3:
76:85:00:20:4a:b9:05:d4:a6:cb:1e:7f:42:7f:5e:
6e:6e:21:c0:db:31:ec:cb:a2:c9:54:32:06:b4:6d:
ee:6f:81:54:01:24:a8:fc:1d:d6:55:9e:6c:f1:83:
e1:62:e0:9d:ef:e5:54:bc:7d:90:3a:c6:19:ab:b7:
f0:29:79:68:5f:3a:f4:70:6c:e2:d6:d8:6e:71:56:
d5:57:5f:c4:04:1a:fa:62:96:b5:c4:ad:b8:cc:75:
eb:5f:fd:fe:ef:87:ce:0c:11:77:58:46:99:55:1b:
4a:fe:b7:a7:e9:b0:f7:5c:3f:7f:ce:65:9f:f5:3c:
bf:6b:b4:f3:2b:33:fd:78:9a:d2:9b:f7:1c:64:27:
39:c6:f3:03:52:ac:8a:53:92:ee:79:05:f7:43:f6:
aa:4a:ea:b0:31:b4:3d:d2:3d:35:5a:68:75:19:08:
1f:2b:7a:09:7c:a0:1d:8c:ed:f8:a6:ed:11:a3:92:
37:3b:ed:27:5d:26:aa:50:85:bf:27:6b:76:d7:cc:
45:bd:70:b8:ac:82:0f:c3:6b:8b:94:3f:a9:1c:45:
69:08:3b:b8:04:ea:92:ab:dc:91:6a:6d:51:19:c3:
3e:a1:4e:ee:e2:78:10:95:00:5c:9b:83:3f:89:67:
f5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:11:32:D9:6A:02:35:43:2D:B8:41:35:FF:7B:D3:B4:5A:A7:5D:85
X509v3 Authority Key Identifier:
keyid:7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:7c:0b:ed:3a:38:99:fd:30:c9:8c:7e:9c:56:6e:d4:fa:b1:
51:39:cb:fb:4d:14:a9:79:94:db:f2:73:55:3d:f1:84:bb:59:
5a:c7:5b:c3:86:02:c8:22:9e:60:37:3a:23:94:f5:46:69:77:
68:9f:4b:23:42:11:6c:fd:f5:9d:cd:e1:9b:95:8f:6d:87:72:
e0:91:f0:4a:17:f3:b6:fd:d9:b2:32:ee:df:95:48:cc:0a:dd:
a3:b9:7b:e0:35:cf:67:1b:5b:7c:89:a3:79:d2:0b:51:8d:5e:
f3:24:cf:de:53:74:75:14:7b:bf:0d:3a:46:1d:fa:59:07:15:
91:11:65:f6:cd:d6:5c:c8:80:c9:a0:1f:f6:c2:7c:b3:43:28:
08:bf:44:3d:49:96:bc:7c:7c:21:9a:91:cf:e7:48:92:ec:0c:
d6:74:2a:b4:07:ae:4a:a6:71:45:e7:c7:1c:c7:7a:71:df:3a:
ec:24:7d:74:60:c1:c6:49:df:b6:c9:e5:c0:72:ea:51:5d:e1:
e4:ee:5c:66:ec:2b:59:27:40:61:00:82:9a:8c:a1:a6:ac:6e:
1d:9f:05:2f:fd:80:19:c6:7d:d1:1f:25:9d:57:b9:a8:eb:ac:
22:a3:30:53:22:2c:0c:d4:d2:0b:59:20:fe:66:93:37:c9:12:
e0:56:db:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:25:20 2025 by rpki-client