Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File: 47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier: cIEpeUMsNwNAaVG6ZQ/vl9gTQWjLVe7l4xVmknSaCJo=
Subject key identifier: 2F:65:53:AA:01:D5:92:09:94:9B:DE:C2:A6:06:EE:DE:F5:95:F4:1A
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer: /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial: 01964FA326E666EDA433CE2D75CBD6EDF5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number: 0AF9
Signing time: Sat 19 Apr 2025 20:00:14 +0000
Manifest this update: Sat 19 Apr 2025 20:00:14 +0000
Manifest next update: Sun 20 Apr 2025 20:00:14 +0000
Files and hashes: 1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: L0ZMLkZ4y7wz3wx4QAFF6xsZOrby5SHij46HRWWNwaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:26:e6:66:ed:a4:33:ce:2d:75:cb:d6:ed:f5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
Validity
Not Before: Apr 19 20:00:14 2025 GMT
Not After : Apr 20 20:00:14 2025 GMT
Subject: CN=2f6553aa01d59209949bdec2a606eedef595f41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:af:98:ef:0a:5e:88:28:b3:d3:b9:eb:f8:
c0:cc:f2:67:00:b0:e2:bc:8d:d0:ca:7c:d1:82:16:
26:4b:28:89:ff:69:04:f1:5f:a3:55:a0:af:d1:65:
5f:ea:28:58:20:25:0e:ef:1b:94:de:5b:cf:3b:d8:
73:fd:b3:f0:26:f7:92:3f:b3:ba:5b:16:a9:c7:0d:
66:53:06:4a:0c:91:31:86:4e:6f:e9:92:fc:eb:93:
e7:49:25:77:c2:ae:6f:5a:4b:18:c9:ab:5f:0b:c8:
89:d8:1f:94:c4:62:ac:ef:89:7f:c5:fe:d3:53:c4:
78:0b:50:ca:07:81:b5:97:f5:fc:6e:32:02:90:83:
82:c5:85:87:5d:42:eb:22:c5:99:60:93:6a:62:f4:
99:61:b8:2d:3d:2e:14:5e:0c:cb:40:29:8d:0f:d7:
0c:d4:28:b4:92:82:28:b0:76:d0:56:e5:4e:92:18:
8b:42:5e:bc:dd:59:62:ba:cf:dd:1b:f8:61:22:bd:
2e:a3:08:c7:2f:24:32:f2:c3:57:3d:0b:21:6e:0a:
fd:fd:43:66:1a:7d:db:da:5b:84:28:91:5d:bc:a2:
c1:a4:59:9c:fc:c5:e6:d7:b9:0d:4c:75:80:b3:85:
27:9a:cf:25:a4:13:3c:40:8f:28:55:cd:a6:b8:88:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:65:53:AA:01:D5:92:09:94:9B:DE:C2:A6:06:EE:DE:F5:95:F4:1A
X509v3 Authority Key Identifier:
keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e3:5f:17:25:49:fa:84:16:80:eb:3c:ea:68:db:a7:18:57:
80:32:d4:e9:50:1d:ab:95:59:8a:4e:52:26:c1:24:a9:62:fd:
ba:57:90:25:fc:11:41:1f:00:c0:14:97:6e:da:bf:4a:2b:c4:
5e:ee:75:29:64:db:ab:53:43:d4:6b:7b:02:ae:47:2a:d7:ce:
2c:4b:55:2f:34:ef:07:d6:c1:c1:e6:9c:9c:33:f0:f6:72:ec:
c1:cd:b3:d1:4f:ca:b0:a0:53:e9:41:a0:aa:a5:ab:65:ec:bf:
d1:29:da:db:fa:14:95:0b:b9:e1:12:e1:bd:d0:a9:cf:b9:02:
01:6a:96:36:ca:69:02:1d:36:38:c3:6f:28:42:6e:9c:f9:8b:
0b:b4:b9:d3:09:51:b5:e9:f1:81:bb:c1:d9:90:87:c8:87:1e:
2a:49:bb:76:a8:70:98:e7:6c:82:17:5f:7b:02:ac:f8:81:08:
ba:96:47:87:1a:e0:36:39:8e:27:72:50:e6:e0:2a:2f:0a:8f:
db:e3:a1:c5:a8:d8:7e:8c:f9:c9:14:55:44:5d:2a:a8:e7:03:
d9:1e:2e:1b:71:68:cf:f8:ff:d0:58:ed:27:f4:cf:13:1e:96:
37:34:3a:8f:39:cf:32:62:d8:46:eb:2b:ee:87:8e:77:93:14:
b7:bc:8a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:23:20 2025 by rpki-client