Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
File: g_j9dJOi_gViIttB7Wkwg7UOzPs.mft (raw, json)
Hash identifier: HCYMUu803VdGEgEQMz4zoT1NPYNFM9dqr1rnu6sIIsA=
Subject key identifier: 91:34:58:A8:78:DA:62:E3:20:51:09:E2:89:FB:95:F7:76:1E:1A:74
Authority key identifier: 83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
Certificate issuer: /CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Certificate serial: 01958B4DB09AB788A72B8F89A814732B3702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
Manifest number: 0641
Signing time: Wed 12 Mar 2025 17:01:19 +0000
Manifest this update: Wed 12 Mar 2025 17:01:19 +0000
Manifest next update: Thu 13 Mar 2025 17:01:19 +0000
Files and hashes: 1: g_j9dJOi_gViIttB7Wkwg7UOzPs.crl (hash: 8CfLBOzTNbBu2F6dL5jF9O0g21xjQog0RxpljoefQD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:b0:9a:b7:88:a7:2b:8f:89:a8:14:73:2b:37:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Validity
Not Before: Mar 12 17:01:19 2025 GMT
Not After : Mar 13 17:01:19 2025 GMT
Subject: CN=913458a878da62e3205109e289fb95f7761e1a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:e7:ad:7f:10:e9:18:f1:20:8a:5a:79:a6:
a8:eb:90:a2:71:ba:5b:1f:8e:39:aa:2e:7b:32:01:
a4:94:e7:aa:13:1c:a2:86:60:7e:a5:47:d7:96:0e:
62:35:9d:e0:8d:72:2f:ce:d7:94:f5:ba:83:c6:f2:
0f:c7:05:f3:34:36:0a:d0:27:ba:16:93:2c:f9:e3:
5b:1c:f8:e3:b7:11:a0:5d:1c:b9:51:fe:d9:26:c0:
be:08:7c:00:a8:8c:c8:15:bd:d1:37:3d:77:04:c7:
29:f3:05:1a:a9:ef:12:8c:bc:02:90:6c:6d:cc:4a:
33:94:a5:db:7f:ba:d8:3f:8a:72:33:92:9b:39:84:
6d:67:98:e6:f0:1a:22:3c:84:ba:09:fd:de:24:e4:
cb:1b:f6:32:a1:c6:f4:a3:99:87:89:ee:7c:71:11:
94:95:85:2b:70:48:ea:7d:d8:a0:95:35:d0:a5:93:
a3:4c:a8:eb:fa:6f:2b:11:7b:c5:35:98:ea:2d:99:
73:18:1f:fb:1c:07:18:ea:cf:f0:dc:a7:9f:a1:d5:
af:02:e2:89:7b:fd:06:e1:76:df:9a:18:3c:1c:0d:
cb:ad:23:ac:79:88:f4:75:8a:a3:84:ed:06:93:c7:
4a:7b:1b:f2:cc:90:c9:06:03:46:ba:df:d5:7b:4e:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:34:58:A8:78:DA:62:E3:20:51:09:E2:89:FB:95:F7:76:1E:1A:74
X509v3 Authority Key Identifier:
keyid:83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:57:cb:9c:b8:7e:b6:1a:48:ad:66:ef:38:0a:f6:ec:f9:27:
11:cd:bc:d7:0e:00:8f:07:9d:ef:b0:67:5a:91:3a:89:c2:5e:
b2:41:a9:3c:d3:12:aa:9f:09:4a:2b:6c:53:0a:d3:68:20:2b:
01:8a:0d:a8:10:f3:81:ed:0e:e1:bc:a6:63:c3:8c:21:b7:39:
d7:98:a5:c2:92:ab:42:5e:0f:cf:87:f9:a6:91:31:d9:db:51:
e6:eb:d5:cc:65:da:05:32:43:ea:8d:6c:28:0b:63:df:9c:af:
e6:8a:07:d1:c7:54:35:b0:18:31:5e:2d:72:69:f7:11:ee:f3:
45:dd:67:75:91:0b:61:2b:1e:eb:aa:25:ba:6e:ee:ff:81:a9:
c1:ca:66:fd:cc:d8:59:ca:29:34:3f:78:72:b8:9c:3a:95:3a:
84:5a:d5:7a:fc:df:a0:0f:35:69:9f:fb:64:7c:01:d6:89:55:
6a:1a:b9:8d:8b:f8:e6:7c:b3:6f:ba:2b:d8:99:16:64:56:bc:
8a:84:42:72:05:d2:1f:ed:a9:d2:ed:e7:4a:c6:23:16:8d:e7:
f9:9f:25:bb:18:75:14:47:db:2c:b5:bb:21:d4:a6:0d:cd:82:
68:d8:a1:92:44:2d:6e:40:bc:f8:c0:0a:36:6e:fe:f5:ea:43:
5f:e3:dd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:45 2025 by rpki-client