Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
File: RFc3PhpobWtZ7oXcN4mdBlMThuU.mft (raw, json)
Hash identifier: RfCmsHuQtvebHFSsdhDb+R7Ns5Kc1Xq4a73J0RMneMY=
Subject key identifier: DC:F8:B4:9C:AA:BA:49:38:CD:DC:6D:34:9A:75:E5:89:0D:03:B4:CC
Authority key identifier: 44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
Certificate issuer: /CN=4457373e1a686d6b59ee85dc37899d06531386e5
Certificate serial: 01958F611EB6D4B3B026B9B1D1C23833E35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
Manifest number: 0217
Signing time: Thu 13 Mar 2025 12:01:01 +0000
Manifest this update: Thu 13 Mar 2025 12:01:01 +0000
Manifest next update: Fri 14 Mar 2025 12:01:01 +0000
Files and hashes: 1: RFc3PhpobWtZ7oXcN4mdBlMThuU.crl (hash: 20AagJ7Hlbwd0GhEmAL8f/+QIsxtRBI1pwTWZgutL4c=)
2: XMirD3qG50TrikmGR0PujWf3jjs.roa (hash: iR/AZzWdddK7a5E0N2BfP3yz4LyY5Uji67zQAihWnBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:61:1e:b6:d4:b3:b0:26:b9:b1:d1:c2:38:33:e3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4457373e1a686d6b59ee85dc37899d06531386e5
Validity
Not Before: Mar 13 12:01:01 2025 GMT
Not After : Mar 14 12:01:01 2025 GMT
Subject: CN=dcf8b49caaba4938cddc6d349a75e5890d03b4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:eb:ed:cb:6d:b3:70:a2:33:07:a7:94:53:bb:
21:6c:8d:fc:02:b3:4a:27:b1:64:41:b3:45:7e:bd:
1a:d1:24:fe:c5:62:ef:e3:e4:83:6d:78:da:9d:bf:
27:5b:45:23:c3:59:71:84:1f:5a:d7:ed:54:d6:6e:
42:3d:c9:da:7f:62:1f:fa:af:84:4a:53:56:26:c7:
4a:96:e4:28:8c:96:96:ac:14:f9:9e:17:58:68:ca:
a7:2a:4e:0f:59:5b:71:31:5c:70:55:33:43:46:36:
2f:f8:58:37:05:af:4d:95:75:2a:4f:31:5e:b6:34:
7f:a5:da:dc:c3:4d:b5:9b:0e:92:63:35:6e:92:88:
f0:c0:fc:c7:d1:fd:5f:dc:fd:cf:e6:ec:16:aa:76:
98:2f:eb:e6:82:f7:11:b2:ac:45:54:b6:96:5d:86:
82:97:6e:4a:68:68:1e:f1:3f:fc:91:9b:57:7b:b2:
7f:68:ee:cc:0b:6e:4a:13:59:ef:a0:84:b8:4e:07:
d0:04:ea:5c:64:54:19:93:81:fc:a7:36:91:72:48:
e3:5a:87:01:37:66:64:54:43:ff:3a:6b:20:85:f7:
1a:08:1e:0f:b9:11:d2:dd:df:07:1d:ab:c4:81:56:
b0:97:24:dc:23:58:68:84:b4:63:dd:99:f7:af:79:
43:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F8:B4:9C:AA:BA:49:38:CD:DC:6D:34:9A:75:E5:89:0D:03:B4:CC
X509v3 Authority Key Identifier:
keyid:44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:81:a7:4f:74:bd:1d:c6:10:63:d2:72:9c:36:69:15:9c:ea:
61:7c:e6:cd:2e:03:ef:c5:08:06:cc:bf:f7:36:be:b3:a4:a6:
e5:35:f7:d6:1a:4c:17:20:88:2d:c5:63:89:84:f8:e0:d7:fe:
1c:b4:4e:f7:be:e0:97:f2:47:59:84:c7:6b:2e:49:cd:e1:9d:
0c:c2:cf:d6:88:04:aa:58:da:6c:db:f8:91:bf:66:bd:68:78:
de:89:c1:87:50:9c:26:3f:11:86:2e:4c:a7:c5:cb:34:98:7f:
28:ab:d8:b0:3f:8e:06:67:de:61:65:02:f5:a3:99:fc:ac:6d:
81:22:d1:fb:5e:bb:d3:bf:3e:ca:0f:3f:af:10:dd:f1:0a:24:
d9:76:d5:2b:50:c8:62:59:ad:98:72:94:5f:53:85:fc:98:e0:
b2:2e:d2:68:26:30:95:ba:5d:22:44:a3:e9:e7:43:d4:bd:af:
59:79:7c:72:2e:c2:95:dd:66:9f:57:44:2f:3c:7d:e7:58:e3:
47:8e:35:83:11:47:41:2a:00:39:5b:4d:db:4e:b2:ba:96:85:
d6:d0:04:e1:09:05:f6:30:ee:a4:19:f2:4b:f4:71:c5:71:e0:
f9:38:d2:38:0f:de:c2:9b:82:56:64:c5:fc:e1:b2:8b:cf:cb:
b1:2b:f7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:30:48 2025 by rpki-client