Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
File: 4fhh7IT8VurKm4xjbnkj5vktzOo.mft (raw, json)
Hash identifier: KHgBQnGhHtq2lrHM8dQpNq+IBlOSGy/RC9m4rBKFLao=
Subject key identifier: 51:8E:EE:4C:64:C4:65:79:0F:09:78:56:C9:48:C5:12:C3:A5:A9:78
Authority key identifier: E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
Certificate issuer: /CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Certificate serial: 019657270D39D6030EA93507CB7FE6A3A27C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 07:01:39 +0000
Manifest this update: Mon 21 Apr 2025 07:01:39 +0000
Manifest next update: Tue 22 Apr 2025 07:01:39 +0000
Files and hashes: 1: 4fhh7IT8VurKm4xjbnkj5vktzOo.crl (hash: 5MqrXFgvnSACOPbO85DqFtd8A6sj0jY9tbYgCk/sPFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:27:0d:39:d6:03:0e:a9:35:07:cb:7f:e6:a3:a2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Validity
Not Before: Apr 21 07:01:39 2025 GMT
Not After : Apr 22 07:01:39 2025 GMT
Subject: CN=518eee4c64c465790f097856c948c512c3a5a978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:52:01:46:59:16:a6:95:8b:73:b4:9a:8e:1e:
a5:a0:42:4c:32:fa:97:17:f8:d4:b6:ed:35:40:9c:
f2:77:08:ca:8c:1d:bf:1f:ee:19:89:08:07:48:ea:
eb:6f:56:45:da:9d:91:33:06:87:52:e6:6b:6e:66:
57:7d:d0:1d:90:ba:07:b6:09:86:7a:9b:1b:81:fb:
0a:55:45:62:a2:54:ae:fa:63:54:ec:71:ba:be:86:
a5:7a:6c:3b:ca:b6:7a:fe:16:7b:88:b7:a9:67:c4:
5e:61:da:06:95:23:04:ff:bc:a0:64:02:3c:06:38:
51:42:5c:a3:7c:f7:47:e3:f1:f5:7a:1c:ad:81:48:
bc:8f:72:fc:ee:25:d8:95:3a:45:8f:b5:37:36:59:
c6:3f:90:d2:bc:cd:4c:c3:89:b5:55:f1:06:9c:d8:
c7:8d:45:df:f7:cb:85:7e:26:53:65:f6:3c:e7:4c:
64:67:d7:f2:f6:46:37:29:6f:b3:64:bc:0d:20:d4:
87:1b:b9:2f:66:e6:02:f3:33:2c:e5:ef:35:e2:12:
17:6e:a8:72:52:f4:f6:4a:8d:66:84:81:cd:6c:8b:
41:48:c1:13:ec:a1:0d:db:0e:28:fa:75:85:4c:70:
36:3e:91:ae:d7:aa:b5:8d:07:a0:2f:d9:ab:dc:88:
82:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8E:EE:4C:64:C4:65:79:0F:09:78:56:C9:48:C5:12:C3:A5:A9:78
X509v3 Authority Key Identifier:
keyid:E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:fa:bb:0a:bd:d2:78:8b:c9:99:fc:50:62:b6:10:57:0d:99:
c6:68:19:d3:61:63:a4:61:8f:34:ae:3a:25:7a:d5:02:c6:f7:
56:07:59:10:db:72:d6:15:b2:fb:9d:97:d7:70:24:e0:5e:ed:
07:e5:ff:89:61:c5:91:b7:bb:d9:85:8f:e7:de:0b:51:b3:9c:
97:dc:13:65:05:ef:96:bf:a7:7b:f6:86:04:52:44:cb:60:9f:
88:27:2e:f6:21:d1:78:c4:af:39:9a:e6:cb:c5:91:a9:78:9c:
69:a1:52:8e:28:74:de:7d:54:f6:b5:52:04:a8:3c:f0:4c:85:
ce:03:73:94:48:c7:67:e5:43:9c:0f:8e:37:be:bc:c3:bc:1a:
93:17:6c:c2:78:10:f9:7e:36:6a:18:22:fb:cd:10:ba:74:43:
bf:dd:09:5a:9c:cb:e7:54:f4:cf:45:8d:f9:fc:65:cf:e4:da:
a3:ea:80:45:65:03:22:13:54:62:55:45:a3:86:0a:4f:50:10:
a6:44:64:82:22:fb:d6:60:ca:2c:9c:e2:38:8d:18:e2:72:bb:
1c:23:fc:76:13:56:8f:9d:0b:04:61:43:d2:35:9e:97:74:5e:
06:13:a5:c9:12:73:57:52:9a:7c:57:ac:9a:b1:1a:a8:e1:71:
89:1c:32:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:34:31 2025 by rpki-client