Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
File: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft (raw, json)
Hash identifier: NhOgLbEq4Hf4G4Dnf2PZT60o7z1twxMLW1DUdVTTVoo=
Subject key identifier: A5:F8:6A:62:49:C7:6A:F0:F2:F8:E0:69:27:30:82:14:9F:89:43:A8
Authority key identifier: FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
Certificate issuer: /CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Certificate serial: 019680FD80C24A735DACDDB2F2AA139A3BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
Manifest number: 0619
Signing time: Tue 29 Apr 2025 10:00:19 +0000
Manifest this update: Tue 29 Apr 2025 10:00:19 +0000
Manifest next update: Wed 30 Apr 2025 10:00:19 +0000
Files and hashes: 1: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl (hash: BhyvKFQTPEpzRylLZrnhZ81u3fthqGLR0jc06KjF2Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:80:c2:4a:73:5d:ac:dd:b2:f2:aa:13:9a:3b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Validity
Not Before: Apr 29 10:00:19 2025 GMT
Not After : Apr 30 10:00:19 2025 GMT
Subject: CN=a5f86a6249c76af0f2f8e069273082149f8943a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:7b:e3:c1:53:93:2b:82:25:a0:89:2d:fd:
99:5c:14:27:ec:99:b6:e0:47:02:be:46:2a:dc:16:
59:2e:ca:59:5f:16:8f:f2:b8:c9:ff:5e:3e:92:3d:
04:84:3c:84:6e:3f:36:89:cd:a6:56:6f:5e:02:1e:
2c:d0:4f:a1:80:4d:50:24:de:be:9f:45:25:d1:5e:
7d:b0:d5:e6:de:8f:08:0e:c4:24:fc:7d:39:d6:5c:
2f:06:f9:c2:66:5f:25:fc:9f:25:6e:96:72:29:fd:
ae:d7:38:a3:e9:35:ff:8b:f9:a5:c6:41:1a:f9:30:
1e:ec:b0:e3:0a:a2:cc:bf:ad:9d:11:45:11:10:ed:
f6:0d:a5:ab:f0:3a:10:b3:be:ff:5d:b3:6b:60:12:
e1:d6:69:fe:58:c8:58:fd:0c:cf:83:35:94:be:2c:
61:b7:f4:13:d8:93:fd:da:f7:a8:d1:db:c1:fa:4f:
4e:87:24:e6:bf:e0:c8:95:e8:2b:9b:94:f5:92:75:
13:92:ea:63:6c:94:6d:0a:1e:e9:61:3b:72:f2:41:
16:5e:2e:e0:7e:30:32:3b:7a:90:2f:5d:a5:2d:bf:
83:88:1b:86:ee:dc:84:63:eb:98:9e:70:5b:24:3f:
eb:71:a4:67:1c:f4:be:b5:01:cc:80:db:84:d5:5c:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F8:6A:62:49:C7:6A:F0:F2:F8:E0:69:27:30:82:14:9F:89:43:A8
X509v3 Authority Key Identifier:
keyid:FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5a:22:5f:82:08:ec:84:67:06:54:47:13:27:5f:cf:9f:8a:
43:5b:5b:c5:51:6d:7c:82:d9:c6:de:69:ff:80:e9:ee:74:8c:
d9:0e:80:f6:99:94:52:c3:a3:02:d6:a5:5b:e1:06:f7:ef:f7:
1a:80:a4:e0:ea:33:22:cb:ff:97:95:02:53:c4:3b:90:99:5c:
c5:97:73:28:b4:54:2c:64:65:f3:b1:b5:da:06:c6:a0:5e:db:
d0:77:63:24:98:aa:54:23:66:59:b5:64:ff:a7:91:12:9e:a4:
c1:fa:30:4d:42:6b:c6:f3:2b:af:5e:d7:f8:30:66:a9:df:d4:
fa:58:c4:40:6c:63:d4:e5:1e:ca:64:35:57:4c:3d:c9:58:7f:
bc:c3:ea:24:7b:9c:ff:05:1b:26:51:c9:44:9b:62:5e:77:03:
87:c8:6c:02:f9:ff:da:78:ac:c3:c4:78:6a:5b:35:5b:1f:1f:
12:42:6b:f0:99:69:09:9f:cb:42:52:32:45:1f:3b:39:29:ac:
a6:b7:88:7b:99:9c:c0:27:8f:92:ad:26:b8:0b:01:19:cc:cf:
8f:65:c9:a8:32:15:aa:c8:09:c2:f1:b6:e4:60:b3:78:c5:42:
95:1b:ee:94:06:c9:72:90:a3:3d:9b:c0:62:91:1d:14:9b:4a:
4d:ea:66:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:29:52 2025 by rpki-client