Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
File: 8z9sz1fxxI8RwU_QBUBazONtA7g.mft (raw, json)
Hash identifier: fUSdzuKaYeIDZFDNPOGIY8WqCF/zlWy6tW5I6xZNxz4=
Subject key identifier: FB:E9:37:89:2D:51:0F:7A:73:D8:05:9B:98:78:A4:6F:43:48:D0:8F
Authority key identifier: F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
Certificate issuer: /CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Certificate serial: 01962B29819E2B12D4A7F7D478BFFBCF272C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
Manifest number: 14E3
Signing time: Sat 12 Apr 2025 18:01:02 +0000
Manifest this update: Sat 12 Apr 2025 18:01:02 +0000
Manifest next update: Sun 13 Apr 2025 18:01:02 +0000
Files and hashes: 1: 8z9sz1fxxI8RwU_QBUBazONtA7g.crl (hash: WASVlePpUpH5H8WumTq79ri2cR8PiTGX8xqRMtlLk2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:29:81:9e:2b:12:d4:a7:f7:d4:78:bf:fb:cf:27:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Validity
Not Before: Apr 12 18:01:02 2025 GMT
Not After : Apr 13 18:01:02 2025 GMT
Subject: CN=fbe937892d510f7a73d8059b9878a46f4348d08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:c9:61:0c:7c:40:77:54:f6:66:a6:4c:6a:
0c:62:6f:ce:20:eb:68:74:f2:00:ae:c6:3b:0b:1c:
b8:f6:a7:7e:25:e2:e9:dc:5b:ef:e6:f7:9f:e5:8b:
46:75:43:b6:11:38:34:86:1e:c3:b3:8d:b8:3f:d5:
ed:09:67:b4:c4:bd:c9:d5:6f:59:f4:9b:ca:cd:94:
ea:09:34:a1:35:08:98:8f:06:48:6d:e0:9c:c9:70:
4c:6f:e8:bc:49:99:a5:4f:61:62:2d:b4:54:66:ab:
1f:67:34:e9:68:b1:22:01:38:e3:a3:d7:7e:9d:3a:
64:50:65:f7:c8:9c:3e:c7:62:fa:13:c5:b4:fa:29:
03:ae:3a:bc:92:2b:68:f0:d8:f9:aa:97:75:eb:e6:
07:4f:c8:ce:13:f5:da:35:ca:07:f1:fc:c3:38:7b:
16:5e:4e:69:c5:bf:74:99:c8:ec:3f:18:dc:25:3d:
72:f5:f0:73:64:ed:d4:56:81:a0:c7:ff:29:81:a2:
ae:c3:01:40:4f:df:7b:08:ae:81:94:ff:d3:c4:3c:
71:c6:d9:08:0c:dd:f6:fb:b1:e7:74:df:69:1f:dd:
bc:0f:ad:21:3a:e7:f4:72:11:02:b5:6e:39:73:de:
68:bd:a4:51:ec:1f:1c:4c:a2:aa:19:17:b3:f2:4a:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E9:37:89:2D:51:0F:7A:73:D8:05:9B:98:78:A4:6F:43:48:D0:8F
X509v3 Authority Key Identifier:
keyid:F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9e:5e:34:f2:e1:1e:fa:be:ce:92:5b:c8:7d:40:2c:d5:03:
df:30:e0:39:4c:7c:f8:4a:34:cb:c0:0c:05:49:17:d8:ec:9a:
0b:b7:0c:34:10:b4:b1:f4:17:3e:17:7e:37:2c:0e:6f:b1:d1:
df:a7:2a:0b:81:b7:13:6e:1b:45:43:53:c8:2f:1d:7a:9f:80:
40:08:ba:b2:07:7d:67:5f:10:95:a4:b3:fe:bc:d7:15:2b:b7:
f8:e8:58:48:51:7b:b6:b9:66:ef:d6:7b:ad:73:c1:74:3b:7f:
93:35:be:29:ee:29:57:89:65:dd:b3:bb:29:03:e9:77:52:f2:
f8:66:e5:61:c9:f7:8e:31:f4:75:bd:2e:be:23:e5:56:72:c6:
39:ee:34:15:2e:8a:f6:08:ea:9e:af:09:4d:a7:22:c4:2f:4d:
ab:67:43:24:53:57:d7:f0:cf:9c:14:70:9a:fb:83:a6:27:51:
99:e9:db:e5:e2:90:7f:7e:10:08:57:67:d5:1d:41:45:c4:a1:
af:79:43:c9:ff:81:0a:00:d6:47:51:3b:d2:13:34:ed:c0:48:
b3:cf:a8:73:04:79:98:a9:7f:45:68:b6:a8:44:0d:cb:06:a1:
92:6c:b1:c7:18:f4:89:a6:98:a3:19:1d:b5:a0:ed:6c:a7:e2:
b0:80:0e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:49:18 2025 by rpki-client