Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
File: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft (raw, json)
Hash identifier: ujLLkP7IJ8NIP3gc7hNeY4rZjqcwwWqO/+9UYFoKVGI=
Subject key identifier: 29:4A:0F:4D:6C:E5:49:BE:61:BC:FB:D5:A8:F8:3F:18:DC:0E:A2:97
Authority key identifier: 7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4
Certificate issuer: /CN=7f0757c331981e042b7471373527d0f64a1356b4
Certificate serial: 019649A12BF79EDE8EDE48AA2A1FC0A9EF23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
Manifest number: 109B
Signing time: Fri 18 Apr 2025 16:00:21 +0000
Manifest this update: Fri 18 Apr 2025 16:00:21 +0000
Manifest next update: Sat 19 Apr 2025 16:00:21 +0000
Files and hashes: 1: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl (hash: aNDHgeX/MWrOkY2t+i2wGvOW924d2mrO1ESitYIlH/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a1:2b:f7:9e:de:8e:de:48:aa:2a:1f:c0:a9:ef:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f0757c331981e042b7471373527d0f64a1356b4
Validity
Not Before: Apr 18 16:00:21 2025 GMT
Not After : Apr 19 16:00:21 2025 GMT
Subject: CN=294a0f4d6ce549be61bcfbd5a8f83f18dc0ea297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:8b:bd:c2:80:3a:cf:3f:8f:5f:e3:71:54:
7f:81:3d:a4:d7:2d:10:56:bc:50:6a:df:99:40:97:
b7:e2:6e:d5:a5:ed:0e:f3:11:bf:d0:f4:60:03:16:
79:0b:27:42:c0:be:6a:11:68:e2:70:39:78:f7:ef:
b5:36:e4:42:71:93:83:05:97:ce:26:a4:2a:bf:29:
d1:2d:a2:88:69:da:72:7e:03:6c:1b:92:ba:fc:ee:
43:80:b2:69:5d:5b:71:96:dc:1f:af:af:5a:4a:14:
58:61:24:e1:af:ff:33:46:f0:fe:10:b5:0f:fd:a2:
ca:2d:9d:6e:a6:71:70:9a:9a:ba:f4:6b:80:e3:e5:
3b:b5:ba:b9:6e:04:dc:25:ef:c4:e2:58:a9:c4:f3:
ec:0b:e1:86:42:1f:b2:38:79:ec:5d:f8:a1:03:1c:
de:c8:96:b2:13:a1:e2:d2:04:cd:04:f2:ff:48:66:
ed:35:88:08:a5:b7:5b:9b:ed:d6:cb:84:8f:59:82:
3e:a9:b1:d4:17:44:85:c5:24:e3:62:39:3a:3f:57:
4e:52:46:bf:fe:49:a6:3f:1c:16:5d:41:df:c8:ae:
5e:7f:4e:5b:0e:5e:f4:17:f8:3b:1d:31:b4:11:16:
45:db:7c:eb:71:ea:25:76:d2:74:e9:65:8e:b1:db:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4A:0F:4D:6C:E5:49:BE:61:BC:FB:D5:A8:F8:3F:18:DC:0E:A2:97
X509v3 Authority Key Identifier:
keyid:7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a8:b3:1a:75:31:e0:fe:56:c3:43:d2:e4:6e:5c:ad:a1:de:
0a:d3:dc:8a:c5:ef:e7:ca:fc:00:ba:2e:d2:f2:82:82:01:7d:
c0:90:10:68:aa:ab:94:b8:8d:af:bc:5c:63:35:75:02:7c:12:
9a:f1:7d:e3:00:fe:4c:52:71:74:8f:4e:99:38:10:ca:a1:16:
64:88:c4:d8:cb:f5:6f:1a:17:7f:4b:7a:9f:54:56:30:1a:1f:
7a:43:44:4d:e2:45:59:4f:93:d8:2f:1a:23:ea:0a:a0:0a:38:
a9:12:f3:08:b9:e6:2f:27:e0:ea:89:6a:7c:7f:4f:ab:8f:88:
36:d2:e2:e0:5b:77:f0:ca:c0:46:2d:ad:bf:9f:53:3d:f6:fe:
92:be:3d:85:59:cc:cf:63:70:dc:a9:5c:82:af:c1:ed:19:0c:
21:58:98:21:ce:b5:25:b4:07:32:e6:8a:f9:55:6d:1a:0b:8d:
ea:05:8b:9c:cf:d7:8e:3d:6a:dc:24:97:c8:32:bc:54:e6:5c:
ba:d7:d5:59:0e:44:f4:fc:7f:8b:c7:ff:53:a9:88:bd:e6:e1:
38:db:e9:d5:2a:88:d9:35:00:7a:08:8e:7d:7a:1f:b6:04:93:
fa:8a:dc:9d:75:65:04:58:06:1b:24:ff:0e:cf:c2:14:b0:b9:
bd:c3:91:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:39:21 2025 by rpki-client