Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
File: _CwEhVQA8w2Ng82ayoVo_H9KAYg.mft (raw, json)
Hash identifier: 15Zm9L7CtaSE4Zw9XcCs3o25PnFOimeTAYnFXk/sNcM=
Subject key identifier: 67:58:8F:EC:3C:CF:95:23:02:8D:0E:25:04:18:D2:9E:B2:67:FE:00
Authority key identifier: FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88
Certificate issuer: /CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
Certificate serial: 019579103BC497EA4063791DED72D058FFE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
Manifest number: 118C
Signing time: Sun 09 Mar 2025 04:01:01 +0000
Manifest this update: Sun 09 Mar 2025 04:01:01 +0000
Manifest next update: Mon 10 Mar 2025 04:01:01 +0000
Files and hashes: 1: _CwEhVQA8w2Ng82ayoVo_H9KAYg.crl (hash: 0LQUWtvdZFwNyUPMaZF1xKNr6b2cldEEPI6L90Wys64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:10:3b:c4:97:ea:40:63:79:1d:ed:72:d0:58:ff:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
Validity
Not Before: Mar 9 04:01:01 2025 GMT
Not After : Mar 10 04:01:01 2025 GMT
Subject: CN=67588fec3ccf9523028d0e250418d29eb267fe00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:f4:1c:86:ba:ea:67:89:7e:95:52:46:f0:
64:b9:21:88:84:d6:8b:af:ec:a2:f9:bc:5b:3f:0b:
a8:75:c1:e6:ce:9b:5f:ee:f9:ba:ee:b9:c8:2e:24:
37:14:69:0f:a2:ff:96:e8:43:6a:45:19:00:8b:4a:
c8:97:7f:e2:49:35:76:3b:34:30:6b:ef:ed:2e:67:
99:77:82:11:2b:d1:0d:23:de:78:69:c8:4e:b2:cc:
59:31:94:0e:fd:b2:fb:3d:1e:cf:3e:84:73:b3:df:
33:f6:3b:6a:39:8b:2b:b3:fc:a9:1b:b0:39:dc:6f:
8e:50:62:8d:93:cb:5e:5d:f8:f6:e4:ac:f5:7f:fe:
b3:af:56:8d:1c:09:66:0b:b8:d7:dd:d2:b0:cf:44:
d1:6a:05:65:f3:44:b5:c6:88:5a:6d:cd:2c:ee:5a:
e6:78:18:bc:c5:a6:33:df:7a:94:28:41:bb:09:1d:
14:02:7b:e6:34:b6:4d:bb:e4:b5:81:e2:af:ed:2a:
7f:4d:0d:d1:64:da:6b:7b:01:2d:68:d5:2c:d9:41:
1d:92:04:d1:95:39:bc:3e:04:cf:aa:d0:db:e5:cf:
58:8c:b7:f4:bc:3b:21:83:b8:18:35:76:da:aa:69:
a3:72:3d:2e:81:17:fc:57:68:66:23:c3:4f:54:f8:
b6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:58:8F:EC:3C:CF:95:23:02:8D:0E:25:04:18:D2:9E:B2:67:FE:00
X509v3 Authority Key Identifier:
keyid:FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:4b:80:e9:6e:04:fc:2b:34:1c:b6:d1:b6:94:07:88:39:0d:
00:dc:41:38:ac:70:f1:ac:56:77:4c:45:a1:b5:90:e0:37:2b:
e5:93:4a:ad:05:b7:cd:cf:ce:da:c4:4c:9f:10:e5:99:61:c6:
20:a8:7d:8d:ae:5d:07:3e:53:bf:93:fe:7a:2e:bb:43:5e:e9:
b0:a8:e7:19:ab:79:fe:79:8c:30:bd:4e:4f:d7:17:77:bd:19:
37:04:74:d0:73:3c:04:93:94:06:79:3b:11:06:13:b5:eb:7d:
b0:c6:82:d8:1e:19:e7:c5:5d:5f:67:af:dd:d0:30:6f:5c:39:
41:45:90:c1:c9:d3:e8:3a:12:4e:36:09:21:30:48:a3:e6:15:
07:18:fe:eb:2e:62:9f:7e:c4:b8:47:a1:b4:76:40:4e:26:33:
93:e0:89:bf:2e:0e:a7:be:70:98:40:36:36:9a:36:69:6f:1b:
d2:79:5b:61:19:c9:3f:70:c3:df:ab:2f:a1:79:ec:f0:87:47:
5d:84:9a:58:7a:49:b5:65:a6:78:21:0e:7d:80:bf:ba:2a:cb:
ca:19:ac:ad:bb:b0:05:5a:50:d2:a6:ea:30:2b:e6:5f:29:72:
e6:03:b6:a8:7e:5a:52:eb:9e:41:cc:00:d9:50:59:53:89:0e:
7f:ce:34:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:47:09 2025 by rpki-client