Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
File: hfR7ZaUlMyab0hmBOlIDr92eXb4.mft (raw, json)
Hash identifier: d86NDnUzh+yxHD0XdvA/8maquRR0A5wth+00sJrS9aM=
Subject key identifier: 52:40:6B:E4:7D:F2:19:13:EA:81:54:F1:71:CF:C7:31:F3:D0:C3:46
Authority key identifier: 85:F4:7B:65:A5:25:33:26:9B:D2:19:81:3A:52:03:AF:DD:9E:5D:BE
Certificate issuer: /CN=85f47b65a52533269bd219813a5203afdd9e5dbe
Certificate serial: 01964A0F8CAE2A4EF990A460C4BEA9B5CCF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
Manifest number: 10EA
Signing time: Fri 18 Apr 2025 18:00:55 +0000
Manifest this update: Fri 18 Apr 2025 18:00:55 +0000
Manifest next update: Sat 19 Apr 2025 18:00:55 +0000
Files and hashes: 1: hfR7ZaUlMyab0hmBOlIDr92eXb4.crl (hash: NU1xr2/2aU238qHdSIcj8Z44itC6iAo+DlTwY+Blr/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:8c:ae:2a:4e:f9:90:a4:60:c4:be:a9:b5:cc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f47b65a52533269bd219813a5203afdd9e5dbe
Validity
Not Before: Apr 18 18:00:55 2025 GMT
Not After : Apr 19 18:00:55 2025 GMT
Subject: CN=52406be47df21913ea8154f171cfc731f3d0c346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:93:83:62:3f:63:4c:01:6e:17:a3:ad:ba:
de:6f:fb:3a:cb:a9:0b:2e:72:4f:5e:d1:59:0a:7f:
21:50:c5:e0:c7:41:a6:07:3b:36:34:bd:84:9a:0f:
38:2c:b8:dc:ad:c7:da:c1:94:f2:71:f3:7a:c6:9f:
dc:26:51:c9:d2:0e:32:f9:82:c1:8a:32:f0:d0:7d:
3d:9c:7d:84:1e:9e:4a:a9:bf:9c:30:a2:5e:09:89:
fe:b1:8d:6d:c8:4d:5e:44:b5:a6:35:c6:20:d8:19:
99:19:da:b5:50:1a:0b:70:9e:09:5f:70:53:46:03:
58:03:2d:4b:40:a2:75:54:a1:a0:4b:5a:ab:4d:7e:
cb:40:af:f7:e9:48:7c:a9:9a:1f:23:9c:a0:e8:de:
52:c4:c5:f0:a6:f9:dc:bc:d3:8e:8f:e7:4a:fb:20:
28:c2:88:96:12:13:6c:ac:54:c6:37:3b:60:fc:38:
d2:8d:de:f7:40:0f:6b:94:88:81:35:e4:0f:cd:6d:
75:43:2d:25:be:56:1c:73:dc:60:67:8e:85:cf:a2:
e0:b0:d4:70:2d:7c:ef:a1:b1:33:7a:26:70:b3:d5:
aa:df:2d:42:e9:e4:88:f6:cd:79:e8:62:70:93:c8:
11:49:a1:e4:31:0a:2e:51:da:f7:94:67:6e:47:9e:
fe:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:40:6B:E4:7D:F2:19:13:EA:81:54:F1:71:CF:C7:31:F3:D0:C3:46
X509v3 Authority Key Identifier:
keyid:85:F4:7B:65:A5:25:33:26:9B:D2:19:81:3A:52:03:AF:DD:9E:5D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ed:0a:a2:f4:3b:59:8f:bb:d2:1f:4a:49:46:c7:c6:b8:c1:
58:64:42:28:80:e7:4c:e1:10:6d:bd:ea:07:f2:94:46:0f:76:
6f:64:18:79:71:72:b1:9a:85:81:f8:4f:b7:83:4b:98:16:c5:
07:e2:ca:67:13:38:f4:ac:eb:c5:fa:9e:13:b2:b2:8b:20:bf:
42:3f:3f:37:35:42:fb:73:80:e5:f7:ae:85:d7:97:a3:77:8e:
f9:3f:3b:5b:d7:63:a2:93:21:a0:a2:3e:6a:58:dd:d1:59:5c:
8f:6b:5b:c9:4b:b7:3c:46:3d:0d:8e:04:a6:67:cb:14:ec:ac:
6d:20:f3:e6:46:84:50:ed:22:1c:bf:1e:dd:cf:4d:dc:ff:b8:
58:59:13:6d:4f:98:ed:b2:d7:8f:33:f6:0e:fa:8d:33:c4:c2:
d4:bc:22:ae:d8:e5:36:cd:9d:bd:d5:71:b6:dc:b8:f4:18:5a:
96:ee:a4:22:95:7a:d4:e1:4f:b4:5e:d9:a2:5c:59:1f:a9:34:
ef:09:5e:34:c0:67:ff:3f:77:b6:16:fe:35:cc:6a:43:75:c8:
c5:12:4b:33:e7:4d:fe:8c:b2:97:45:17:ad:89:41:1c:60:b1:
41:24:1e:55:78:69:00:30:e1:aa:09:4b:da:0a:a2:56:1d:bb:
ba:c8:be:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:30:22 2025 by rpki-client