Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
File: 0NxXC8HJZLq37VbGc6pAUY-FRXg.mft (raw, json)
Hash identifier: Aa/3MQREOPCzcXTsGa516X8BXApN6dDKihj7obMCGn4=
Subject key identifier: 3C:50:52:02:64:54:BE:20:E4:8E:A0:61:19:6B:0C:4D:25:0B:DF:2B
Authority key identifier: D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
Certificate issuer: /CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Certificate serial: 01964B907D0332E652B5FD46DEB82947D1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
Manifest number: 14F7
Signing time: Sat 19 Apr 2025 01:01:22 +0000
Manifest this update: Sat 19 Apr 2025 01:01:22 +0000
Manifest next update: Sun 20 Apr 2025 01:01:22 +0000
Files and hashes: 1: 0NxXC8HJZLq37VbGc6pAUY-FRXg.crl (hash: vnTcAjoQuRdHzuQG9+yTW+L+mxLjPrydKuPdAtCrs0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:7d:03:32:e6:52:b5:fd:46:de:b8:29:47:d1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Validity
Not Before: Apr 19 01:01:22 2025 GMT
Not After : Apr 20 01:01:22 2025 GMT
Subject: CN=3c5052026454be20e48ea061196b0c4d250bdf2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d5:59:ca:65:8c:fb:95:bb:4a:4f:22:ea:5a:
e2:bf:9f:dd:89:f7:0e:46:aa:88:3d:a3:2b:c4:6b:
da:7d:f6:0f:e7:a6:f0:9d:c5:ae:6f:ed:bc:1b:35:
5d:bf:32:57:bd:70:1b:b2:fe:62:e7:c4:89:15:2f:
0e:bb:b3:b3:4a:5c:7a:1b:c2:9b:9f:d0:93:ed:07:
da:dd:ec:78:bb:eb:32:95:06:73:0a:33:a3:c0:b6:
08:13:d7:87:6c:b2:87:55:ec:d0:6a:02:51:4e:2a:
a8:bd:b6:53:f5:a8:fc:35:0c:d4:6e:c8:f0:98:8e:
b1:f8:f0:c1:a4:40:83:4d:ff:15:8b:f3:2e:01:1e:
99:7d:ed:c8:12:9f:00:6b:4e:90:83:b5:b6:c0:e5:
ac:e3:31:3c:dc:27:38:b0:46:55:5c:a6:e2:f6:17:
d9:fc:61:4c:60:26:15:b3:82:20:44:37:7c:6a:2e:
5c:cd:ce:3c:7b:c9:2d:78:ac:83:95:c0:4c:f0:61:
a0:ea:cd:34:6f:79:64:0e:fe:e4:cd:5f:68:f8:89:
19:92:02:14:65:cd:bf:f1:b8:83:24:2a:b8:7e:f8:
ca:5b:83:ba:a5:26:09:93:5a:fa:ab:78:12:d5:15:
d4:7e:a2:f2:ad:5b:29:66:19:84:94:96:d8:3f:a6:
10:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:50:52:02:64:54:BE:20:E4:8E:A0:61:19:6B:0C:4D:25:0B:DF:2B
X509v3 Authority Key Identifier:
keyid:D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:69:ca:a3:1c:53:7a:e0:80:4e:86:24:25:78:5b:a5:df:6c:
f7:ce:4c:78:7d:60:c3:ab:70:9a:01:5d:12:8a:21:a3:26:80:
6b:09:6f:a0:bf:55:23:47:d5:d7:54:98:8b:95:00:bc:c1:ea:
cc:99:6d:e8:37:83:eb:0b:ee:50:64:73:b4:78:15:4f:ca:b6:
ae:74:6b:82:42:49:9e:2a:9e:04:69:c0:7d:eb:59:28:ec:7a:
05:0f:e2:40:c6:9d:52:d1:e9:6a:b9:c1:a8:6e:03:8b:51:83:
16:f7:c4:e2:cc:05:ca:6a:58:cc:e2:a6:8b:e0:bd:a6:1c:77:
71:13:46:4b:32:61:ce:6f:43:15:62:f9:0a:1a:a3:88:e7:92:
89:75:41:49:79:a6:d1:85:af:b8:53:c6:a0:45:eb:a3:44:f3:
b1:54:48:61:55:89:52:5a:36:16:d1:d5:94:a1:f2:3d:8e:50:
f9:05:6c:cc:12:3f:b0:1e:3d:7b:98:6d:c8:28:b9:7b:5c:db:
a5:6f:12:f2:6c:86:4c:3d:3a:e3:f0:06:c8:50:cc:d5:cf:c5:
98:09:4b:df:91:66:95:89:24:06:21:43:1f:6f:47:8d:11:03:
1e:5d:98:c9:e6:3b:8c:b6:d3:80:77:67:c5:9d:f7:f3:bc:71:
a1:8f:e3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:20:44 2025 by rpki-client