Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier: fDnEe9x1svUNeSuxIsigZIp6ThljLxpHRiI4qLR8Ngc=
Subject key identifier: F5:61:DF:B1:67:83:EE:0B:33:DF:94:9C:93:1F:62:0B:05:AF:3A:9E
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial: 01968391A7D8A703232DA728821637AB54B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number: 0652
Signing time: Tue 29 Apr 2025 22:01:23 +0000
Manifest this update: Tue 29 Apr 2025 22:01:23 +0000
Manifest next update: Wed 30 Apr 2025 22:01:23 +0000
Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: PUVH1fe7UtEwgcpQcb1ft8yV8NjNnpBv0snjOe0GL58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:a7:d8:a7:03:23:2d:a7:28:82:16:37:ab:54:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Validity
Not Before: Apr 29 22:01:23 2025 GMT
Not After : Apr 30 22:01:23 2025 GMT
Subject: CN=f561dfb16783ee0b33df949c931f620b05af3a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:41:2f:d0:10:b6:a5:2c:2c:3c:3a:65:74:
ac:af:eb:9f:2e:e9:e5:2b:95:59:c2:32:89:02:c0:
9f:08:49:96:6b:ed:f1:b3:93:c6:ca:ee:60:47:fa:
79:6d:e3:f1:04:d3:64:52:2c:95:cb:ea:a9:1a:8d:
3a:e7:6f:c1:f3:ec:03:20:13:2b:fc:37:ca:9c:07:
0c:46:64:c9:3e:85:6e:75:8a:22:cf:c8:9d:5a:8d:
2c:52:ec:55:95:9e:f5:28:7e:c8:73:a6:e6:27:b4:
aa:ca:71:78:75:7d:e8:45:84:86:5a:f0:30:7d:47:
8e:85:60:7d:4c:40:af:65:4c:c8:0c:98:b5:bb:94:
a5:42:af:3f:a9:e6:24:27:14:ff:7e:93:d5:4c:cf:
77:c7:13:4a:25:1a:95:36:e5:86:96:e2:55:d4:4e:
1c:b6:33:c8:5d:e8:25:78:4f:cb:d7:c8:f0:63:1d:
81:77:22:67:9a:82:2c:03:4f:fe:0b:18:45:7f:5b:
b7:bc:b4:a7:a9:82:be:e1:c7:e6:2f:a4:b2:47:e6:
a2:f8:4a:e8:db:f8:fc:5e:31:97:48:a2:56:86:3f:
0f:49:61:dc:4e:5b:82:99:c1:8c:ea:05:ae:f5:80:
be:f0:e3:a6:09:a7:f0:7f:6a:d5:cc:f1:01:cd:6e:
3c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:61:DF:B1:67:83:EE:0B:33:DF:94:9C:93:1F:62:0B:05:AF:3A:9E
X509v3 Authority Key Identifier:
keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:83:b9:1e:99:5a:58:d4:db:ed:85:23:9c:73:47:6a:bf:a2:
71:57:d4:87:84:af:29:38:eb:19:24:74:8e:03:17:80:f5:bd:
b8:3f:0e:e0:ad:d5:9c:8a:dc:45:5f:e7:02:d8:50:d2:90:8c:
c2:57:a8:e1:71:94:d0:d5:81:4e:8a:4d:e8:78:aa:83:73:ad:
a7:07:1e:4e:b5:9a:4c:c8:7f:9d:54:48:ec:06:c9:0c:ec:96:
b9:16:33:ff:a6:b2:5d:28:af:0f:6b:27:f7:fe:5a:48:8d:3f:
88:a2:f0:3f:77:23:51:a2:39:68:c8:b7:ba:8f:e2:a1:a3:d0:
5a:51:21:d9:6e:ec:65:98:bb:53:ad:6e:21:b8:0a:91:4c:fe:
99:63:62:2d:5a:dc:7c:0d:4c:6c:b8:64:5a:8f:10:e5:47:9f:
af:02:c1:54:26:61:a5:bb:00:53:bd:71:35:52:48:73:85:db:
b1:f5:6e:47:52:51:02:83:99:89:03:3a:ca:21:ff:30:79:62:
25:df:77:86:03:4b:ac:aa:03:0b:3a:94:61:43:6c:10:43:ec:
cb:f5:f9:05:0d:3e:5b:e1:31:5f:dd:99:46:46:62:f9:19:fa:
6a:d0:2f:db:ab:b3:fe:55:80:d9:5c:6b:5a:c4:61:29:94:5c:
e1:24:ba:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:15:51 2025 by rpki-client