Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
File: n98bEcryuCRFMXghJa6TOudpn3Y.mft (raw, json)
Hash identifier: YoAIqyQzbpQxppCfmBlvhPLO4FLWKBZuOJu5aG7KZPQ=
Subject key identifier: FC:10:1E:BC:32:F9:FE:EA:4E:BF:9D:F4:51:A6:54:24:5D:C6:70:CB
Authority key identifier: 9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76
Certificate issuer: /CN=9fdf1b11caf2b8244531782125ae933ae7699f76
Certificate serial: 01958F2A30F4AD2930ECF1E9F21DED876BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
Manifest number: 1465
Signing time: Thu 13 Mar 2025 11:01:01 +0000
Manifest this update: Thu 13 Mar 2025 11:01:01 +0000
Manifest next update: Fri 14 Mar 2025 11:01:01 +0000
Files and hashes: 1: n98bEcryuCRFMXghJa6TOudpn3Y.crl (hash: UYYohwVOVYlp7qC7COzXdFQhAhnB8Fsfj77LjEAXokI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:30:f4:ad:29:30:ec:f1:e9:f2:1d:ed:87:6b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fdf1b11caf2b8244531782125ae933ae7699f76
Validity
Not Before: Mar 13 11:01:01 2025 GMT
Not After : Mar 14 11:01:01 2025 GMT
Subject: CN=fc101ebc32f9feea4ebf9df451a654245dc670cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:b0:9a:70:f6:06:f1:16:b0:15:98:e8:1b:
f7:52:ae:63:94:07:28:48:b3:03:14:86:28:f3:91:
95:4b:8a:92:62:39:b0:ef:a9:e8:e0:15:7e:53:0d:
3d:77:b4:7c:4c:f6:74:57:d5:49:f2:34:4a:d6:c3:
c6:84:5c:de:53:56:58:63:06:56:84:b4:e4:20:fd:
b2:8c:33:48:65:87:3b:3f:21:74:2c:9e:6f:0b:3d:
5f:73:e9:1e:50:fd:dd:aa:2c:a9:c9:86:7d:81:62:
77:0f:fa:c1:6d:9a:14:83:20:f6:5f:06:2b:a2:c0:
8b:cd:e1:8f:b8:ee:e8:f3:04:9e:b4:57:c5:b9:a2:
55:0f:08:ea:af:7b:6b:3e:19:11:28:64:00:4d:50:
41:a2:04:f6:ad:52:d9:f2:51:c6:96:80:98:ee:2d:
50:72:b8:99:52:dc:f3:02:84:88:eb:3c:b7:2d:8c:
69:86:da:73:ec:4a:59:bb:14:91:2a:20:bf:f5:04:
0f:d5:ba:8a:05:fe:4e:98:89:f8:bb:b2:96:4a:c0:
f4:fc:29:f8:ca:43:a2:aa:c8:13:3f:b0:23:58:d3:
ed:e3:76:4d:ca:15:d4:03:40:76:9b:00:9a:72:64:
16:fe:ed:35:a2:86:52:35:4a:25:2a:10:b7:82:b3:
fc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:10:1E:BC:32:F9:FE:EA:4E:BF:9D:F4:51:A6:54:24:5D:C6:70:CB
X509v3 Authority Key Identifier:
keyid:9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a9:d1:ad:26:ef:b5:38:e6:c6:9d:4d:31:27:c4:f5:96:7b:
2c:34:83:6b:c9:17:86:e4:e6:96:a8:2e:67:42:2e:65:f9:49:
00:74:ee:15:6d:e3:3e:b9:a9:be:78:80:50:e4:f7:5b:fb:e9:
fc:be:ec:6c:19:94:bd:51:f1:b6:7f:69:06:52:b1:51:7e:27:
e7:7b:03:84:69:ec:4b:cf:50:13:be:e5:f9:9a:70:15:f0:3a:
05:bd:d5:2c:ba:85:be:bb:30:52:16:85:0b:9c:6b:35:d1:d0:
1f:59:58:d2:9b:a3:3e:75:df:54:10:2b:56:80:92:a2:41:7b:
cc:3f:80:23:73:16:da:ce:20:55:ef:de:0c:4f:43:1b:39:30:
11:91:ba:92:b2:a8:42:6c:f1:a0:a2:b9:43:71:da:97:36:8a:
52:6d:a2:06:4c:7d:a5:b9:07:b9:da:05:52:bb:47:d3:e1:d8:
38:4e:20:c0:e7:9c:ad:70:0b:64:ff:c6:43:1e:eb:d8:b6:08:
83:07:38:eb:96:2c:71:ee:dc:6f:c9:89:67:71:d3:e9:4e:19:
a8:01:fb:c3:dd:ba:05:c2:62:08:8a:14:e7:40:9b:ee:45:cb:
39:40:5e:9e:17:c4:be:ab:71:c0:23:0d:45:1f:c7:c7:cb:6b:
5c:9e:d8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:17 2025 by rpki-client