
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
File: fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft (raw, json)
Hash identifier: 0s2O9Z8paSXouz2RUe8UebwbIZmZzlUwgAT2bNuHb5w=
Subject key identifier: 6A:8B:E7:EB:0F:29:A4:75:21:A3:38:B1:35:76:93:E8:2A:F0:C4:38
Authority key identifier: 7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
Certificate issuer: /CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Certificate serial: 01969CAB92ED491CA4A3BA5350FD57DD9FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
Manifest number: 0855
Signing time: Sun 04 May 2025 19:00:12 +0000
Manifest this update: Sun 04 May 2025 19:00:12 +0000
Manifest next update: Mon 05 May 2025 19:00:12 +0000
Files and hashes: 1: fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl (hash: nHRAFL/3+7ScZ/O2uXEYRUOxtuTsnGv1z+yuXkzpIkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 19:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ab:92:ed:49:1c:a4:a3:ba:53:50:fd:57:dd:9f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Validity
Not Before: May 4 19:00:12 2025 GMT
Not After : May 5 19:00:12 2025 GMT
Subject: CN=6a8be7eb0f29a47521a338b1357693e82af0c438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:50:3d:49:6f:dd:18:ed:f2:2a:20:df:b5:
73:87:08:a5:fb:18:d0:95:f9:22:fb:db:e0:90:17:
82:a2:7a:ea:39:8c:e3:fa:83:c9:67:31:70:f8:76:
89:3a:ae:99:94:e5:ff:dd:40:68:6a:2a:3b:06:21:
cd:6d:cd:79:e2:22:8d:ef:59:da:63:3f:ed:ed:47:
16:db:ed:6b:70:8e:c6:8d:04:a0:e0:8e:32:81:d7:
83:02:6a:37:c3:42:a0:c1:a4:a3:7e:1a:9c:e9:72:
c8:a3:3c:df:42:25:46:d9:ae:90:f3:fc:95:ae:56:
d4:8c:e3:83:e5:28:81:b4:a5:20:65:e8:a9:2a:a0:
f2:98:30:f5:33:d9:0b:c6:1d:9b:4b:72:06:9c:c5:
a0:f0:69:0c:dd:d8:9d:1a:95:ef:fc:0b:80:c4:b9:
59:f8:bd:70:e6:bb:60:85:3b:8e:3b:a2:d1:8c:8d:
15:ab:11:0d:c3:e3:13:6a:3f:96:f5:4b:be:a8:6f:
bf:9f:66:ad:39:e3:5b:b6:63:cd:f2:f6:d5:1c:b8:
12:88:95:04:63:63:bc:81:95:35:fb:10:ed:ab:42:
55:eb:20:44:f8:66:11:1a:97:6f:b0:0b:90:71:8a:
b5:34:cd:3b:cb:f9:94:6c:79:9c:9a:17:12:80:89:
f7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8B:E7:EB:0F:29:A4:75:21:A3:38:B1:35:76:93:E8:2A:F0:C4:38
X509v3 Authority Key Identifier:
keyid:7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2a:83:b0:a7:74:76:c6:69:cd:45:4c:13:92:8c:dc:62:79:
93:9e:57:cf:6b:08:38:fd:d9:32:26:4b:5b:7b:35:11:c6:65:
b9:97:a4:c0:c6:6c:7f:3b:1c:fe:ce:e5:1e:9a:49:b7:95:93:
c6:32:dc:bd:1e:f1:eb:f2:c2:fa:ff:4f:84:3c:19:a2:a9:4d:
2c:77:a2:b8:1c:03:40:7e:86:da:8a:59:63:ac:da:46:7d:31:
71:a4:b2:d5:82:9f:7d:94:c5:65:77:86:8f:bc:67:f7:73:b1:
0b:1b:24:2c:90:f1:78:8e:58:77:15:ae:c1:25:e0:52:33:1e:
84:62:e3:96:9d:a8:cb:84:3e:12:ee:9d:b2:b0:48:24:21:0b:
68:1c:58:68:03:80:96:a2:08:ca:13:68:61:c4:66:a5:87:1b:
e7:d2:96:b4:20:b2:07:b2:92:41:bc:99:8d:14:11:2f:df:b6:
33:f1:fa:10:e4:d6:0f:c1:36:b9:2c:e1:52:ef:31:6b:4d:c8:
11:d4:d0:5f:c8:ec:08:0c:ac:29:a4:48:6a:13:27:4e:06:0b:
eb:29:ab:8c:c2:b6:0b:bc:de:55:fc:54:b9:0e:78:da:91:4e:
79:85:28:ee:6a:70:8a:44:1a:2c:09:72:96:f5:ad:e7:65:ae:
aa:a3:97:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:36:41 2025 by rpki-client