Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.mft
File: _m-zjWufNfVcZIPDeGmR__jVJ0I.mft (raw, json)
Hash identifier: t4cEmVzpRhlYPaLRdZeAdUNeYOS9PAKyo63ql4OKEFw=
Subject key identifier: 38:BF:A7:6B:12:48:FC:E6:D1:E4:F3:78:86:7C:F1:30:37:0C:13:45
Authority key identifier: FE:6F:B3:8D:6B:9F:35:F5:5C:64:83:C3:78:69:91:FF:F8:D5:27:42
Certificate issuer: /CN=fe6fb38d6b9f35f55c6483c3786991fff8d52742
Certificate serial: 019677FAFD454E30E1A7405E61AE5B589E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m-zjWufNfVcZIPDeGmR__jVJ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.mft
Manifest number: 0C70
Signing time: Sun 27 Apr 2025 16:00:59 +0000
Manifest this update: Sun 27 Apr 2025 16:00:59 +0000
Manifest next update: Mon 28 Apr 2025 16:00:59 +0000
Files and hashes: 1: _m-zjWufNfVcZIPDeGmR__jVJ0I.crl (hash: B3rKgl8999TRyCoLgaE7/HphrnbMyfhunYuHHdqnsFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_m-zjWufNfVcZIPDeGmR__jVJ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:fd:45:4e:30:e1:a7:40:5e:61:ae:5b:58:9e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6fb38d6b9f35f55c6483c3786991fff8d52742
Validity
Not Before: Apr 27 16:00:59 2025 GMT
Not After : Apr 28 16:00:59 2025 GMT
Subject: CN=38bfa76b1248fce6d1e4f378867cf130370c1345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:cb:25:47:25:66:8b:b7:8e:8b:c7:c4:56:
8f:ca:98:9c:79:dc:9e:fa:a8:b6:4d:78:c3:a1:10:
59:f6:24:b8:b5:df:f5:ff:8e:9c:6f:5a:28:f7:29:
3e:a9:d5:9c:4f:3a:61:15:92:7f:6c:3e:ea:e3:5f:
44:5d:73:4c:f2:d5:4d:cf:db:cf:5c:94:5d:ed:53:
a2:2f:51:cc:16:5b:e7:39:92:98:d6:40:ba:cb:ed:
03:10:ab:61:73:dd:fa:45:58:21:69:04:3c:e0:da:
3c:7e:a6:86:1d:ab:78:14:fc:1c:77:61:81:bd:11:
f6:b1:45:14:23:bc:68:4a:1b:b5:0a:9c:66:a6:b0:
8e:fd:6c:07:9c:84:ed:08:59:b7:28:92:29:19:59:
04:a6:39:d5:ab:c2:44:da:4a:3c:38:c6:0b:b4:9f:
0e:45:b7:cf:fc:99:1e:50:e3:a3:3a:4a:b5:36:be:
c7:d2:9f:6f:91:a3:ab:fa:10:eb:bd:fe:c5:f6:7b:
d8:29:b8:e3:6e:ec:f8:f9:55:35:b6:58:93:90:dc:
67:4f:81:8b:dd:78:85:f6:f1:45:32:11:85:9d:b3:
d0:58:dc:71:1d:87:b1:2c:14:71:4c:fb:ac:fd:c3:
fe:6a:52:3b:e1:7a:46:6e:d5:47:eb:32:1d:45:f5:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BF:A7:6B:12:48:FC:E6:D1:E4:F3:78:86:7C:F1:30:37:0C:13:45
X509v3 Authority Key Identifier:
keyid:FE:6F:B3:8D:6B:9F:35:F5:5C:64:83:C3:78:69:91:FF:F8:D5:27:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m-zjWufNfVcZIPDeGmR__jVJ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:90:05:dc:e1:11:10:7d:ca:e9:c3:d8:21:56:35:9e:c3:a7:
5c:b1:2e:b4:2b:9a:a6:c5:7f:f3:1a:cb:23:6c:c9:58:45:fc:
e2:7f:69:5f:b6:35:cf:97:67:53:b3:f5:05:ff:1b:1b:45:90:
c0:f9:59:e2:f1:3f:51:e3:2d:3d:6c:99:86:fe:fe:fa:bc:06:
ab:e7:e2:45:2b:c2:9d:14:53:f6:15:90:ed:ba:08:9d:d0:b6:
52:43:63:ac:5f:86:20:20:cb:88:8c:65:c7:8d:ff:70:b3:a8:
21:65:80:63:21:c3:e6:ac:cc:16:cd:bb:c5:4a:70:e2:d8:74:
c0:4f:dc:70:0b:c6:f1:b0:3a:f1:40:48:c9:a8:40:3b:11:16:
45:24:39:f0:35:ba:5e:25:69:4d:c6:6b:2d:e9:13:b4:98:1e:
5e:62:e7:37:af:78:a1:39:d6:fd:fd:b1:51:64:f0:b4:1a:17:
40:4d:19:4b:e2:ff:36:1b:2b:85:a1:7e:d8:1a:b3:0e:db:32:
45:26:12:14:c8:7d:41:1c:45:e0:76:c4:d0:a5:5d:30:e1:61:
a9:49:7b:28:a0:eb:e6:f0:fa:25:7d:6d:3e:58:fd:88:20:b3:
42:e9:73:04:67:01:02:37:f7:1a:fd:8c:95:5a:d8:95:df:3e:
88:a3:75:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:12:51 2025 by rpki-client