Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
File: fHvscgXfiNB3CG9Kj7WuznXLtmE.mft (raw, json)
Hash identifier: BL2s46oK5kLvaJbm6O0tWsGW6URVfrgjhYXPguB4/wc=
Subject key identifier: B9:98:51:DF:B8:E8:A9:BA:D0:3C:3A:08:3F:8B:51:1D:33:21:25:43
Authority key identifier: 7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
Certificate issuer: /CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Certificate serial: 019656134CDF185ACD9580CC797D793E1ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
Manifest number: 1353
Signing time: Mon 21 Apr 2025 02:00:27 +0000
Manifest this update: Mon 21 Apr 2025 02:00:27 +0000
Manifest next update: Tue 22 Apr 2025 02:00:27 +0000
Files and hashes: 1: fHvscgXfiNB3CG9Kj7WuznXLtmE.crl (hash: w9nwc51at0WIQWjOqOyCNMhqOalRIxQDPuobg5hWoTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:4c:df:18:5a:cd:95:80:cc:79:7d:79:3e:1a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Validity
Not Before: Apr 21 02:00:27 2025 GMT
Not After : Apr 22 02:00:27 2025 GMT
Subject: CN=b99851dfb8e8a9bad03c3a083f8b511d33212543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:03:41:93:b1:a3:10:5e:4c:57:49:f7:31:f1:
be:4f:d4:d7:26:a9:f5:db:1e:f3:3d:02:9c:34:16:
b6:13:3f:c3:79:53:9a:b8:7e:a8:40:24:c1:d9:0f:
e2:fc:67:1b:74:31:5f:a8:aa:37:e6:f1:cd:6a:24:
c8:73:8c:2a:4e:9b:3d:09:b7:f6:fc:f0:e1:a9:66:
40:cc:11:13:a6:08:e0:37:f9:fc:81:3f:90:b8:30:
95:0d:23:b1:7d:1c:8b:39:f0:d4:67:92:cc:c2:46:
58:b7:8b:8d:2f:96:b5:21:40:97:e2:1e:18:af:c7:
84:5a:ca:6d:8f:c5:e0:d8:0b:cd:49:59:99:90:65:
51:ff:4c:22:5a:30:09:4b:ba:6d:16:c3:af:aa:59:
44:09:86:48:cf:d9:87:21:90:a7:74:e8:db:5e:fa:
d0:5f:73:1b:33:41:04:a6:8c:db:5b:30:2e:5f:62:
1f:bc:e7:1d:21:59:1b:67:18:a0:71:28:12:50:b6:
96:61:ef:6e:fa:22:c7:74:9c:b4:b0:38:9f:d0:bb:
98:cf:4d:a8:60:19:c1:9c:42:dd:e6:01:17:5d:ee:
5f:1f:aa:88:3e:7f:b5:6a:b7:40:6b:28:fa:af:d2:
9a:9d:71:fd:e0:03:98:f2:a0:f2:8a:01:dc:a7:ca:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:98:51:DF:B8:E8:A9:BA:D0:3C:3A:08:3F:8B:51:1D:33:21:25:43
X509v3 Authority Key Identifier:
keyid:7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1f:c2:e2:f0:68:b2:d6:d8:c8:14:10:0b:8d:95:d5:9e:20:
17:dd:27:7d:51:16:64:44:9b:86:95:94:50:b5:bf:48:b3:e6:
37:9a:d8:f1:8b:60:45:db:36:f9:e1:0e:59:c6:b1:ae:db:b2:
2d:3f:d7:ae:0b:d9:a6:b5:d2:0c:8b:a8:74:d7:51:b7:6e:d1:
0c:50:4d:ee:4b:d2:9f:7d:f8:82:1f:54:db:0f:5a:c3:23:99:
ab:d2:15:aa:bb:c2:c3:b2:ce:9e:3a:0f:0f:5a:c4:4c:27:69:
51:6b:28:a5:0f:10:a1:2e:79:c8:20:51:9d:ba:8a:65:de:a7:
bb:90:64:7a:ab:54:56:62:44:d1:4f:68:8f:57:96:f8:32:e3:
e0:f8:99:bc:42:9c:8a:6c:ec:40:a3:60:80:ca:9d:9d:cd:dd:
c0:f7:d5:b6:91:65:e3:33:e1:24:36:65:bb:2b:91:2b:51:49:
b7:5c:96:8f:85:14:69:37:46:ec:92:67:3c:04:68:4c:69:cb:
7b:64:f4:29:20:85:b6:ea:00:ff:b2:a3:0a:42:b5:22:66:1d:
ec:bd:1f:43:17:ba:1b:ac:89:e2:8a:ec:98:1d:36:f5:f3:de:
8e:07:f8:a4:e9:de:ed:68:ed:35:2c:d0:9a:ec:fb:b9:c5:f4:
39:6b:96:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:34:24 2025 by rpki-client