Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
File: ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft (raw, json)
Hash identifier: H4SKp51WmAD39I6wbPJccbu2tAPm5oM30IIbvfXjN8k=
Subject key identifier: F2:72:BC:DA:A6:FB:10:0D:97:36:4E:6C:B9:10:1A:81:F8:D1:28:B0
Authority key identifier: 22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0
Certificate issuer: /CN=22dc6e4743ed5cc843032852896ef15f4892edb0
Certificate serial: 019674C27946D4CF3869C0F1D8ED1A1F05C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
Manifest number: 0B12
Signing time: Sun 27 Apr 2025 01:00:24 +0000
Manifest this update: Sun 27 Apr 2025 01:00:24 +0000
Manifest next update: Mon 28 Apr 2025 01:00:24 +0000
Files and hashes: 1: ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl (hash: 7fV6ssfYxKleNkag1ZlnR841JNkxqv1T5BwjcGYn/uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:79:46:d4:cf:38:69:c0:f1:d8:ed:1a:1f:05:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22dc6e4743ed5cc843032852896ef15f4892edb0
Validity
Not Before: Apr 27 01:00:24 2025 GMT
Not After : Apr 28 01:00:24 2025 GMT
Subject: CN=f272bcdaa6fb100d97364e6cb9101a81f8d128b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:97:40:19:d3:58:da:f9:42:53:66:3b:01:
89:89:09:09:67:5f:c3:d3:06:d5:e1:2a:a5:f8:03:
70:33:37:be:f1:eb:98:a1:20:cf:06:3a:cb:c6:f6:
54:27:ec:36:d9:b4:9f:3f:c4:8d:bc:b5:b4:91:1a:
a6:90:7a:e9:d8:40:57:5e:3e:38:ba:e5:4f:15:4b:
02:0b:b8:62:2d:83:ea:6a:11:62:26:c0:2e:26:41:
db:13:c4:9f:f5:82:a3:29:75:67:8e:1d:65:99:f3:
fd:a7:ca:c5:05:fd:e3:32:65:a3:77:17:3c:8c:39:
f6:d0:5c:f1:39:58:78:1c:85:1f:f1:55:64:1e:a1:
a7:25:29:a3:39:8f:32:f4:b6:eb:a0:80:0a:f8:f6:
82:3a:eb:e1:f6:5d:c2:4b:62:f2:af:17:c6:48:b1:
c2:a5:27:8e:1d:70:92:e8:92:c3:aa:63:b0:70:ce:
08:57:37:96:62:2a:b7:70:84:5e:51:cb:ff:43:88:
f8:5a:43:b5:42:07:db:75:60:96:43:e1:f2:68:79:
29:83:86:d1:4b:e2:b2:90:39:31:05:1b:6f:64:f5:
af:21:c5:bc:3e:92:ca:3e:43:17:d0:b0:04:f0:b4:
bc:2a:e1:33:dc:67:d4:a1:c9:eb:e3:46:63:24:8f:
1f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:72:BC:DA:A6:FB:10:0D:97:36:4E:6C:B9:10:1A:81:F8:D1:28:B0
X509v3 Authority Key Identifier:
keyid:22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9e:7b:96:12:a8:eb:eb:f2:c5:46:01:d4:74:ff:5e:c3:17:
d0:73:42:ce:d6:20:48:a9:69:fa:7d:77:99:c6:09:99:34:67:
92:39:8f:69:3f:50:8c:60:b3:27:0c:36:4f:b6:0c:be:ac:20:
3e:37:79:67:9b:c7:79:31:62:52:c5:f5:40:82:9e:80:8f:2a:
78:9d:5b:3d:1c:ea:60:02:4a:65:e5:3f:02:f8:51:51:9e:c2:
61:63:3b:b6:ee:ce:dd:95:44:ae:dd:fa:62:61:17:4a:a2:29:
b3:77:9e:ee:a0:f6:78:87:70:da:27:b8:d1:52:00:96:35:81:
37:ad:d9:7d:df:b8:be:13:dd:fb:45:8e:9c:57:cc:a4:49:c5:
b5:4a:47:59:77:a9:ae:87:96:7e:67:55:ad:e7:58:fa:a2:b5:
ba:d9:e1:d1:4a:f6:9b:54:6a:86:85:14:cd:e0:18:b4:6e:64:
5c:cf:60:8b:f3:64:91:ad:af:3c:fa:74:68:40:03:c3:b5:54:
02:3a:76:b5:48:f1:69:6a:a9:22:c8:8a:51:35:54:70:39:5d:
36:e9:9a:2c:75:89:87:69:3a:61:a7:72:25:5e:8b:3b:75:9e:
42:14:0a:7c:c2:0a:21:01:62:c4:5f:a3:b0:7b:81:94:f6:ce:
52:a7:6d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:02:46 2025 by rpki-client