Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
File: T9a30KYwNXvDweDN2gbcqIo0Y-w.mft (raw, json)
Hash identifier: qWzLA2C8QX8/pxgS1ffVd4qnNEN/1nZtDCGlifuadm0=
Subject key identifier: 71:8F:22:14:CC:43:85:61:3D:A8:F2:9E:16:3C:D8:47:39:43:28:85
Authority key identifier: 4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
Certificate issuer: /CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Certificate serial: 01958B4DACEBC2179F6B4AC654A1AE41B85F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
Manifest number: 0384
Signing time: Wed 12 Mar 2025 17:01:18 +0000
Manifest this update: Wed 12 Mar 2025 17:01:18 +0000
Manifest next update: Thu 13 Mar 2025 17:01:18 +0000
Files and hashes: 1: T9a30KYwNXvDweDN2gbcqIo0Y-w.crl (hash: Z3TD7aZTQrjchFaadyJeSDx726XE7FDEuIvDbvem0c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:ac:eb:c2:17:9f:6b:4a:c6:54:a1:ae:41:b8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Validity
Not Before: Mar 12 17:01:18 2025 GMT
Not After : Mar 13 17:01:18 2025 GMT
Subject: CN=718f2214cc4385613da8f29e163cd84739432885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:4a:b0:41:da:eb:cf:78:16:dc:56:e1:c0:
86:d7:d4:52:78:69:2f:bd:66:92:29:53:9d:08:73:
ae:c9:cb:e4:c2:d4:55:65:d4:78:72:ff:f7:6d:35:
ad:1f:bf:de:fb:33:32:1b:e7:cb:43:f1:dc:78:1f:
ba:21:67:2c:b3:77:7f:45:b5:0c:cb:f9:9d:fa:90:
b3:e2:b2:21:c8:54:fd:35:69:ad:34:6d:48:de:e7:
d2:73:c2:79:95:31:6f:86:99:79:2c:99:f8:84:61:
9a:b2:bf:7a:5b:0d:0b:55:14:12:58:40:ff:7d:3a:
1b:b0:ea:79:3d:26:56:91:02:d7:c4:ad:34:04:2c:
9e:90:75:90:a7:6a:0d:e0:62:d5:58:0d:97:86:87:
89:f7:7d:2a:34:f9:56:a3:c6:86:2b:14:e7:f5:e8:
84:99:16:85:dd:ae:b0:53:8e:88:39:0b:41:9c:6f:
a7:d3:cd:61:42:a9:6d:25:67:59:31:71:63:d9:12:
59:65:d7:60:9a:88:31:15:52:36:58:af:d3:1b:b8:
43:48:f4:12:b1:85:d2:05:50:53:7c:26:5f:41:65:
e0:d1:04:12:db:de:00:7b:a1:ea:30:34:fd:db:07:
6b:20:69:e7:dd:e6:31:40:65:3d:b8:8b:e6:e6:b4:
51:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8F:22:14:CC:43:85:61:3D:A8:F2:9E:16:3C:D8:47:39:43:28:85
X509v3 Authority Key Identifier:
keyid:4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fb:e9:ea:89:71:55:38:a1:dc:52:f8:c4:04:84:16:4a:2d:
d4:43:25:27:eb:ce:d0:0c:8e:aa:36:8a:e9:15:0b:ca:39:22:
8c:f8:ff:f0:6b:a3:d2:2e:e8:13:04:bf:5d:11:25:71:7b:97:
96:fb:ec:3b:b8:b4:82:22:16:8a:a7:07:59:49:83:79:1b:21:
90:62:c1:00:be:ad:7e:6d:bb:52:c6:3d:93:f7:eb:f6:62:6d:
ff:6e:27:0d:5c:21:b2:ca:a3:1f:93:4f:53:af:55:2a:56:3d:
b7:61:6b:c0:9c:a5:66:f3:16:53:3a:34:a2:65:3f:4f:fe:9f:
5a:04:94:0d:1b:33:0d:90:a0:21:8f:ae:9c:d2:52:89:ad:a4:
f9:9a:e7:06:c2:33:b8:f5:d7:67:7d:6d:85:c1:23:53:e1:6a:
d0:71:b9:eb:07:13:09:79:1a:d5:1d:52:fe:27:ad:c3:1d:fd:
81:de:a2:a4:47:50:5b:ba:64:0a:65:3f:a6:b3:b2:dd:f9:d8:
95:6a:74:42:92:5f:96:45:39:c3:ab:02:ec:e0:ab:9f:e7:46:
c5:04:c2:7e:c7:ce:29:fa:71:0b:5f:42:2e:36:d8:86:b2:2d:
24:f2:89:be:17:89:32:22:22:b4:f8:ab:b3:04:a5:d7:29:c2:
fb:a3:64:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:18 2025 by rpki-client