Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
File: c2MktbTBPXYGw5LDdONbvmSiTlA.mft (raw, json)
Hash identifier: xuBL2U5hvw8W26dRog1tSCKY+vWke8A5cC9bua0Jp4U=
Subject key identifier: 3F:92:4E:3A:A0:8C:47:79:9E:0E:6E:5F:6B:2A:CC:3A:FE:A9:B6:8C
Authority key identifier: 73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
Certificate issuer: /CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Certificate serial: 019653495F3D4E53DEEF7BE7C75632AA49EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 13:00:39 +0000
Manifest this update: Sun 20 Apr 2025 13:00:39 +0000
Manifest next update: Mon 21 Apr 2025 13:00:39 +0000
Files and hashes: 1: c2MktbTBPXYGw5LDdONbvmSiTlA.crl (hash: wjoBvVfqqIRMD8xqq8LPeS6UgLv4qO8BuFuLwQXgXSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:5f:3d:4e:53:de:ef:7b:e7:c7:56:32:aa:49:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Validity
Not Before: Apr 20 13:00:39 2025 GMT
Not After : Apr 21 13:00:39 2025 GMT
Subject: CN=3f924e3aa08c47799e0e6e5f6b2acc3afea9b68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:d1:37:87:cb:62:c4:c8:6c:c0:e0:04:e7:
2b:30:60:25:94:60:86:d9:3a:3c:12:2b:3a:e6:04:
b9:63:bf:c4:c9:ac:bb:82:78:2b:61:15:38:7b:f4:
7d:e4:b3:4c:84:39:d2:b9:67:c0:fa:e9:ec:1d:b2:
1e:aa:73:bf:20:81:e3:ea:28:25:2e:26:a3:86:fa:
15:21:97:e7:c7:f1:9a:c0:5f:b7:87:32:10:6b:47:
0a:9b:4c:df:a2:0b:c8:40:5a:7c:9b:a5:85:f7:a8:
7b:7a:e8:c8:34:39:74:ae:8e:16:c4:bf:26:99:7b:
0c:63:20:a7:16:21:7f:68:97:ed:d8:a5:a9:b8:d2:
5e:5c:0c:ac:30:10:5e:09:c1:55:71:e9:5c:1c:44:
be:b4:13:86:b1:1c:d9:73:11:56:37:6d:11:6c:92:
0d:79:39:86:a7:f5:78:33:48:4d:80:d5:76:dc:80:
a7:3f:e6:2d:58:5c:35:9a:44:3e:2b:b9:82:1d:9f:
4b:57:8d:6b:2e:37:40:26:dc:3d:0b:e3:4c:4f:5e:
c4:1c:fc:03:0d:09:9e:43:55:e7:08:49:84:65:04:
95:55:c4:af:91:4f:70:9a:b3:77:43:39:e8:ed:de:
65:be:8a:6d:ce:4a:30:9b:74:4b:09:04:be:7a:e0:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:92:4E:3A:A0:8C:47:79:9E:0E:6E:5F:6B:2A:CC:3A:FE:A9:B6:8C
X509v3 Authority Key Identifier:
keyid:73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:1a:65:7f:1d:d2:b2:5f:39:f4:82:fa:7b:e7:4e:04:a3:53:
69:96:f3:6e:a7:dd:cd:14:49:78:0d:c8:2b:3b:d5:64:5c:3f:
94:7d:8f:8b:44:c1:f2:87:0d:62:42:5d:d9:64:c1:7f:8a:47:
76:d5:bf:24:c5:65:e4:90:cf:5a:8d:81:a9:9f:30:fe:70:c6:
7a:b9:d8:60:25:1b:2b:27:99:1a:b2:b2:b3:c4:19:e2:e4:22:
e9:ff:2e:2d:51:1f:e4:08:6a:fc:95:1d:8b:b4:28:04:a1:a7:
7a:e8:45:02:db:29:9b:ca:4c:03:d2:0f:57:85:51:d6:17:bb:
ac:f2:ef:b3:f5:65:92:a6:99:1e:b6:3a:53:fd:ad:10:14:2f:
b2:fe:b9:85:f7:7c:4d:0e:22:a6:03:29:66:2c:cb:d6:18:6a:
bd:cb:d3:20:b2:5d:9b:f0:60:b4:bc:b5:a7:9f:69:17:4d:e0:
59:4a:73:8d:fc:44:04:26:bc:b3:34:97:c1:ea:f5:3a:90:99:
a5:15:ba:48:9a:fc:00:3c:1f:4e:85:b8:c7:ad:9b:db:c9:0c:
e2:de:c4:6b:7f:a8:8c:fb:c8:55:39:af:2e:3c:70:2a:69:f1:
9b:3a:41:b8:5f:60:7b:9c:ec:e7:72:72:14:ee:da:79:8a:e1:
1c:8f:a0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:15:20 2025 by rpki-client