Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
File: fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft (raw, json)
Hash identifier: VLXh0/3uhcxPfkdik6cqZDL+oAHn42j7W70KYh6S5sQ=
Subject key identifier: 92:9A:23:D0:37:EF:5A:EC:04:80:63:5E:35:4D:34:F6:86:11:25:F7
Authority key identifier: 7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
Certificate issuer: /CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Certificate serial: 0196839126360459E3AC0F37983A91ED7819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
Manifest number: 0848
Signing time: Tue 29 Apr 2025 22:00:49 +0000
Manifest this update: Tue 29 Apr 2025 22:00:49 +0000
Manifest next update: Wed 30 Apr 2025 22:00:49 +0000
Files and hashes: 1: fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl (hash: ydL4EjF77AGfYUPsxNKWxsw7ZxBqo5rVtd7a9vkqen0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:26:36:04:59:e3:ac:0f:37:98:3a:91:ed:78:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Validity
Not Before: Apr 29 22:00:49 2025 GMT
Not After : Apr 30 22:00:49 2025 GMT
Subject: CN=929a23d037ef5aec0480635e354d34f6861125f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:51:c4:7a:e0:e7:bd:4e:70:89:a4:af:5f:
f9:43:53:2f:26:ef:75:09:0c:33:db:79:06:2b:48:
62:b1:51:9a:75:69:cd:c2:15:db:57:f2:c6:54:d4:
25:77:9e:4f:03:76:6c:17:5d:1d:41:aa:03:be:99:
3c:42:75:ff:11:89:bf:02:1b:e1:04:0a:45:dd:6f:
af:b5:5a:fc:93:4e:e8:b4:9c:62:e9:67:b8:42:54:
cd:4d:8e:3a:dc:5a:74:eb:11:c6:cc:7a:b5:ac:09:
b8:c7:fb:39:7a:ca:49:7e:a1:2a:ed:03:a9:c4:32:
15:2a:6c:c0:53:ed:02:00:ad:46:0b:34:e1:f8:8e:
cf:77:72:41:ab:2b:dc:fa:3f:6f:dd:62:80:3e:0c:
68:d2:68:d6:83:1b:74:91:a0:24:13:b8:00:ac:40:
0b:73:63:72:4d:cb:9a:7a:ee:a3:ce:bc:35:3e:77:
a7:68:02:04:f2:64:5d:46:3b:93:e0:1d:c6:01:cf:
dd:39:55:48:a2:e2:c8:56:b0:e6:61:e4:a1:00:90:
f4:9e:82:a4:36:5d:e0:08:cd:0a:e8:ee:92:c5:87:
05:a2:d8:76:2a:2f:46:e4:bd:fd:5d:1e:a4:ce:04:
e1:2f:0f:f3:4f:b7:1d:3d:6e:94:56:2c:fd:82:5a:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9A:23:D0:37:EF:5A:EC:04:80:63:5E:35:4D:34:F6:86:11:25:F7
X509v3 Authority Key Identifier:
keyid:7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:05:18:88:fb:46:0d:51:65:f8:e1:13:e4:ca:ff:b8:79:55:
09:1a:8b:f5:10:7f:87:a6:f7:7f:90:01:a7:48:b2:ed:c2:df:
29:58:2f:7d:c2:39:01:2d:b0:d2:04:7c:26:6a:26:be:99:7f:
20:9b:e7:73:f4:10:42:48:da:48:2e:d3:1e:e6:56:9c:cf:5b:
32:2a:e2:24:0e:de:d2:79:19:0d:c9:0d:00:b1:51:2a:f4:49:
c0:38:8a:a1:b0:54:30:02:a2:04:52:67:da:e0:b1:ea:aa:69:
c2:50:56:bf:4d:75:ff:46:aa:79:a1:63:78:5a:c9:ae:0d:a4:
53:f4:4b:2c:eb:ce:92:1d:46:bc:99:f9:3b:0b:a4:48:25:06:
a5:67:94:e9:37:6c:b9:40:ee:af:fd:64:de:b2:e8:78:06:3c:
aa:9e:8d:9d:76:de:d3:c8:eb:47:42:06:97:f6:fc:df:60:3e:
31:38:41:61:8e:b8:42:68:51:f1:a1:83:5d:83:52:1b:86:28:
58:1d:de:63:15:61:de:39:d9:5f:0f:a5:6b:e4:42:f8:4d:91:
81:18:f7:06:a2:d2:0c:58:38:bd:fd:d4:88:59:00:96:7f:7f:
31:b7:d3:07:b0:4e:d2:e4:5a:2e:a5:80:6c:ee:d8:c6:03:eb:
e0:3b:ed:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:39:39 2025 by rpki-client