Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
File: fxFBauOSnfN79mpFnNOspjiR6UY.mft (raw, json)
Hash identifier: dymh+40B6qpaUibjQPh+JYTSNqIeZYOKafTRqlRHcZo=
Subject key identifier: 01:3F:BC:EC:E8:69:74:0F:9E:CB:B7:6D:C3:BE:B8:D3:43:8D:0B:A3
Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
Certificate issuer: /CN=7f11416ae3929df37bf66a459cd3aca63891e946
Certificate serial: 01967FB4DC5B43BE82E3F2BDA20B696A0FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
Manifest number: 150F
Signing time: Tue 29 Apr 2025 04:01:21 +0000
Manifest this update: Tue 29 Apr 2025 04:01:21 +0000
Manifest next update: Wed 30 Apr 2025 04:01:21 +0000
Files and hashes: 1: fxFBauOSnfN79mpFnNOspjiR6UY.crl (hash: Q+1HjXqGbg++neQclz3E5bpSGG/7KATI52UFEsAA2UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:dc:5b:43:be:82:e3:f2:bd:a2:0b:69:6a:0f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946
Validity
Not Before: Apr 29 04:01:21 2025 GMT
Not After : Apr 30 04:01:21 2025 GMT
Subject: CN=013fbcece869740f9ecbb76dc3beb8d3438d0ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:ed:1a:3e:3a:7b:7a:e2:4a:82:5d:72:47:
f7:71:30:12:00:1b:45:87:11:cd:36:61:b5:dc:e8:
c0:51:03:4e:14:22:9b:d4:33:98:72:b7:7f:e2:d0:
ec:d1:a4:fd:16:4e:f5:da:20:60:f5:c8:de:49:09:
aa:e7:17:93:71:32:92:4b:d0:a4:05:36:71:c6:6d:
86:6e:94:9a:34:93:b4:57:94:30:82:17:3d:21:3a:
b2:b5:ce:21:5e:ac:7c:42:86:62:a5:24:35:39:c6:
aa:ad:10:7f:e4:37:9b:ce:7f:83:86:31:3c:b7:4e:
22:84:93:34:57:03:0d:54:00:e6:13:6c:fc:ed:dd:
bf:3c:41:1d:a9:61:9c:1b:ee:89:7d:dc:82:94:d8:
74:d7:b3:2e:69:f5:d9:35:ad:e9:b8:2a:1d:0e:7a:
3d:ab:32:87:e1:c9:2d:9e:27:65:fc:f6:3f:25:b8:
94:11:1b:cb:f7:84:bb:73:64:04:89:c5:07:81:12:
82:47:a9:d5:e0:d2:6b:28:e6:3a:fc:4a:6a:9e:e7:
6d:52:43:1e:a9:44:3b:6d:6c:3c:87:68:ba:be:c4:
a4:d1:cb:f3:92:5e:37:01:da:a2:fb:ab:6a:72:ad:
17:03:30:a7:7e:9f:f4:14:28:47:24:36:84:b6:c5:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3F:BC:EC:E8:69:74:0F:9E:CB:B7:6D:C3:BE:B8:D3:43:8D:0B:A3
X509v3 Authority Key Identifier:
keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:00:41:3a:21:39:9e:fa:d4:a9:e3:b7:1f:2d:01:b1:d8:11:
7c:6a:ee:aa:b1:1a:cc:03:45:72:84:0c:e6:14:98:f8:96:83:
92:3f:1d:97:3b:64:96:2d:b2:96:b8:ad:36:12:eb:12:c7:37:
15:4f:a6:e2:b1:f2:2e:24:e1:1f:61:30:77:60:a5:e4:40:92:
72:f9:a9:d0:c6:1f:44:ce:d6:06:6a:47:32:b8:28:ae:98:9f:
9d:b4:8f:5a:ca:1d:6c:96:bf:6a:12:d0:43:f0:03:c8:f0:b7:
69:e0:1e:71:fe:1e:37:54:26:63:ae:9a:c7:ce:7d:92:73:9a:
fd:53:f2:97:82:a3:b3:d0:1f:3c:88:c6:1f:6e:69:25:e3:d2:
1f:13:c5:94:fa:da:c3:ef:7b:07:45:00:e5:59:e9:63:97:67:
2f:c4:21:a7:e3:ee:9e:4e:50:6d:9d:a2:e9:52:42:de:37:eb:
54:45:ed:8b:0c:88:cf:ae:8d:f5:f1:a8:13:5e:66:c1:cc:cf:
02:3a:e6:e8:67:5f:78:cb:21:0f:b4:dd:30:58:a1:89:4f:4c:
c0:ad:be:2c:af:8b:6b:29:39:cf:3f:b2:91:32:d2:4f:ca:7f:
a2:6e:11:6d:70:48:d0:28:1b:f8:47:e1:0a:3c:64:33:23:93:
13:21:63:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:05:56 2025 by rpki-client