Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
File: r03WWsHW2oS6m4HCCeCnYXNF6iM.mft (raw, json)
Hash identifier: bOB8ZiyZWRl4Qyehg2ofrf1zHAdEnQ7SjjCOpD15D/s=
Subject key identifier: 19:D0:73:1F:26:C6:FC:BF:8A:5C:91:5D:CF:25:88:C2:9A:08:C2:EB
Authority key identifier: AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23
Certificate issuer: /CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23
Certificate serial: 01967BD75E1E238F349A4CC2F44E37400AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
Manifest number: 0844
Signing time: Mon 28 Apr 2025 10:00:33 +0000
Manifest this update: Mon 28 Apr 2025 10:00:33 +0000
Manifest next update: Tue 29 Apr 2025 10:00:33 +0000
Files and hashes: 1: r03WWsHW2oS6m4HCCeCnYXNF6iM.crl (hash: /MAVOSe6ehdvPgwrGSjOa6ZxtgENhfD5VbJtVb/4AXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:5e:1e:23:8f:34:9a:4c:c2:f4:4e:37:40:0a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23
Validity
Not Before: Apr 28 10:00:33 2025 GMT
Not After : Apr 29 10:00:33 2025 GMT
Subject: CN=19d0731f26c6fcbf8a5c915dcf2588c29a08c2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:ac:eb:7b:eb:4a:f3:eb:87:b4:89:dd:a3:
d1:5c:64:86:e9:02:59:4e:a5:7c:d3:69:1a:b5:c7:
fc:84:52:f8:17:13:fc:99:d4:fa:a8:ae:24:75:25:
c7:2a:4c:c0:dd:0b:93:8a:f2:8a:3e:80:d3:df:5d:
2d:80:f2:61:9e:53:a2:ce:c7:77:60:cf:65:bc:ed:
57:da:01:6e:43:a8:24:1c:e4:9a:0d:84:3e:5e:9e:
ea:2a:06:33:9e:1d:fa:d8:21:17:ff:99:23:50:46:
0d:0c:56:94:18:26:d8:61:3e:1d:d6:99:1d:0d:09:
21:85:e0:61:da:77:2f:8a:53:35:df:64:7e:89:a3:
4c:36:c4:07:c5:db:be:ab:9a:b4:0a:37:f2:7f:d8:
c0:bd:97:3d:7f:a6:fe:f3:a6:ad:bc:65:84:41:a9:
50:9b:9b:ba:c2:d0:1d:5e:ea:88:44:19:53:56:c1:
72:3c:5c:24:ae:2b:f0:a6:e7:99:48:f4:a2:6f:a0:
63:0e:a9:4d:28:69:b1:40:13:e2:74:ca:21:e5:9f:
3a:3d:23:5f:9e:43:06:78:65:4f:48:1d:73:eb:6c:
f1:4e:c8:c5:20:14:1b:20:dd:6a:b7:6f:c8:88:3a:
9c:81:a4:cb:d4:80:d7:fc:c5:0e:e7:b5:62:81:89:
9c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D0:73:1F:26:C6:FC:BF:8A:5C:91:5D:CF:25:88:C2:9A:08:C2:EB
X509v3 Authority Key Identifier:
keyid:AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:cb:8e:5e:8e:a2:50:f4:55:18:4a:32:d4:fc:6c:ab:9e:28:
28:a6:7b:92:51:40:17:69:7d:b4:c2:8f:72:1a:5b:23:0d:93:
c6:d5:83:14:06:39:83:03:32:9f:29:53:27:ef:e3:9a:fe:32:
0b:a0:cd:da:ea:4e:88:43:6b:e9:75:97:6b:9a:82:60:fb:c4:
00:7b:90:d8:5e:30:7e:24:cd:92:2a:ab:9e:e0:86:12:71:f6:
1c:3e:2b:cb:16:b0:e6:16:fc:ed:d9:d2:86:e5:4f:75:fe:73:
8e:af:b3:ac:64:fe:02:02:01:94:ec:3c:f7:06:8b:f3:70:83:
f9:6a:cb:61:17:3d:ef:90:67:4f:7e:71:0e:9f:e4:d0:53:71:
a4:68:1f:c8:aa:ed:c4:f0:9c:77:a0:85:5c:31:20:6a:a5:79:
98:ec:39:80:be:af:33:fb:fc:4c:f4:68:42:97:d9:a5:81:0f:
ee:9d:ad:dd:4e:53:90:4c:28:96:cc:3e:3e:fa:c6:40:2d:c9:
3f:5d:a5:de:49:2c:18:7f:f5:cd:0f:1b:43:b6:5c:31:53:5c:
0f:3d:63:b2:82:12:1f:a0:f1:e3:14:b1:4f:10:36:3e:75:c0:
58:fa:3e:65:16:ef:f2:7d:5b:a6:dd:0b:dc:90:90:84:a1:58:
bb:82:32:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:27:12 2025 by rpki-client