Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
File: fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json)
Hash identifier: P0GbtHeuQW/z34N/8CRlsmiRYAQqRpH3uu07VQVtg54=
Subject key identifier: 57:82:F6:E5:88:43:11:93:82:7D:CD:4E:3D:3C:4A:7E:8D:13:83:05
Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Certificate issuer: /CN=7cf97782d6f202a70183671aa630c73aba33307e
Certificate serial: 01963E7972EAF3DE518CC88C5CB7EB670A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
Manifest number: 14EF
Signing time: Wed 16 Apr 2025 12:01:08 +0000
Manifest this update: Wed 16 Apr 2025 12:01:08 +0000
Manifest next update: Thu 17 Apr 2025 12:01:08 +0000
Files and hashes: 1: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: ZzzhdoP5jZN3VmLVB9UoxDvnGVn1jVithSoN/cY0SVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:79:72:ea:f3:de:51:8c:c8:8c:5c:b7:eb:67:0a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e
Validity
Not Before: Apr 16 12:01:08 2025 GMT
Not After : Apr 17 12:01:08 2025 GMT
Subject: CN=5782f6e588431193827dcd4e3d3c4a7e8d138305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c3:67:c1:4e:28:eb:97:b7:33:e5:49:95:2e:
bb:d5:9f:3f:f8:f5:2a:96:06:46:47:d3:d0:a2:fd:
ec:fe:07:57:b2:89:53:45:a1:6f:22:a4:a5:20:4f:
60:83:82:32:9d:1b:f6:f7:b4:9d:c6:27:9e:e7:4f:
61:6e:07:6a:58:f8:12:59:6a:a0:42:ea:2b:63:ea:
1a:41:64:d0:2d:71:d7:9f:74:dd:4f:88:1c:30:6c:
7a:8a:d5:c1:99:11:da:56:bc:41:7e:fb:af:e8:0c:
5e:6d:80:28:be:3e:5d:45:51:07:b6:9b:d0:99:01:
39:c7:9f:35:3a:61:3f:a3:5f:6c:10:be:73:82:75:
22:bb:23:4a:2a:11:c0:55:39:55:70:1f:c0:77:0c:
08:fe:ba:fd:21:e0:ee:06:49:d3:e1:e3:cf:dd:26:
da:f0:19:91:ac:35:ff:4f:13:fd:04:37:09:55:ba:
d4:2c:95:87:48:3f:3d:03:7f:f5:ea:60:f4:73:00:
69:7d:ed:49:eb:d1:7b:f7:d5:c6:10:5d:37:35:16:
84:9f:40:f8:ab:c3:4f:bd:d9:c0:9e:a0:f3:20:11:
00:cd:8a:ff:89:22:8b:ee:9a:d5:b3:08:23:da:6b:
2b:fd:b2:b3:07:78:ec:b2:45:a5:43:0c:ed:38:6f:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:82:F6:E5:88:43:11:93:82:7D:CD:4E:3D:3C:4A:7E:8D:13:83:05
X509v3 Authority Key Identifier:
keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:35:22:a4:9a:56:0c:9c:ba:43:56:05:26:d4:c5:46:93:86:
f3:50:b5:8e:f4:1e:f3:a8:18:8e:17:23:26:f5:ab:46:07:55:
9a:96:bc:64:a6:e7:20:44:2e:e6:9a:4d:64:e0:a5:2c:e6:ec:
47:92:fc:71:ae:11:d4:3c:8f:ef:85:a4:57:e8:52:0c:3a:b6:
30:e3:93:78:02:b6:ac:ea:b1:92:a4:93:6a:ce:c0:30:39:31:
e6:ec:82:b9:89:96:47:97:f7:c2:68:c7:cb:2d:a3:fa:b1:eb:
8c:4e:79:3c:ef:92:e0:a7:bf:b2:70:70:a5:77:cb:91:15:a2:
7d:d7:19:6c:5b:66:ed:7b:dd:9c:34:f0:04:ee:11:d5:82:fa:
b3:7e:a1:12:3e:8f:bc:99:b2:2e:1a:80:a2:15:a1:3a:83:9f:
e4:8b:1f:00:43:6f:04:bd:61:60:0a:13:0b:72:22:2b:9e:16:
21:45:5e:55:0c:00:9e:50:17:d7:a5:5c:4d:07:e9:71:4d:5e:
38:e0:2e:99:88:b4:79:c6:a0:ce:2c:61:d0:48:99:5a:ff:0a:
98:35:eb:4d:35:c9:5b:2b:7b:9e:ed:98:8e:d4:78:53:52:a4:
df:ba:57:ee:95:59:8d:5a:4e:cb:3d:b4:44:77:59:c2:b3:2b:
28:89:b7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:57:11 2025 by rpki-client