Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
File: 1-G_kJ8_22FppXshlKKSDDLQIqBg.mft (raw, json)
Hash identifier: QoH5G/mtZ+gLkcGH3tmcfTtD68YneB+hPiaqNJMsss0=
Subject key identifier: 90:79:5F:C2:1B:69:EF:FD:32:FC:70:71:7F:E1:61:59:B1:12:50:04
Authority key identifier: F8:6F:E4:27:CF:F6:D8:5A:69:5E:C8:65:28:A4:83:0C:B4:08:A8:18
Certificate issuer: /CN=f86fe427cff6d85a695ec86528a4830cb408a818
Certificate serial: 01963CF81FF00A22D4E827409427C10185B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
Manifest number: 105D
Signing time: Wed 16 Apr 2025 05:00:16 +0000
Manifest this update: Wed 16 Apr 2025 05:00:16 +0000
Manifest next update: Thu 17 Apr 2025 05:00:16 +0000
Files and hashes: 1: 1-G_kJ8_22FppXshlKKSDDLQIqBg.crl (hash: gIhjzaDRO0cxXaeJvkYC7TamcrfIVhyYGZXwmajcngc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:f8:1f:f0:0a:22:d4:e8:27:40:94:27:c1:01:85:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f86fe427cff6d85a695ec86528a4830cb408a818
Validity
Not Before: Apr 16 05:00:16 2025 GMT
Not After : Apr 17 05:00:16 2025 GMT
Subject: CN=90795fc21b69effd32fc70717fe16159b1125004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:e5:5d:1d:7c:a9:dd:10:68:71:2f:67:68:
15:b6:0d:5b:31:b0:27:54:28:9f:e4:42:45:58:39:
12:19:ae:30:ed:12:f1:ec:f1:a2:91:0d:89:78:46:
66:ae:e2:f8:ec:9f:6c:65:a5:ee:f0:70:86:70:04:
e1:13:aa:f9:59:7c:39:08:20:89:f0:2a:fe:c0:79:
67:62:73:08:c0:06:46:ba:6b:fb:04:98:00:d4:96:
cd:01:c6:25:00:dd:7e:d3:9f:4f:be:75:9a:b2:a7:
a3:a7:e7:81:c6:a9:bb:d6:c8:d6:bf:52:f5:a2:72:
5f:98:ae:e0:1c:50:07:b1:0a:ee:03:6e:4f:84:8b:
b1:46:f3:5d:28:b9:61:54:e2:16:42:11:22:da:5d:
c1:c6:fa:f0:be:df:8d:fe:11:68:36:f9:ac:ad:9d:
0d:4c:b0:4c:b9:bb:15:25:0d:71:6f:52:ee:63:38:
22:4b:81:76:cd:45:89:d2:85:f7:d4:0f:97:b4:0b:
7f:a4:88:1a:0b:c6:36:0c:d3:80:54:c1:65:cb:3e:
ee:2a:0c:49:ab:d5:ed:f6:5c:5e:86:be:b3:0a:1f:
0b:83:f1:7d:e6:30:93:75:b7:2c:26:81:05:52:8c:
63:e6:2f:78:60:7a:1c:43:82:08:c2:90:5d:49:6c:
83:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:79:5F:C2:1B:69:EF:FD:32:FC:70:71:7F:E1:61:59:B1:12:50:04
X509v3 Authority Key Identifier:
keyid:F8:6F:E4:27:CF:F6:D8:5A:69:5E:C8:65:28:A4:83:0C:B4:08:A8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:95:f0:48:df:af:60:48:81:8f:7c:54:89:ef:51:a5:08:b0:
62:1f:6b:7b:58:be:00:69:52:be:66:bb:b0:20:2f:db:e0:82:
f6:3a:7e:e0:22:e6:82:10:db:72:01:53:2b:1a:87:65:2e:b5:
63:ca:d9:4e:5d:fc:8d:79:fe:40:06:68:c6:74:5d:83:3d:7c:
f9:7a:92:9e:b8:27:bf:33:c8:d9:d2:21:92:fa:fa:6c:de:14:
e3:89:49:68:05:d0:a6:01:76:3c:b3:84:db:eb:83:22:91:36:
01:97:83:44:66:b7:80:70:44:5c:d9:48:b5:d2:d6:5f:37:9f:
92:82:fe:3b:67:42:a5:66:ea:5b:34:e2:2c:7c:4c:4b:7f:42:
e4:9e:eb:71:a1:a5:e6:d7:d2:43:63:0b:81:c0:2b:8b:90:f9:
4e:16:e1:51:72:46:96:2d:3c:92:b3:60:70:ac:12:a9:95:aa:
f5:e8:2c:3a:d1:af:8b:44:ba:81:a4:bd:5a:0a:f1:00:7f:29:
8c:a4:11:9a:73:b2:8c:cb:c9:17:f0:2e:15:ff:5a:81:ec:ce:
62:0e:1b:4a:1a:37:aa:ff:fb:ef:09:ae:9c:ae:43:8a:09:66:
26:8d:26:b6:86:84:42:d2:cd:82:02:5e:ab:b9:56:80:ca:5e:
06:47:f6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:28:18 2025 by rpki-client