Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
File: 4fhh7IT8VurKm4xjbnkj5vktzOo.mft (raw, json)
Hash identifier: id2L0kYwyoDp5MJmMYHawU98Bl2T2qTsg1FLH8OcOEA=
Subject key identifier: F9:04:CA:D8:CD:6C:6E:55:4B:1C:38:C4:22:63:A8:CD:A7:FD:6E:FF
Authority key identifier: E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
Certificate issuer: /CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Certificate serial: 0196BF6F71AB5A5D10CA01B988C40E2BA94D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 13:01:13 +0000
Manifest this update: Sun 11 May 2025 13:01:13 +0000
Manifest next update: Mon 12 May 2025 13:01:13 +0000
Files and hashes: 1: 4fhh7IT8VurKm4xjbnkj5vktzOo.crl (hash: fojbpO1CJZWT7UkJtRwuzcacmDDmnbZCs8iFSKzxUNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:71:ab:5a:5d:10:ca:01:b9:88:c4:0e:2b:a9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Validity
Not Before: May 11 13:01:13 2025 GMT
Not After : May 12 13:01:13 2025 GMT
Subject: CN=f904cad8cd6c6e554b1c38c42263a8cda7fd6eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:06:db:94:a7:2c:ee:cd:ff:ff:c8:03:10:
89:ea:e2:84:1b:a5:42:f6:fc:70:fd:df:6c:3e:56:
8f:03:de:89:23:d9:a0:9b:a0:6e:70:d4:b3:02:79:
6a:08:4b:5d:15:6f:53:a7:7e:12:6c:b5:c0:17:0e:
e6:ff:51:fb:93:ae:3b:b3:f9:cb:42:22:9c:68:a5:
03:ab:dc:bc:5f:da:e1:54:30:99:da:5f:dc:a6:8a:
4c:dd:31:44:90:34:c7:16:7a:0d:c4:12:bb:f9:30:
a9:68:aa:f0:bd:1c:74:e2:ca:3a:17:01:82:81:10:
b0:c8:24:cc:1b:b0:a2:c2:b0:71:98:52:8c:9b:a0:
3e:4c:6d:6a:b8:40:27:8d:7d:39:06:50:ea:6b:ae:
79:12:d9:15:36:5a:d4:e0:00:31:ac:b0:3e:5a:f4:
f3:c8:7c:42:47:42:ec:06:99:e1:b3:05:56:50:c6:
19:89:1e:4e:d4:5c:1d:75:6a:f0:8b:5c:2f:8a:a8:
6c:6e:33:23:ff:9e:c1:0a:cd:34:ed:b9:80:b3:32:
a1:1a:29:1e:93:5e:67:67:83:b5:c5:15:8c:fe:0a:
45:8f:68:cf:d0:c7:61:b1:af:c9:e5:6b:5e:2a:90:
74:df:21:c1:26:88:cb:13:59:ac:9b:78:46:cf:37:
db:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:04:CA:D8:CD:6C:6E:55:4B:1C:38:C4:22:63:A8:CD:A7:FD:6E:FF
X509v3 Authority Key Identifier:
keyid:E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:19:a8:b1:c2:9d:c2:a3:06:14:7d:cc:bc:ab:df:26:79:01:
77:e0:44:ee:54:06:a1:83:c5:4a:0d:63:87:c5:34:b9:2a:14:
d6:81:7a:b5:30:42:ab:d2:75:30:d4:c1:db:cf:47:2e:1b:02:
3b:69:bb:5d:4a:80:88:0a:ca:a3:ae:5d:bb:bf:9f:7a:fd:9e:
fa:c2:9d:b6:94:b7:b8:d0:81:a6:97:01:56:08:8c:23:61:97:
88:ec:00:09:6d:fe:cb:26:10:2c:50:12:92:2b:8e:ea:3f:1c:
30:ad:74:5e:60:12:40:e5:e2:ea:b0:71:64:c0:18:ca:99:d0:
29:60:87:1c:4b:b7:56:6f:5a:35:74:be:c0:1d:70:ef:e5:e0:
ed:98:fb:19:9b:98:96:b4:72:ee:61:30:2e:21:36:f6:d2:67:
1f:13:40:bc:66:89:83:1e:aa:da:a9:97:34:31:bf:9f:02:0b:
c4:cc:6b:4b:36:84:f7:66:47:10:91:d0:9c:82:22:ad:cb:43:
67:9b:92:77:84:60:92:d8:52:04:cc:4c:61:ef:b3:4b:e7:29:
3d:7c:fb:b3:b7:85:c6:4e:4f:50:e3:24:90:60:74:ec:18:6c:
5a:fd:5e:86:cf:ec:de:78:b8:55:cb:57:c4:d1:69:92:80:de:
3e:68:6b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:07:21 2025 by rpki-client