Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
File: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft (raw, json)
Hash identifier: +59BIwbpQfPplOCy7t3Onfi9XREAefcX/RIq/1MtZ+w=
Subject key identifier: C6:7B:99:56:B1:B2:09:32:D0:D0:E7:F1:D5:6D:6B:F7:54:C0:9C:82
Authority key identifier: FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
Certificate issuer: /CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Certificate serial: 01968B4B378E0865EA20C9C8755B38CC5C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
Manifest number: 0572
Signing time: Thu 01 May 2025 10:01:24 +0000
Manifest this update: Thu 01 May 2025 10:01:24 +0000
Manifest next update: Fri 02 May 2025 10:01:24 +0000
Files and hashes: 1: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl (hash: fCoQ3n5t88pOpH29G2gwSe7dAQ5m3OPcAkkNzDjN3Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4b:37:8e:08:65:ea:20:c9:c8:75:5b:38:cc:5c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Validity
Not Before: May 1 10:01:24 2025 GMT
Not After : May 2 10:01:24 2025 GMT
Subject: CN=c67b9956b1b20932d0d0e7f1d56d6bf754c09c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:85:f7:3f:6d:b7:b5:13:e0:a1:23:a9:6a:
a4:4d:5e:17:a2:b8:42:4f:2a:b2:ef:85:79:f3:75:
b4:37:46:24:7a:eb:b7:38:20:5d:41:e9:7e:44:fc:
cc:0c:f9:9a:86:f4:d1:24:39:7b:db:13:01:dd:6f:
cc:41:8e:1b:38:39:5b:52:0c:58:7b:ee:a5:d1:6a:
16:35:a7:62:5f:39:3f:23:57:91:38:7f:4d:de:e7:
2b:0a:4b:e4:df:e0:1a:5c:de:35:8b:0b:59:ea:28:
a8:a7:2a:e9:15:d8:7d:4e:28:c5:c1:be:ab:7c:21:
cc:f7:ed:0f:59:dc:f8:91:fe:67:b8:5b:89:af:98:
11:64:31:e3:7c:90:19:c2:61:93:7c:f4:a0:fc:16:
4e:51:76:35:fc:2a:7c:4c:ad:6d:01:58:92:f2:16:
5a:4e:ec:c6:a8:f1:97:ca:36:f4:39:db:4b:95:5a:
41:3d:20:d3:9d:38:0b:f6:8a:58:bd:bc:4a:ea:48:
11:cf:bf:c9:de:58:1d:1d:22:f8:43:73:3f:fc:1d:
53:9b:d7:ae:15:ac:56:56:da:0b:63:ef:e4:39:17:
1a:ac:2a:77:8d:91:c8:80:67:d6:7d:27:ec:3c:de:
95:e7:35:2e:b3:e9:ee:2f:86:14:82:b2:87:f3:2f:
45:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7B:99:56:B1:B2:09:32:D0:D0:E7:F1:D5:6D:6B:F7:54:C0:9C:82
X509v3 Authority Key Identifier:
keyid:FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:23:fc:66:6d:96:ae:ca:5f:e2:04:15:ad:c7:7e:5b:a8:46:
19:62:6f:4f:0e:b9:04:b4:fd:9d:02:61:fe:d9:b8:27:1a:be:
7d:c4:01:b3:f6:8c:53:73:b5:cc:84:55:67:07:59:47:a5:21:
49:a1:66:32:de:74:21:77:74:f3:fd:5d:45:80:8f:34:91:8d:
f3:85:15:35:e6:6b:b5:39:14:fa:84:8a:0c:0c:05:8b:f4:0b:
7c:37:fc:bd:cf:e6:e4:22:a4:7e:23:ad:ce:5c:9a:99:fd:91:
ee:12:f8:f8:4d:bd:00:3b:73:c7:c4:b8:ac:78:81:49:d3:3e:
62:bb:62:91:b0:9a:d4:3a:bf:8b:d4:55:e4:b0:4e:ca:b5:34:
bb:30:b3:01:d8:84:28:f8:1f:a4:bf:28:a0:c9:2b:7c:b9:4b:
d6:a8:3c:7c:27:90:76:db:12:00:94:19:74:d3:c7:90:90:c9:
54:4d:aa:fb:4c:5e:77:2a:90:6c:b9:04:8b:c3:3e:11:ca:44:
18:82:18:47:23:d2:ae:39:79:fd:2f:32:d9:8b:65:3f:04:84:
2c:3f:10:4f:82:3d:ab:eb:3b:30:f9:e6:c1:18:68:0f:7b:25:
ff:97:7d:19:76:19:24:42:0d:2f:0d:36:8b:ba:b5:69:3f:7f:
08:ab:dd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:23:07 2025 by rpki-client