Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
File: ije4wOFZfNHaZcmgf6wFrNhEzGo.mft (raw, json)
Hash identifier: PGiWPp3NOR+BlEKE0BMoFnSie6YhGHY94ob6H7OUh0c=
Subject key identifier: 20:D3:0D:F7:B6:E6:F2:30:DD:32:01:C3:F6:6B:02:28:CF:54:20:A8
Authority key identifier: 8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
Certificate issuer: /CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Certificate serial: 01960FB2BF6FD2941E0A78783A50CB0D0B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
Manifest number: 0FC6
Signing time: Mon 07 Apr 2025 10:01:34 +0000
Manifest this update: Mon 07 Apr 2025 10:01:34 +0000
Manifest next update: Tue 08 Apr 2025 10:01:34 +0000
Files and hashes: 1: ije4wOFZfNHaZcmgf6wFrNhEzGo.crl (hash: Nwm/32oK+OW7/5kVTM+xNFwPTTEKIv8UKZ8VVR30AcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:b2:bf:6f:d2:94:1e:0a:78:78:3a:50:cb:0d:0b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Validity
Not Before: Apr 7 10:01:34 2025 GMT
Not After : Apr 8 10:01:34 2025 GMT
Subject: CN=20d30df7b6e6f230dd3201c3f66b0228cf5420a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:98:b3:bc:b3:70:b5:b8:19:19:61:4f:f8:13:
f1:a5:99:25:c3:74:21:e8:7d:d9:b8:e6:5e:eb:ed:
3c:1f:b5:32:38:b8:2c:a6:97:0b:09:71:ba:9d:da:
41:d3:24:aa:9f:fe:c9:30:a4:38:f7:71:86:58:a7:
95:dc:8f:f6:57:81:5a:98:9c:76:bf:55:1c:a9:37:
84:06:03:df:b9:4b:8f:26:b0:d9:06:d9:c1:8e:db:
fe:30:d0:47:31:5d:dd:6a:30:eb:44:61:84:98:73:
f8:8f:e5:49:47:35:ec:a6:b1:1c:8e:c1:59:f6:7e:
34:16:1b:f6:96:d9:af:cf:1c:da:92:d5:41:99:1e:
4a:bb:d5:4a:4e:b4:c2:84:f8:5d:cf:87:6d:4c:65:
b0:f9:45:59:91:0a:c8:cf:fd:46:6c:29:c7:14:42:
eb:71:fe:82:a0:23:78:3a:0a:6f:1b:70:6d:10:ae:
b3:3c:8a:c5:b0:24:50:67:d9:a7:da:a6:d7:e2:0a:
07:4b:25:ca:f9:d7:27:2c:36:f3:e2:0a:f8:f4:11:
0f:82:f8:5a:d7:31:fc:0e:f5:77:c9:33:a6:b8:ff:
7b:d4:a2:bb:38:38:e5:72:52:0d:12:fa:53:7e:3b:
c4:4d:d9:39:fe:3d:8b:31:54:34:de:4e:2e:ef:1d:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D3:0D:F7:B6:E6:F2:30:DD:32:01:C3:F6:6B:02:28:CF:54:20:A8
X509v3 Authority Key Identifier:
keyid:8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:75:8e:99:d7:9a:b5:5b:4c:dc:43:2e:ed:a6:cc:f4:07:6b:
ff:dc:ac:90:e5:1d:4b:f0:55:a5:28:f6:ff:30:b0:ce:06:8b:
9e:c6:f3:77:9b:33:98:e8:b3:8d:53:12:69:29:0d:02:9b:7b:
6d:00:4c:06:95:57:8f:8d:88:0a:59:f4:ef:4d:8d:e1:be:84:
b5:40:ab:be:f6:ea:3d:58:eb:85:b4:97:78:f7:cd:6a:f3:04:
1f:62:08:42:a4:dd:6d:c2:b0:c3:c5:25:d4:b4:05:5a:09:2c:
e6:05:44:5b:4d:66:17:09:03:86:ff:3e:86:68:8d:5a:4d:88:
e7:9e:92:8d:01:85:33:34:69:2f:b0:77:6e:3c:87:01:09:4e:
5b:53:2b:b3:3f:63:f1:41:5c:9e:90:d8:4f:1d:9a:a2:b6:66:
19:88:92:f2:95:b0:50:2a:b2:33:66:d9:bb:d6:85:4f:60:a3:
30:bb:5b:64:27:ec:27:d5:ac:ac:a2:c5:b8:66:bf:0b:f1:0f:
34:ec:a0:54:68:63:86:7f:6f:2b:57:14:f3:6c:17:b6:9f:ff:
00:09:9a:20:9b:1d:fa:13:4d:1f:d9:e6:8f:a2:8a:46:8f:fa:
12:4c:74:39:95:a7:31:0d:29:46:dd:6d:e8:03:c0:89:a3:d1:
d4:b3:d0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:55:35 2025 by rpki-client