Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
File: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft (raw, json)
Hash identifier: auVnbektu1zOQttbvccH/X4Jp1E/E6uLfqLmAh19WTM=
Subject key identifier: CF:10:6D:61:48:15:A9:60:A8:B5:23:BF:AF:75:3D:49:B3:12:56:6A
Authority key identifier: F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
Certificate issuer: /CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Certificate serial: 0196C0142ABBD90BEBE3D918FE3FA2791FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
Manifest number: 0607
Signing time: Sun 11 May 2025 16:01:09 +0000
Manifest this update: Sun 11 May 2025 16:01:09 +0000
Manifest next update: Mon 12 May 2025 16:01:09 +0000
Files and hashes: 1: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl (hash: u3nT4ePAyDMyYkfMxEL53wlv6j9YLwr1oAsntsao3WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:14:2a:bb:d9:0b:eb:e3:d9:18:fe:3f:a2:79:1f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Validity
Not Before: May 11 16:01:09 2025 GMT
Not After : May 12 16:01:09 2025 GMT
Subject: CN=cf106d614815a960a8b523bfaf753d49b312566a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f0:f4:b8:f8:b9:db:2c:8e:34:f7:18:a4:08:
e0:c3:c3:75:f1:d2:41:61:31:94:19:d0:57:14:0a:
ad:0e:7a:ce:c9:e6:64:56:dd:cb:a3:b1:7e:bc:5b:
78:4f:3b:bb:7f:d0:d7:5c:3b:f1:b6:02:4e:a5:33:
8c:03:0f:04:10:e3:90:84:e7:21:ff:16:7a:34:1d:
8d:3a:ac:50:58:99:48:58:df:2c:3b:f4:67:d0:59:
8e:28:b7:44:cb:46:d0:ba:41:3e:77:7d:5f:d0:66:
1d:2f:a9:a4:68:f0:7f:0e:6e:c3:fb:1c:25:4c:a5:
32:1d:74:22:64:4e:0b:e6:01:a7:d5:e8:a1:82:33:
ae:95:cc:63:0a:e5:af:46:ad:2c:e9:9e:24:68:09:
6f:bd:7e:d2:d0:a7:cf:79:89:71:ea:b9:2c:75:f5:
f2:e2:a7:e8:e8:af:b0:89:70:48:21:2c:b9:65:1d:
b1:81:2f:94:17:cb:21:22:43:8b:57:a5:43:da:0c:
dd:29:b9:48:5c:81:32:df:ad:c3:6d:d4:1b:d9:35:
71:db:20:da:b1:0e:bd:db:1f:4d:f8:fc:0b:9a:74:
ea:2c:4a:fd:6f:83:ea:a3:7d:de:45:73:91:73:43:
a9:0d:fe:6c:01:a5:50:f6:2a:48:00:a4:b0:68:bd:
47:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:10:6D:61:48:15:A9:60:A8:B5:23:BF:AF:75:3D:49:B3:12:56:6A
X509v3 Authority Key Identifier:
keyid:F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4d:49:c0:9c:0e:be:65:a9:25:f1:95:ab:92:82:da:f1:7b:
f9:28:10:c0:3b:68:cb:80:8e:bb:7f:14:48:c6:0a:aa:cf:b3:
88:88:d5:56:d0:3a:69:8d:ed:e6:af:db:a3:c9:dd:2b:dc:e2:
3d:65:5c:7f:e6:80:f2:2c:7d:45:02:f4:fb:f6:f1:d4:1d:c2:
c9:33:e1:81:94:21:50:55:59:62:cf:96:34:54:2e:6d:81:27:
a0:c3:9a:14:24:58:9a:bb:16:99:82:29:b5:3c:b4:bd:fe:1a:
de:c9:c8:c9:4c:9c:ac:ca:7a:61:93:24:47:56:7f:60:16:97:
c2:c4:d8:26:99:47:d1:21:07:e1:98:82:9b:85:76:68:11:54:
0d:86:ab:c8:39:36:96:0e:89:df:ef:b5:07:ef:c6:7e:5f:1a:
53:b0:17:ae:42:80:8b:84:51:d6:36:61:4e:be:58:36:c3:9a:
db:5e:ad:8e:3a:2f:50:5b:68:a7:5e:c8:f9:17:a3:52:d6:87:
5c:58:9f:2d:ea:d9:f1:6f:95:c3:fd:97:d6:b6:de:e8:7c:4a:
9f:76:9b:3c:8e:6c:93:2f:23:ad:6e:04:f6:cd:c9:df:16:10:
af:17:28:f2:6b:67:6a:e4:db:53:7b:3a:ad:f2:da:80:03:03:
b4:ea:7f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:29:32 2025 by rpki-client