Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
File: 1-99pi190ocbR4AmLIlGb3FgwBVo.mft (raw, json)
Hash identifier: Fau/WNDHz8wL7zmI3LIpucf+zsfmHmZZHMrbz8cJmM4=
Subject key identifier: F3:AC:D0:FA:62:6F:D7:01:5C:74:2C:8B:A2:2A:0E:2E:65:9D:CC:DB
Authority key identifier: FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
Certificate issuer: /CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Certificate serial: 01967A1FAAFC4AE7B3265C7CC59B29509A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
Manifest number: 0922
Signing time: Mon 28 Apr 2025 02:00:17 +0000
Manifest this update: Mon 28 Apr 2025 02:00:17 +0000
Manifest next update: Tue 29 Apr 2025 02:00:17 +0000
Files and hashes: 1: 1-99pi190ocbR4AmLIlGb3FgwBVo.crl (hash: sf4hZkIS5Tg6QhkqCaRwC1Zp2AYflKEBkMyX8fOh7KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:aa:fc:4a:e7:b3:26:5c:7c:c5:9b:29:50:9a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Validity
Not Before: Apr 28 02:00:17 2025 GMT
Not After : Apr 29 02:00:17 2025 GMT
Subject: CN=f3acd0fa626fd7015c742c8ba22a0e2e659dccdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f9:50:20:fc:18:ef:24:c6:29:22:ce:24:d0:
9c:8f:ec:5f:04:22:b0:89:31:cd:ae:57:84:69:bc:
d9:64:1f:0b:53:72:a8:19:54:e0:82:92:a5:47:24:
c6:ae:74:97:96:93:3b:c6:49:35:87:fc:d6:64:e7:
2d:58:32:f9:c4:d6:0e:40:12:c2:5f:b8:e7:ec:5f:
48:1d:10:9a:73:87:43:cb:ee:0f:a7:5b:a1:31:c8:
d1:79:ed:42:98:48:21:7f:03:fa:8d:a2:c5:c8:f9:
0e:17:14:3c:2e:93:38:e4:c9:05:c5:b6:d5:db:48:
09:ab:d1:00:b1:f2:a8:2b:01:9a:68:a6:a1:a8:e2:
d4:40:0b:3e:65:ae:2e:23:99:c8:ba:96:c7:d7:b3:
53:56:07:29:88:d0:b4:0e:dc:97:e1:63:54:85:b4:
20:de:87:31:6e:47:cc:e5:73:5e:13:2b:1c:f5:00:
51:aa:e3:d4:0f:76:65:b5:05:dc:ba:ae:51:9c:20:
16:2b:d9:83:4f:7a:70:7b:56:79:bf:fd:8f:bd:df:
5e:dc:56:11:82:fc:cf:95:ac:3c:cb:ea:7a:d9:2f:
34:19:58:51:56:1f:b0:61:1b:fb:4c:62:d1:71:d6:
7a:da:b2:7b:92:d4:51:c6:b3:12:94:71:2c:59:19:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AC:D0:FA:62:6F:D7:01:5C:74:2C:8B:A2:2A:0E:2E:65:9D:CC:DB
X509v3 Authority Key Identifier:
keyid:FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:95:58:5b:10:9d:1a:9b:04:5c:71:0b:1f:33:ef:99:07:ca:
c6:15:f6:86:42:b2:be:46:3d:9f:46:c6:c9:eb:7a:00:07:6b:
7d:a2:28:ef:57:e2:f1:21:e7:c3:c0:b5:01:29:5c:c9:83:88:
f8:ed:8d:65:51:a9:06:47:d9:7f:82:cc:b1:7a:0b:aa:b4:32:
de:83:de:3e:fc:58:25:5c:2d:9f:88:bf:7c:36:37:72:86:7c:
f3:f7:aa:c0:da:3c:f8:c9:bc:4b:68:fc:9c:9f:a0:0f:1d:7b:
16:e7:75:c5:14:02:d4:dc:3c:70:21:c0:4c:58:4a:37:33:6b:
6d:32:6b:17:1f:84:7c:01:f3:ac:af:6f:5b:f4:45:e2:4a:38:
e7:bd:f9:28:87:31:db:17:38:ba:f2:8b:5f:b1:d3:42:70:8f:
6e:7c:b9:2c:72:85:d9:9d:b5:ba:57:0f:56:ee:a8:0a:10:04:
e2:be:dc:9f:c9:23:98:b2:18:05:5f:11:80:b3:a3:89:e9:b4:
a4:c7:d9:05:0c:3e:62:8f:da:9a:46:c5:b7:68:e8:60:3d:44:
bb:fb:73:dd:10:48:e8:ee:31:20:ad:a2:71:46:90:fd:f7:6c:
b7:29:68:15:f1:a5:29:64:49:97:90:7b:35:8c:98:92:60:1f:
80:0c:ce:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:43:19 2025 by rpki-client