Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
File: D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft (raw, json)
Hash identifier: dUptyJH8Jh77Nt8FYc4pSnCbuOoNL9yCGSIJnRYDqqU=
Subject key identifier: 4B:0E:59:17:38:D2:7F:CB:4B:1A:4C:3C:41:80:97:39:64:86:35:E1
Authority key identifier: 0F:B7:F1:FD:87:68:E2:11:63:54:2A:FC:F5:5A:83:C6:98:02:15:A3
Certificate issuer: /CN=0fb7f1fd8768e21163542afcf55a83c6980215a3
Certificate serial: 0196108E18AF05300BEFF862715A90C76B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
Manifest number: 0635
Signing time: Mon 07 Apr 2025 14:01:09 +0000
Manifest this update: Mon 07 Apr 2025 14:01:09 +0000
Manifest next update: Tue 08 Apr 2025 14:01:09 +0000
Files and hashes: 1: D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl (hash: oslX78Tg8BhzEUwwgGOEX/ap9I1qlPOrl9ChtdfxCjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:8e:18:af:05:30:0b:ef:f8:62:71:5a:90:c7:6b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fb7f1fd8768e21163542afcf55a83c6980215a3
Validity
Not Before: Apr 7 14:01:09 2025 GMT
Not After : Apr 8 14:01:09 2025 GMT
Subject: CN=4b0e591738d27fcb4b1a4c3c41809739648635e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d0:f2:b6:0f:64:19:1b:1c:a5:15:28:8f:bf:
60:08:2a:3d:b8:33:b7:2f:8c:ae:ee:c0:ef:cf:72:
14:42:20:86:94:93:ee:47:01:ff:11:79:dd:24:2a:
be:55:63:10:3e:c8:97:59:39:bc:a2:11:8b:90:2a:
51:f8:25:f2:37:cf:68:22:c6:fd:1a:3f:49:9c:70:
d6:44:50:c0:25:8a:36:86:6a:e8:42:fd:32:a5:d4:
6e:20:20:c3:63:76:3f:22:94:38:11:94:04:e2:1e:
46:fd:ec:6b:30:7b:d5:ee:79:55:a6:c9:c8:da:30:
73:e6:34:72:e9:d9:4d:6a:18:e3:87:68:d4:d6:f5:
85:2c:77:2f:a0:4d:3a:97:b6:e9:a5:03:79:99:61:
6b:b1:e4:cf:a6:4e:ab:6a:79:72:db:0d:ca:e1:be:
a0:1a:64:ec:83:9e:9c:a7:2d:3c:1e:14:34:f9:cd:
1d:76:c8:c1:53:67:84:01:fc:c7:c0:d9:9e:a4:20:
85:c3:75:19:19:96:30:9e:b7:93:72:67:b2:1a:82:
af:66:ad:29:73:37:a5:79:a2:2c:03:87:2a:d5:e6:
ca:d6:93:f1:76:30:65:b1:45:9f:33:45:a5:45:b2:
7f:05:d4:5f:1b:f7:b7:7f:9c:5c:e0:79:d0:41:3f:
91:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0E:59:17:38:D2:7F:CB:4B:1A:4C:3C:41:80:97:39:64:86:35:E1
X509v3 Authority Key Identifier:
keyid:0F:B7:F1:FD:87:68:E2:11:63:54:2A:FC:F5:5A:83:C6:98:02:15:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:90:c6:48:e9:1a:f7:9d:44:89:de:53:87:73:ed:7d:e2:e4:
a5:3d:e0:6d:3d:d3:ed:cd:4e:be:26:91:fe:50:13:42:e4:a7:
69:2d:2b:c3:32:b6:09:50:dc:7c:61:78:22:a4:99:60:3e:5b:
b5:3a:24:dd:a0:04:db:e6:e7:67:2d:3b:83:f3:b1:66:00:9e:
6d:94:ae:bf:39:d5:7e:d4:af:42:6b:3f:5c:26:1f:7f:66:57:
e7:bb:87:b6:ba:74:3d:2e:dd:14:0a:fa:bf:c4:1e:bc:ed:47:
3d:7b:4e:e6:9c:a6:77:20:ac:3e:bc:c9:ae:0e:74:dd:18:09:
3f:2d:95:dd:27:88:5a:86:0a:04:90:58:3c:7d:2c:36:bc:dd:
a6:a3:a0:75:ec:23:03:de:9d:1f:58:8e:a0:e4:31:06:07:d6:
7d:9d:bc:62:f9:47:80:3b:ef:2f:91:15:f8:a2:25:30:d5:2e:
a5:55:dc:d2:7b:40:97:60:b4:e7:57:65:4c:29:f8:4c:44:1c:
44:7a:b8:44:06:85:b8:a8:b0:fe:c0:32:bd:c9:05:76:da:6d:
cb:d3:0b:2a:ac:e5:9b:86:11:fb:1b:05:20:53:c4:95:0b:eb:
7a:bd:33:f5:72:fe:fe:32:54:10:53:fb:4f:8f:eb:0d:36:1b:
d5:7a:8a:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYQjhivBTAL7/hicVqQx2tsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYjdmMWZkODc2OGUyMTE2MzU0MmFmY2Y1NWE4M2M2OTgw
MjE1YTMwHhcNMjUwNDA3MTQwMTA5WhcNMjUwNDA4MTQwMTA5WjAzMTEwLwYDVQQD
Eyg0YjBlNTkxNzM4ZDI3ZmNiNGIxYTRjM2M0MTgwOTczOTY0ODYzNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitDytg9kGRscpRUoj79gCCo9uDO3
L4yu7sDvz3IUQiCGlJPuRwH/EXndJCq+VWMQPsiXWTm8ohGLkCpR+CXyN89oIsb9
Gj9JnHDWRFDAJYo2hmroQv0ypdRuICDDY3Y/IpQ4EZQE4h5G/exrMHvV7nlVpsnI
2jBz5jRy6dlNahjjh2jU1vWFLHcvoE06l7bppQN5mWFrseTPpk6ranly2w3K4b6g
GmTsg56cpy08HhQ0+c0ddsjBU2eEAfzHwNmepCCFw3UZGZYwnreTcmeyGoKvZq0p
czeleaIsA4cq1ebK1pPxdjBlsUWfM0WlRbJ/BdRfG/e3f5xc4HnQQT+RAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsOWRc40n/LSxpMPEGAlzlkhjXhMB8GA1UdIwQY
MBaAFA+38f2HaOIRY1Qq/PVag8aYAhWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDdmeF9ZZG80aEZqVkNyODlWcUR4cGdDRmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9lN2M4ZDAtNzQ5Yi00NTJkLWJmZjAt
YTBlMjhkY2ZmZmM3LzEvRDdmeF9ZZG80aEZqVkNyODlWcUR4cGdDRmFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9lN2M4ZDAtNzQ5Yi00NTJkLWJmZjAtYTBlMjhkY2ZmZmM3
LzEvRDdmeF9ZZG80aEZqVkNyODlWcUR4cGdDRmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpDGSOka
951Eid5Th3PtfeLkpT3gbT3T7c1OviaR/lATQuSnaS0rwzK2CVDcfGF4IqSZYD5b
tTok3aAE2+bnZy07g/OxZgCebZSuvznVftSvQms/XCYff2ZX57uHtrp0PS7dFAr6
v8QevO1HPXtO5pymdyCsPrzJrg503RgJPy2V3SeIWoYKBJBYPH0sNrzdpqOgdewj
A96dH1iOoOQxBgfWfZ28YvlHgDvvL5EV+KIlMNUupVXc0ntAl2C051dlTCn4TEQc
RHq4RAaFuKiw/sAyvckFdtpty9MLKqzlm4YR+xsFIFPElQvrer0z9XL+/jJUEFP7
T4/rDTYb1XqKRg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:06 2025 by rpki-client