Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.mft
File: FhaeT1b0AaROVKG9hr8svYa4hnM.mft (raw, json)
Hash identifier: BB22WOnXllmxwQwHMt7EL1BFUTGOnnM1RUrh6NhCMqE=
Subject key identifier: 9F:EC:16:27:E9:99:A8:28:B7:B8:BB:35:20:A9:16:6A:7C:49:34:22
Authority key identifier: 16:16:9E:4F:56:F4:01:A4:4E:54:A1:BD:86:BF:2C:BD:86:B8:86:73
Certificate issuer: /CN=16169e4f56f401a44e54a1bd86bf2cbd86b88673
Certificate serial: 019659155CC8643A75A162EF1033EE88C51E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FhaeT1b0AaROVKG9hr8svYa4hnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.mft
Manifest number: 114D
Signing time: Mon 21 Apr 2025 16:01:34 +0000
Manifest this update: Mon 21 Apr 2025 16:01:34 +0000
Manifest next update: Tue 22 Apr 2025 16:01:34 +0000
Files and hashes: 1: FhaeT1b0AaROVKG9hr8svYa4hnM.crl (hash: cnAr5ne7hYUZwfhAoJ6NWYevkByeS9LT+HM0CYfiFX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FhaeT1b0AaROVKG9hr8svYa4hnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:5c:c8:64:3a:75:a1:62:ef:10:33:ee:88:c5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16169e4f56f401a44e54a1bd86bf2cbd86b88673
Validity
Not Before: Apr 21 16:01:34 2025 GMT
Not After : Apr 22 16:01:34 2025 GMT
Subject: CN=9fec1627e999a828b7b8bb3520a9166a7c493422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:3b:f6:32:b9:19:c7:d3:9e:4c:80:4e:a0:
75:e1:4d:07:14:14:65:3c:15:a0:79:51:ef:6f:2d:
b9:7e:40:eb:c1:8e:de:4f:a4:42:44:99:37:d3:a9:
39:20:77:65:e9:b4:b6:4e:db:10:b2:4b:e4:8b:0f:
29:c5:af:70:af:81:2e:32:e0:9e:f3:50:ca:07:81:
36:84:fc:de:1d:c8:ad:1e:23:c9:7b:02:ee:dc:e3:
8d:b0:25:62:6d:6f:08:c8:3f:ec:9c:8b:9f:5a:d0:
d7:3c:6f:c7:57:d5:48:70:6d:6e:0c:a5:f5:b1:5b:
ed:2f:5f:08:c9:63:40:14:c3:c2:b7:21:94:30:45:
39:f1:06:48:e1:9d:29:21:1a:18:55:da:7d:d8:94:
9c:bc:30:f0:76:70:ab:08:bd:b2:2f:8a:a1:8f:12:
00:4c:6c:44:72:7c:16:93:63:da:95:9c:e3:94:3d:
13:bd:ce:ad:91:5e:0a:18:f3:06:93:b2:0a:02:88:
80:50:74:a0:3f:50:3a:50:1f:69:95:f9:7b:f8:76:
44:2c:b3:67:15:21:fe:a9:09:fa:aa:75:45:a2:ce:
66:98:d5:7a:4c:71:1c:4d:c0:2d:b0:8b:f0:d5:e9:
77:7e:d1:ba:9c:15:6e:62:67:ae:25:bd:1e:f0:1e:
cf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EC:16:27:E9:99:A8:28:B7:B8:BB:35:20:A9:16:6A:7C:49:34:22
X509v3 Authority Key Identifier:
keyid:16:16:9E:4F:56:F4:01:A4:4E:54:A1:BD:86:BF:2C:BD:86:B8:86:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhaeT1b0AaROVKG9hr8svYa4hnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:97:a9:42:07:39:6c:36:8c:ef:03:ee:68:d5:59:98:76:71:
8c:06:34:b4:0d:9b:83:e1:6c:41:21:e8:1d:9b:4b:68:52:87:
9a:62:6a:be:68:3c:df:d9:37:f8:51:40:d8:83:ca:0c:20:de:
dd:af:56:76:56:b5:db:8d:77:19:ad:1d:36:63:6e:d7:5b:f6:
62:47:be:cc:c2:d0:c8:de:12:d7:34:d3:ae:07:13:ea:c4:9c:
4c:8f:8e:bb:15:c9:0b:55:2f:9f:65:e8:3e:55:ae:97:82:2c:
c3:b7:fb:89:3c:fa:86:9a:8c:c3:ba:37:28:c5:01:28:98:61:
a2:b0:93:61:5f:3c:30:2a:17:eb:e9:6d:ba:19:51:f4:10:85:
72:70:4d:df:38:15:00:f8:b3:3e:8c:b9:65:d2:63:42:05:99:
de:32:28:76:d2:ff:0b:35:f7:f8:7a:b0:3a:80:22:0a:99:d0:
f3:38:09:10:5f:4f:9f:4a:8b:72:fd:1d:42:92:55:2a:ba:51:
ab:82:d2:5c:3d:ae:59:f7:cf:32:c9:fe:5c:c6:59:80:f0:2c:
39:2c:1d:81:b5:2b:f4:bd:da:dd:23:3c:5e:51:0b:08:8a:0c:
b8:fe:8f:fa:7e:9c:2c:15:a1:2d:7f:f7:9d:9a:af:3c:08:41:
35:09:ee:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:07:29 2025 by rpki-client