Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
File: fvoucF0jP_80WpErLyObWs43K7k.mft (raw, json)
Hash identifier: 6S1YKpPEg+g1DIlDOhteh4MOCED87q2T6RYSBk9vjPU=
Subject key identifier: 5A:EB:B8:9C:8B:79:D3:66:91:35:83:2A:B1:C9:D1:E7:9E:0D:B3:E0
Authority key identifier: 7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9
Certificate issuer: /CN=7efa2e705d233fff345a912b2f239b5ace372bb9
Certificate serial: 0196409E1CDDFA2784DBB18784A319D743BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
Manifest number: 0430
Signing time: Wed 16 Apr 2025 22:00:25 +0000
Manifest this update: Wed 16 Apr 2025 22:00:25 +0000
Manifest next update: Thu 17 Apr 2025 22:00:25 +0000
Files and hashes: 1: fvoucF0jP_80WpErLyObWs43K7k.crl (hash: UVPW+JzZvgheCEktPo7CIXZIkU4Rj7QwxO9lkpU54Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:9e:1c:dd:fa:27:84:db:b1:87:84:a3:19:d7:43:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7efa2e705d233fff345a912b2f239b5ace372bb9
Validity
Not Before: Apr 16 22:00:25 2025 GMT
Not After : Apr 17 22:00:25 2025 GMT
Subject: CN=5aebb89c8b79d3669135832ab1c9d1e79e0db3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:12:f5:63:3e:02:74:df:23:d5:1c:13:5d:
95:35:40:6e:de:c4:11:0a:a1:46:bc:37:f9:84:33:
8e:5a:af:cf:d7:94:77:bc:db:9a:d9:4a:b5:04:f5:
9b:3a:79:64:80:91:e9:87:f7:a1:d2:81:f9:a9:f0:
db:ff:90:a7:8f:d6:e0:30:0f:3f:d1:13:5b:57:86:
e6:78:00:fa:58:a9:b6:74:88:28:ff:61:9e:23:29:
75:33:75:b6:d8:52:cf:d3:5b:aa:9d:14:57:f0:78:
03:0d:97:55:21:5a:7e:7a:6f:64:9c:c7:80:c1:21:
11:5a:fe:38:fc:ad:2d:5c:db:94:86:b8:4c:46:5e:
26:f2:b2:67:6c:6b:ab:45:0e:d0:ba:97:4c:25:3c:
fc:e5:16:2d:02:da:20:82:60:ae:fe:9b:6d:ab:06:
53:8c:e9:1d:64:9f:17:09:8d:08:e9:3d:39:40:23:
ce:5d:ba:dd:e9:40:6a:47:dc:73:38:7c:11:db:9c:
f8:d7:b6:fa:9b:79:3f:fd:84:5e:46:61:fc:be:e6:
da:c3:07:70:09:76:9f:48:f3:aa:20:06:b5:f3:64:
e7:65:a5:cf:09:f0:2f:da:33:c5:3a:80:f2:13:19:
e0:64:9f:36:e4:6b:14:ee:77:b5:b8:7f:fb:04:69:
3b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EB:B8:9C:8B:79:D3:66:91:35:83:2A:B1:C9:D1:E7:9E:0D:B3:E0
X509v3 Authority Key Identifier:
keyid:7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:68:7f:77:da:2c:ad:15:57:f2:f6:ef:1b:0a:2d:1c:c0:28:
ec:26:c1:2a:96:64:02:9a:96:19:54:1f:a9:36:2d:88:af:0d:
5c:1f:ff:6a:4a:9c:94:c4:11:cf:01:5d:f9:24:f6:a8:34:4a:
d6:f0:3a:85:3c:87:80:f9:cf:f8:7c:8c:5f:37:e4:e4:86:e2:
5d:7e:67:38:f1:d7:28:ac:28:23:11:7e:d2:33:3c:45:a7:c7:
f2:93:7b:42:7e:bf:c5:f0:81:14:7b:e5:0f:c8:98:b0:ed:ce:
05:7a:8d:a6:c4:dd:e2:5f:c9:4c:5b:fa:a8:e8:25:ec:7c:8f:
ba:6f:14:2a:42:7c:ce:f3:af:40:ff:15:c9:f4:13:ea:f2:bb:
34:ab:a1:7c:c7:5a:48:5f:ad:7a:da:cb:df:d4:d5:3e:11:72:
31:16:a0:2a:a1:30:63:90:4c:2b:af:60:3a:d5:25:17:fc:6d:
3d:2a:af:c0:81:65:07:18:d6:4a:85:15:cd:c0:cf:0c:00:56:
ca:7a:ce:a5:e3:86:94:6a:6a:6a:aa:66:a3:72:1a:f8:70:1f:
be:90:55:c1:93:f7:3a:26:3c:32:3d:e7:b6:95:1e:0c:67:54:
b4:58:e9:19:60:bd:96:c1:25:7f:32:c6:5d:ae:d7:ac:8a:2b:
6a:56:8b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:38:39 2025 by rpki-client