Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
File: fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft (raw, json)
Hash identifier: QnJ2+iRgdBer+ZurVdMyAB5435QoMK8Kc27NM4iQFYQ=
Subject key identifier: 4B:B6:C1:5A:12:28:AA:5A:09:E4:CD:B9:FA:37:73:8F:6E:F7:9D:A3
Authority key identifier: 7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
Certificate issuer: /CN=7c3846589a3b395b3758773da3d9f13334c72038
Certificate serial: 019674FA2158AF14E41306B059FA71F38CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
Manifest number: 150B
Signing time: Sun 27 Apr 2025 02:01:11 +0000
Manifest this update: Sun 27 Apr 2025 02:01:11 +0000
Manifest next update: Mon 28 Apr 2025 02:01:11 +0000
Files and hashes: 1: fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl (hash: +5X/CJeDWGjXQD+TOQuVUJWEeniHUStWqteSuuO7hME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:21:58:af:14:e4:13:06:b0:59:fa:71:f3:8c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3846589a3b395b3758773da3d9f13334c72038
Validity
Not Before: Apr 27 02:01:11 2025 GMT
Not After : Apr 28 02:01:11 2025 GMT
Subject: CN=4bb6c15a1228aa5a09e4cdb9fa37738f6ef79da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:56:f9:90:b9:c0:ac:0a:52:f9:eb:4e:a1:1c:
c7:63:fb:7a:cd:a0:1e:5a:a4:92:94:3a:3b:8a:e1:
ab:5a:dd:6f:69:1b:e2:14:da:4c:d9:05:51:1e:b7:
f2:b0:73:0d:f6:31:a1:a1:61:4f:86:08:df:47:21:
a2:f8:50:10:bf:fa:17:59:0f:34:d1:18:66:16:33:
ee:58:60:4f:a6:7d:f1:4b:c9:27:3d:a2:70:94:69:
85:8c:27:02:cd:52:ca:df:44:0a:1f:10:4b:5a:e0:
bd:90:e4:ba:45:69:e0:08:19:a6:bb:2f:9b:be:97:
f8:6b:d1:97:a6:09:65:25:36:37:21:17:c2:fa:e0:
51:d8:d4:df:b4:48:84:08:58:05:6f:2e:01:43:2a:
b7:30:68:2d:b9:7e:e4:1b:e1:8e:db:0e:9a:3c:f3:
e7:b7:7e:e5:5b:4f:ae:34:bd:af:9f:53:72:ec:0e:
c1:40:67:7c:aa:78:52:d1:28:97:45:09:7c:db:47:
9e:a1:83:41:bc:c1:a2:3d:74:55:4d:8d:ca:3c:9b:
ec:14:91:37:3f:22:31:10:a9:19:d2:56:66:93:54:
66:84:f5:3d:82:21:56:8b:3b:8b:4d:8d:b0:5e:77:
4c:1b:f0:a2:7e:f4:af:fe:ff:85:f7:d1:e4:c4:17:
54:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B6:C1:5A:12:28:AA:5A:09:E4:CD:B9:FA:37:73:8F:6E:F7:9D:A3
X509v3 Authority Key Identifier:
keyid:7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3b:92:ca:27:d0:6a:63:3e:60:ad:11:94:e8:61:e8:e0:86:
30:2b:6b:13:06:b0:d9:1f:bd:11:f5:3f:ad:38:0a:73:bc:9e:
33:62:da:a8:67:b7:c2:9c:db:09:02:55:95:e7:a3:f1:c2:8a:
81:80:e4:07:01:df:1d:0c:de:98:05:75:25:fb:0e:1d:26:85:
36:91:90:f8:18:e4:04:f0:e4:77:7d:1f:ed:5a:27:73:bd:92:
68:a2:8a:c7:88:b9:7a:10:73:ac:1b:df:a1:1a:0b:e8:63:3c:
32:69:86:fa:46:bd:08:86:84:6f:a4:65:55:66:82:0d:7a:96:
63:39:61:63:c4:56:0e:41:ea:d5:f6:4d:ab:1e:2d:8e:8f:e5:
c4:4d:e3:07:b5:0b:49:1d:9c:33:b3:f5:36:67:a8:86:d6:b2:
2e:97:81:94:94:b2:f1:a7:46:b2:8c:24:5b:1c:ff:69:41:b6:
05:35:88:29:07:20:02:91:18:4b:68:de:fa:36:f8:a1:2e:12:
f7:6e:17:ec:8a:f5:75:28:a8:cb:73:a2:09:f8:3a:c8:39:2a:
4e:ed:43:35:47:86:f8:5f:0b:5c:3c:01:cb:e4:b7:85:c3:8a:
01:52:1c:a9:0d:17:48:71:0b:7d:50:ac:a1:8e:45:bc:f5:5f:
bb:4a:b1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:32 2025 by rpki-client