Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
File: Fhw-D9hiGXEWBK524iPPC3MM37c.mft (raw, json)
Hash identifier: VHGrwz6AY8H8DeEjr/M4GtRvj90YNKC9GXggApstn0w=
Subject key identifier: 4C:DC:83:EC:59:4C:2F:15:8F:62:2D:DC:1D:AF:42:FF:6F:83:27:E0
Authority key identifier: 16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
Certificate issuer: /CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Certificate serial: 019652A4DA77EC223362BB390367D436F135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
Manifest number: 10CC
Signing time: Sun 20 Apr 2025 10:00:57 +0000
Manifest this update: Sun 20 Apr 2025 10:00:57 +0000
Manifest next update: Mon 21 Apr 2025 10:00:57 +0000
Files and hashes: 1: Fhw-D9hiGXEWBK524iPPC3MM37c.crl (hash: ptMJ3l4jIghnLUNV4nlbGzCV/wRF11eeEWW7idKqMpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:da:77:ec:22:33:62:bb:39:03:67:d4:36:f1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Validity
Not Before: Apr 20 10:00:57 2025 GMT
Not After : Apr 21 10:00:57 2025 GMT
Subject: CN=4cdc83ec594c2f158f622ddc1daf42ff6f8327e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:af:34:b1:0b:67:6b:26:7b:d8:1f:55:c9:
63:29:a3:fa:2c:72:ff:04:25:30:14:7a:f7:9e:09:
a7:0a:70:bc:65:dd:29:e8:57:eb:f1:fb:fb:89:05:
a0:7f:9c:b1:9a:6d:4a:b1:2d:9d:d6:51:09:74:b2:
ff:41:2a:cc:46:aa:84:d9:b5:82:3a:e7:ce:61:3b:
b7:09:1c:c8:1e:59:0f:17:73:c4:af:60:de:bd:1a:
c3:75:1d:23:53:1f:af:44:26:0e:8e:5d:b8:95:9f:
9b:f8:4d:9f:15:aa:ce:d4:af:ce:e7:e8:81:17:f0:
ed:48:d9:9b:c1:64:36:32:e9:48:32:4f:29:2f:0f:
71:5a:39:47:70:5c:ab:69:8b:fe:96:99:cf:a2:93:
bc:0d:91:9f:d8:cd:84:b2:11:8f:ab:86:f6:d0:41:
76:2b:d1:5a:1e:19:6f:a4:78:46:c3:69:87:24:32:
24:02:44:c6:8e:b5:71:0d:9d:ad:e3:67:db:a5:9c:
b5:95:98:38:6a:15:b2:09:82:ba:86:db:ec:3d:89:
85:fd:c4:65:13:f8:7b:86:e3:43:a1:04:60:10:bc:
1e:ef:cb:5b:b9:07:e1:1d:f2:82:7e:cc:b1:5a:be:
f2:ac:94:45:3b:4f:79:5f:1c:1f:02:42:77:7e:0c:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DC:83:EC:59:4C:2F:15:8F:62:2D:DC:1D:AF:42:FF:6F:83:27:E0
X509v3 Authority Key Identifier:
keyid:16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:80:b5:21:26:95:3c:ab:f9:20:80:55:85:b9:00:2a:cd:bf:
3d:d0:7c:16:61:60:b1:ea:37:89:c4:ef:55:4e:a1:12:c9:7e:
4e:c1:ba:20:e3:04:e5:40:97:e7:ed:72:ab:cd:fa:25:0a:5c:
fa:e4:c4:9e:e5:db:cb:c5:08:63:07:6e:fa:58:7d:5d:77:41:
d7:60:95:6c:5b:32:4d:d4:f4:e3:02:29:e7:ee:79:9e:89:a4:
85:06:5c:45:6e:72:7a:44:5f:6e:eb:cd:d2:dd:ac:76:c2:9c:
b7:cf:d7:ed:c5:9e:3f:b4:82:f6:78:87:fe:16:c3:92:ce:81:
42:1e:ab:aa:27:9a:ed:0c:d5:ed:8b:ab:80:a9:30:3f:f3:fe:
3d:f9:0e:1c:67:25:6a:5c:7e:33:02:12:a6:26:96:4e:20:63:
25:ac:d7:d1:24:f8:8f:27:f9:1f:28:c2:82:c3:e3:a2:ff:ce:
78:d3:30:19:82:90:bc:e1:98:09:19:3f:bb:dc:9b:9b:6b:c0:
b1:dc:94:3d:32:b5:23:a8:68:00:66:a2:dc:b3:6b:62:10:a2:
56:85:0f:95:04:de:7d:79:ce:7c:3d:aa:20:09:98:15:85:fe:
2f:6e:72:d2:56:36:31:64:e7:5e:7a:d8:ca:18:42:68:44:c4:
39:6d:d1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:24 2025 by rpki-client