Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
File: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft (raw, json)
Hash identifier: OrcJwBXWn39p0Fyi21uuDJDipJxhcKZUiKw06eUIG4U=
Subject key identifier: C6:7A:BE:7B:33:1F:C4:F6:D7:39:12:C8:70:BC:B1:A8:D6:F2:D1:46
Authority key identifier: FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
Certificate issuer: /CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Certificate serial: 0196D2BF8AE4A7A005CF5DC1BBA16E1919CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
Manifest number: C8
Signing time: Thu 15 May 2025 07:01:30 +0000
Manifest this update: Thu 15 May 2025 07:01:30 +0000
Manifest next update: Fri 16 May 2025 07:01:30 +0000
Files and hashes: 1: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl (hash: yaHTR++H2hfDNHb7EmUsCQQhrkiP8oZNLrOXdoR7JcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:bf:8a:e4:a7:a0:05:cf:5d:c1:bb:a1:6e:19:19:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Validity
Not Before: May 15 07:01:30 2025 GMT
Not After : May 16 07:01:30 2025 GMT
Subject: CN=c67abe7b331fc4f6d73912c870bcb1a8d6f2d146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:25:dd:75:59:92:91:97:24:e4:8a:0a:3f:
33:60:94:28:d2:f6:1c:e7:27:25:9e:76:33:40:b4:
82:f0:2b:67:a2:e0:a5:de:65:69:69:d7:c9:26:99:
64:bd:d2:38:65:7b:76:82:ce:e1:42:52:43:0f:3e:
61:79:b1:54:86:e9:4f:97:2a:0a:2a:cb:fb:d0:09:
17:5b:de:f3:bb:0f:a6:bc:de:af:f9:96:93:2f:b1:
90:b8:28:d0:f3:8c:0c:35:ef:db:f0:c2:2a:e7:1a:
ae:87:5c:ac:37:d5:ae:b0:44:3c:24:23:ac:14:8f:
98:61:95:b6:ca:4e:10:bc:ab:b0:ef:f5:af:ee:a7:
b1:21:b4:b8:0e:69:3a:28:83:f2:be:5e:50:d1:63:
98:4d:89:db:fc:69:45:65:b4:20:ab:4c:87:90:3c:
ce:fe:a7:08:46:3a:73:98:7f:3a:5a:83:1f:4f:ee:
28:43:5d:f9:8e:6e:8f:39:5f:46:8d:47:e7:39:87:
18:4f:87:0c:67:d5:e8:80:52:22:6e:61:aa:21:57:
bd:61:d8:b9:f3:77:ba:48:3b:bf:6c:a9:11:d0:59:
b6:aa:28:69:f0:58:1b:52:c4:12:3f:eb:5e:19:af:
17:07:ae:19:01:e2:e4:9e:78:54:44:76:94:3c:8f:
14:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7A:BE:7B:33:1F:C4:F6:D7:39:12:C8:70:BC:B1:A8:D6:F2:D1:46
X509v3 Authority Key Identifier:
keyid:FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9d:9d:73:33:68:13:d9:5c:bf:c7:f9:a5:58:5a:ec:28:85:
7c:44:7f:6d:03:2d:36:14:3f:d2:73:89:b7:fe:b9:76:2d:6f:
77:77:34:71:fd:85:c9:9c:5c:8b:88:7e:16:92:ab:33:3f:ec:
ce:43:ac:1e:db:95:6f:cd:ea:01:54:e0:21:19:4d:7a:fb:cc:
b0:19:98:54:19:48:1e:2b:55:75:0f:aa:a7:fc:8d:bf:d2:72:
8e:84:8a:ac:42:51:91:d6:ed:28:0d:1b:4a:4b:6c:85:d2:c9:
7b:0a:6b:13:27:77:16:57:04:d3:ad:11:5e:68:7c:c5:61:91:
ec:b9:1b:72:8b:a9:b8:5b:98:0b:49:d6:69:9c:a8:6c:73:eb:
92:36:87:dd:66:6a:66:b6:9f:81:c1:93:30:ae:7e:88:c6:3f:
6a:20:fb:0d:7f:0b:d1:c5:2a:f6:9b:75:5d:cb:8b:c2:a8:31:
81:a9:15:07:fc:08:5f:11:53:99:db:11:9b:34:61:bb:29:80:
a2:e8:44:a7:ef:96:be:46:df:be:85:b2:5a:67:33:52:84:41:
bc:72:6f:d3:74:ce:cb:4f:60:0f:ba:8f:73:e9:36:ec:22:fd:
5a:a6:55:d6:29:bb:66:97:0a:f8:00:5e:f7:35:ce:cf:0a:ba:
52:dc:35:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 11:08:04 2025 by rpki-client