Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
File: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json)
Hash identifier: ENnFhR3HU5Gw459FKUzCSRsrpaptWoFEX17CQDbIxXo=
Subject key identifier: 11:98:FA:C0:FF:2E:C8:53:40:49:63:3B:AD:7A:81:18:1B:54:5B:62
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Certificate issuer: /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial: 01964E2374E90C50F7E279C8E685B5EC60EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
Manifest number: 0705
Signing time: Sat 19 Apr 2025 13:01:08 +0000
Manifest this update: Sat 19 Apr 2025 13:01:08 +0000
Manifest next update: Sun 20 Apr 2025 13:01:08 +0000
Files and hashes: 1: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: N5x6uVlm3lEFsTbU1ckeOrcvhTCEl6taiFLaXEf0JaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:74:e9:0c:50:f7:e2:79:c8:e6:85:b5:ec:60:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Validity
Not Before: Apr 19 13:01:08 2025 GMT
Not After : Apr 20 13:01:08 2025 GMT
Subject: CN=1198fac0ff2ec8534049633bad7a81181b545b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e3:8a:2e:c7:6a:8a:c9:d8:81:eb:11:b3:c3:
ce:bd:5e:d1:bc:c5:ce:a5:e0:96:fd:0a:f0:49:09:
7e:21:bd:73:cb:78:aa:b0:73:45:7a:58:37:71:5f:
3d:ce:3d:87:b4:ac:7d:33:b5:4d:e6:1b:c5:df:6b:
09:28:95:0b:20:6d:35:46:59:1a:f0:5f:1b:e4:e7:
b7:55:22:e1:2f:55:5b:e7:87:9f:1f:e2:c4:46:4f:
53:0e:ba:f8:8b:70:2d:bc:19:e5:e9:0e:85:36:94:
a0:53:98:74:60:24:bf:eb:1f:ff:98:80:d5:96:51:
c7:2d:04:9e:97:e2:0e:a4:48:b3:41:c4:d4:d6:c8:
40:c3:a6:a5:ba:79:9d:83:98:b7:97:bd:3e:dd:5d:
f8:e5:0e:6e:03:82:3c:17:f9:19:5f:dc:84:eb:c6:
54:ce:5e:fe:08:36:8c:45:2f:99:1f:0d:bb:df:c4:
86:fe:a8:78:91:ad:a8:e5:33:05:8e:5e:80:5a:d7:
6f:af:47:0a:5a:e5:bd:6a:56:77:f7:d0:62:b8:5d:
fc:72:46:98:f1:3c:ee:ef:24:26:e0:7b:54:d4:d7:
22:74:a5:c3:23:db:fc:6a:2c:0f:dc:98:9b:30:51:
4d:8e:76:9b:0b:29:57:b0:ed:71:5b:2a:de:c5:29:
68:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:98:FA:C0:FF:2E:C8:53:40:49:63:3B:AD:7A:81:18:1B:54:5B:62
X509v3 Authority Key Identifier:
keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:26:6a:fe:d4:58:a0:a9:ed:87:3a:03:9e:bf:84:86:4a:a5:
52:99:91:fa:cc:fe:d0:f6:91:b3:d1:cf:db:e0:d4:da:ca:a4:
56:aa:6d:d0:3c:4c:8c:ae:9c:39:1c:0e:f5:94:70:15:24:e3:
ea:2b:70:08:a6:85:2d:30:6a:93:92:9a:19:5b:61:9a:ce:15:
47:fd:93:81:10:d7:7b:b7:af:97:02:89:03:f1:01:a0:f0:06:
25:7a:af:d7:61:81:3c:3b:14:19:67:92:11:49:ac:29:cc:d4:
31:18:c9:c1:ee:0d:c5:35:a3:9d:3e:c9:b2:8e:fc:8f:49:42:
32:bd:25:e5:4c:43:4a:4b:44:a6:96:2d:21:55:f4:b9:02:86:
27:d7:a2:89:2d:a8:d4:46:ea:c0:00:da:88:f1:e6:b8:f5:95:
2c:4c:1f:71:14:e3:4f:31:96:a3:ef:47:e4:f8:b0:49:1b:1d:
75:84:5e:5e:b7:2d:fb:ea:5e:4b:d0:2e:b1:6e:4d:7a:d5:a2:
d3:84:3e:17:55:47:6c:f4:7b:09:52:7a:a1:b8:b8:d6:34:67:
aa:2a:1f:49:17:c1:45:3c:59:bc:dc:1a:d1:2e:53:1b:8f:30:
38:8c:a4:3a:b0:dc:19:36:72:04:be:64:d3:76:f9:ff:cb:37:
82:5b:e8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:08:56 2025 by rpki-client