Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
File: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft (raw, json)
Hash identifier: vOJCE1Ng/Ky+Jo6woR5yBqe4iOqK377gSxh7sm0p2bw=
Subject key identifier: 47:07:76:76:01:BA:A2:D1:0C:A0:98:CC:5C:F5:42:A7:6F:5C:F9:89
Authority key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
Certificate issuer: /CN=73d85f8438d73b5668e89cc692646f9487965fa9
Certificate serial: 019658DD5DC0D118680FCF0D81ECBE91E86C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
Manifest number: C3
Signing time: Mon 21 Apr 2025 15:00:24 +0000
Manifest this update: Mon 21 Apr 2025 15:00:24 +0000
Manifest next update: Tue 22 Apr 2025 15:00:24 +0000
Files and hashes: 1: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl (hash: MDyzomt+tDFDUN+UcFaTKtlApIlshFdNzugGU6GiJug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:5d:c0:d1:18:68:0f:cf:0d:81:ec:be:91:e8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d85f8438d73b5668e89cc692646f9487965fa9
Validity
Not Before: Apr 21 15:00:24 2025 GMT
Not After : Apr 22 15:00:24 2025 GMT
Subject: CN=4707767601baa2d10ca098cc5cf542a76f5cf989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:8f:bd:f1:77:41:e5:f3:5e:cd:b9:0d:f9:
92:95:a4:30:6c:94:7a:3c:f1:e2:ae:10:d3:27:73:
66:ca:bd:4a:64:09:38:a2:c7:56:6f:9a:03:47:88:
80:32:86:2c:c4:d1:8d:b0:4e:1e:82:1c:a8:90:0f:
1f:ab:9c:84:b0:b3:d5:77:01:b6:d7:7c:1b:ce:09:
01:27:4a:ca:14:a5:35:10:34:02:d9:e5:2d:62:52:
76:9e:e7:4b:14:e4:1a:66:8a:08:53:a0:d3:40:2c:
0d:08:9f:a5:52:9e:bc:fd:e4:85:34:d6:7b:35:93:
44:54:6d:f8:44:16:a8:6a:d1:7d:39:ae:f6:b6:9c:
35:d2:c0:c2:be:5f:eb:84:50:5d:02:a7:1e:78:d8:
1b:a8:d1:00:fb:e6:5b:0c:b1:63:4e:af:04:a8:72:
10:69:f8:41:b8:b6:7f:37:59:70:97:e2:f3:87:be:
76:54:c9:5c:24:d6:e6:ee:57:61:f4:3b:4d:93:af:
d8:bb:6f:d0:33:a7:fa:5c:0a:28:7e:ed:00:25:bb:
96:18:63:92:cf:ec:d7:d7:a0:09:0f:22:63:05:87:
b9:cb:66:17:57:f3:a9:a2:5f:e7:c0:92:48:bb:17:
a8:1c:83:f4:ee:ae:e1:2f:76:53:a9:c8:28:4c:bb:
49:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:07:76:76:01:BA:A2:D1:0C:A0:98:CC:5C:F5:42:A7:6F:5C:F9:89
X509v3 Authority Key Identifier:
keyid:73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2a:20:23:e3:3a:d7:44:d3:d8:3f:34:fa:f7:bd:32:01:80:
da:3f:e0:75:e4:f3:16:40:d3:c2:b5:a3:28:d4:3d:d5:f9:86:
1f:e4:f2:f7:91:b4:83:a5:3b:8e:22:52:02:9b:68:da:2c:c9:
b3:fc:bb:5a:ab:98:c1:3f:0d:d4:ff:22:f0:39:69:4e:23:a0:
aa:44:08:df:79:28:e0:44:3a:dc:9a:c5:2b:c0:b3:f8:b1:aa:
7d:74:c2:01:52:eb:9c:c5:15:ab:7a:1a:fb:f4:38:76:d6:89:
4e:d5:83:85:93:28:c3:fb:e9:cb:5d:f0:07:4e:92:d6:06:eb:
af:6e:d7:ac:76:ef:d0:8e:e1:37:c4:41:46:d5:88:cd:77:80:
78:15:2a:f8:f6:c3:2e:39:fd:25:44:96:07:f4:d0:77:8d:bb:
61:c0:1b:eb:27:1b:d6:e1:13:2b:fe:9b:fd:85:03:02:e8:d2:
44:01:c2:0c:9d:dc:99:05:58:8e:88:23:d6:be:ef:7b:09:2a:
e1:67:82:97:42:d7:00:d5:7d:e6:5c:af:6e:61:44:45:dd:1a:
85:d0:c7:cd:ca:71:bf:cb:f0:96:f2:e6:3c:54:17:a8:3c:87:
1c:0d:11:5b:90:06:f0:be:9b:95:80:c7:2e:6d:29:a5:d2:ec:
8f:a8:08:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:05:42 2025 by rpki-client