Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
File: FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft (raw, json)
Hash identifier: Gqtf/ayw83MTT9fv4v8F0wiyjmhoX9qxQ/2fQNGLW6c=
Subject key identifier: 0B:94:44:5D:B3:B2:6D:F7:32:C4:C6:73:0B:AC:87:65:03:E8:53:97
Authority key identifier: 15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
Certificate issuer: /CN=15894575555cde14c770cbb183da5535d144b540
Certificate serial: 01964BFD46457772513FB2C747F08CF80268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
Manifest number: 14E3
Signing time: Sat 19 Apr 2025 03:00:11 +0000
Manifest this update: Sat 19 Apr 2025 03:00:11 +0000
Manifest next update: Sun 20 Apr 2025 03:00:11 +0000
Files and hashes: 1: FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl (hash: MIrsHym8Nb+77YRtw6Ijf85aI04S0af7zKr8H3Oy1HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:46:45:77:72:51:3f:b2:c7:47:f0:8c:f8:02:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15894575555cde14c770cbb183da5535d144b540
Validity
Not Before: Apr 19 03:00:11 2025 GMT
Not After : Apr 20 03:00:11 2025 GMT
Subject: CN=0b94445db3b26df732c4c6730bac876503e85397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:e3:f5:b9:df:f6:88:8e:f7:92:e9:4b:65:
2d:ef:97:28:e7:8e:57:22:51:43:01:e3:6b:47:f4:
e3:b9:43:78:55:de:0f:0e:16:42:19:8a:26:61:a1:
9a:84:43:e6:d7:32:56:5d:df:1c:59:1e:1d:d8:52:
a1:bd:52:84:9f:28:39:b6:6f:15:f7:9d:18:36:57:
c3:76:0f:67:b0:a8:71:63:fe:f1:df:e4:bf:2b:4d:
3d:87:a3:21:ac:53:28:05:d7:45:85:0c:69:58:a6:
05:00:32:64:4b:19:e6:a6:da:14:a0:bf:4f:82:6b:
6a:3f:11:3b:4a:90:f4:d7:c9:bd:41:e9:c4:eb:39:
2c:bf:02:5f:3d:1a:f2:5c:55:8b:c0:16:76:19:7c:
fa:25:b9:0f:13:7b:7a:e7:a6:d0:6f:b2:df:09:b9:
a7:44:c9:4b:a0:c5:13:c8:1f:0f:6b:d1:4e:94:39:
6e:21:31:de:e0:db:c0:2f:18:09:a8:9e:2a:4b:10:
bd:a4:8f:35:52:0d:a6:40:c2:18:75:5b:5d:c2:f2:
0e:90:18:9f:c9:cd:31:d8:21:c6:55:6f:5c:18:5d:
09:90:81:3e:8c:9b:f4:d9:0a:56:db:5e:4b:bb:9f:
33:e0:bb:37:13:fc:79:70:2b:56:98:48:90:57:4c:
f2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:94:44:5D:B3:B2:6D:F7:32:C4:C6:73:0B:AC:87:65:03:E8:53:97
X509v3 Authority Key Identifier:
keyid:15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:5a:b5:43:f2:69:df:8b:db:d8:77:96:22:da:1d:b7:5d:bb:
38:6c:f5:92:ac:c7:85:49:03:ed:10:de:1d:fd:b5:4a:1a:3b:
0e:a0:b1:a2:a7:db:b3:80:68:5b:4b:76:51:f3:73:2f:9f:c8:
a7:fb:b8:ec:e3:e9:f6:f6:45:87:58:40:70:fc:4d:3a:68:06:
bc:e6:32:24:9c:1d:b4:18:62:a2:90:48:4f:ec:cc:c3:3c:18:
d9:3d:07:ac:22:4d:54:6f:e7:1a:f6:60:e0:8f:58:87:96:53:
c4:9f:21:f9:62:7d:37:2a:d9:c5:37:a0:b3:66:48:55:e8:58:
ee:f6:10:20:56:a8:c7:6a:af:36:3a:20:0e:84:ad:ee:46:54:
06:6f:7e:ca:4a:bd:24:a5:a9:43:37:b9:aa:ee:e5:44:8a:c2:
7f:f3:bb:1d:5e:e8:43:ae:5a:37:00:b3:f7:27:8a:3a:34:e5:
0a:5f:b9:b8:ba:a2:77:ae:f0:39:cf:1d:16:be:fb:54:62:7b:
63:dd:71:37:05:49:37:e7:f6:98:46:ff:5e:58:f1:4d:b8:cb:
b9:36:90:2d:26:70:1a:f7:6d:43:60:3c:66:3d:c6:61:a4:ee:
22:5d:ab:19:39:e3:9f:11:a2:1d:90:c7:62:30:cf:17:ab:d8:
7e:65:b3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:19:29 2025 by rpki-client