Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
File: 1-3R7GNuDDz6-M4b8n8jaldkyetg.mft (raw, json)
Hash identifier: PydaqGo3DLou+ZO/COW92JG0KFpqbN8M1jkNSvtryBc=
Subject key identifier: 79:92:39:98:1B:B9:FB:6C:75:C9:A1:25:03:CC:0F:7B:63:A3:4B:05
Authority key identifier: FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8
Certificate issuer: /CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
Certificate serial: 019679441349AA7BDEFBB3D40980F151FAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
Manifest number: 0121
Signing time: Sun 27 Apr 2025 22:00:26 +0000
Manifest this update: Sun 27 Apr 2025 22:00:26 +0000
Manifest next update: Mon 28 Apr 2025 22:00:26 +0000
Files and hashes: 1: 1-3R7GNuDDz6-M4b8n8jaldkyetg.crl (hash: NiVxN4Ut7SMeWmaATEx7EmQWmTRAfFr9IBqYS7x8A9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:13:49:aa:7b:de:fb:b3:d4:09:80:f1:51:fa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
Validity
Not Before: Apr 27 22:00:26 2025 GMT
Not After : Apr 28 22:00:26 2025 GMT
Subject: CN=799239981bb9fb6c75c9a12503cc0f7b63a34b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:0c:6c:f6:4c:a9:a8:e2:3f:e5:97:74:61:
8d:18:24:20:32:38:2a:d0:b5:4a:ed:aa:c1:28:d5:
ab:7e:a4:57:08:2a:3e:71:c9:9d:91:b4:4a:78:0d:
2a:e9:55:74:72:35:da:56:3d:41:61:8e:49:42:04:
48:50:0d:ef:f7:14:2a:c7:ce:da:49:84:fd:ca:5c:
d8:62:e9:b1:aa:7e:ce:73:85:2e:8e:24:aa:a6:d0:
e8:78:6c:52:15:80:b8:a6:7a:e4:62:8b:df:52:f8:
b3:e8:b2:1d:df:25:5c:75:a3:0e:cc:fb:82:09:19:
ef:99:19:da:ac:d5:58:b0:56:d9:5c:6e:85:6a:54:
1c:a8:ce:99:c4:ac:bd:00:07:ac:4b:45:30:81:84:
cb:7b:ec:83:92:fa:d9:57:fb:e3:cb:15:d5:5e:8d:
6e:c7:06:a5:97:59:cb:05:ce:e5:ed:75:6e:a5:9f:
d6:3f:75:e2:09:e3:08:1b:a3:43:0b:2b:ef:1e:59:
66:c2:77:a4:61:70:3e:60:aa:93:37:59:67:66:36:
6a:1e:97:eb:d2:01:77:4b:7d:bf:ab:97:eb:fa:41:
4e:37:d8:23:e4:8a:4b:f8:28:35:9c:c0:db:b0:28:
c8:6b:d1:0a:c2:e4:79:9d:e2:68:cc:c2:d8:98:01:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:92:39:98:1B:B9:FB:6C:75:C9:A1:25:03:CC:0F:7B:63:A3:4B:05
X509v3 Authority Key Identifier:
keyid:FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ed:4a:e9:ca:b6:a1:89:1f:37:79:f5:ea:0e:98:9d:ad:bc:
8f:18:46:90:32:bb:12:b6:d4:f5:1f:bd:41:22:e2:0e:f5:ce:
84:b4:de:db:4c:72:c4:a6:6c:4c:73:3b:93:d0:b9:47:e9:dc:
e9:67:2c:92:39:99:4b:02:f7:cf:47:35:22:aa:8a:65:f1:9b:
71:47:bf:28:cf:af:66:a7:29:28:7d:9f:fe:4e:ee:56:1e:e3:
b9:65:2c:27:dd:0e:d5:76:aa:b6:c3:00:17:88:78:e8:5c:f1:
1b:fe:68:76:aa:58:03:28:a6:3a:da:20:05:75:18:8a:e9:7d:
9b:18:cd:8b:d6:29:5a:ce:d3:60:67:5a:59:7c:76:22:92:56:
7d:23:77:5e:b8:44:0f:13:78:9c:d0:5e:0c:17:08:9c:56:04:
35:f2:0e:83:8f:32:42:b9:a1:a4:c7:30:23:dc:76:67:a8:bf:
d1:87:b4:27:61:35:1a:26:91:24:91:6c:50:a4:83:00:96:bd:
68:73:ce:cc:7c:8f:8a:69:58:a7:0a:50:e8:80:34:5e:11:34:
f2:58:fc:23:1c:b3:2a:ab:86:b5:aa:78:d0:ae:16:14:3d:5a:
90:28:7b:1d:64:13:15:0c:4a:cd:04:57:96:e4:34:b1:48:e6:
d4:51:30:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:38:12 2025 by rpki-client