Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File: FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier: UFSyWfUMQMNI5rIiJAKiu/DAijpWDmxmikc2Z4OLN9Y=
Subject key identifier: 22:42:2D:9E:D3:28:4F:85:1F:A3:75:BA:DE:ED:DB:40:F6:06:FA:F0
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial: 019688B74332630CC0BE6A81DCBA2085B388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number: 021F
Signing time: Wed 30 Apr 2025 22:00:33 +0000
Manifest this update: Wed 30 Apr 2025 22:00:33 +0000
Manifest next update: Thu 01 May 2025 22:00:33 +0000
Files and hashes: 1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: 72PiHSCGVfWyuoyIf/xh7vOpk7omGA7+7RpQyMpjz1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:b7:43:32:63:0c:c0:be:6a:81:dc:ba:20:85:b3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Validity
Not Before: Apr 30 22:00:33 2025 GMT
Not After : May 1 22:00:33 2025 GMT
Subject: CN=22422d9ed3284f851fa375badeeddb40f606faf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:aa:cb:8c:cb:31:49:ff:5b:28:78:bd:e2:
44:cf:9c:11:26:20:78:8f:ad:a1:f3:05:e7:05:9c:
3e:a4:b7:9c:e2:72:b4:ac:83:79:93:da:32:da:a3:
e4:42:d3:31:19:13:7f:c3:fd:35:38:df:96:03:a0:
a6:24:e6:69:41:50:0f:db:77:d1:d4:d9:42:8a:41:
5a:2c:5c:96:d2:55:d6:b7:e8:f4:80:91:d7:7e:fa:
ec:87:33:9d:ac:0a:ce:e9:8b:61:64:60:68:27:98:
c4:55:bb:86:f9:a5:55:d0:2c:54:28:c0:47:e9:eb:
80:82:89:06:5b:27:7c:e0:d9:f7:4c:39:f4:85:14:
f9:46:80:08:ac:53:5f:86:f8:d3:f5:2d:a2:75:3a:
b1:a2:3b:5d:d8:38:62:ce:32:95:f9:ec:28:5b:cf:
70:cd:6d:bb:37:91:fb:6b:db:6a:94:e6:68:c7:3e:
f6:b0:c3:3b:ec:c3:a0:2b:21:a3:c7:67:1f:7e:46:
86:4d:f0:e6:8c:a5:51:eb:f3:89:94:d5:41:05:1a:
58:7d:2a:e7:f0:7f:3e:da:2c:ab:c6:87:33:3c:31:
e6:26:fa:a5:5c:c2:9b:b8:de:7d:85:fd:7d:c4:df:
82:e5:42:69:07:51:be:f1:6b:be:53:b7:7b:6f:11:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:42:2D:9E:D3:28:4F:85:1F:A3:75:BA:DE:ED:DB:40:F6:06:FA:F0
X509v3 Authority Key Identifier:
keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:31:08:e0:86:65:da:77:5b:cb:d1:35:91:06:55:d2:29:69:
97:7d:fb:53:35:c1:7d:11:e7:fa:65:3b:c3:60:0f:15:46:af:
18:45:61:49:95:ec:87:d3:a6:d7:42:d9:f1:fd:5b:16:75:65:
97:eb:58:4c:f4:5e:13:7d:2d:1b:36:3c:be:6f:71:36:df:a2:
d7:20:95:44:ec:01:34:44:3b:4b:c3:a6:23:ea:95:0b:a1:63:
54:15:1e:50:4f:44:35:59:8a:dc:88:e2:02:a8:18:2b:f7:29:
79:df:b9:b1:03:80:d8:8e:17:82:31:4f:d6:44:7d:4a:f2:ce:
23:1d:4e:0c:43:c0:39:bb:74:c3:1c:cf:f6:40:37:47:c3:a5:
0b:96:7e:00:fc:1d:bd:66:fd:5a:25:41:f1:64:da:3c:41:6f:
13:94:7c:66:34:4b:7f:30:bc:0f:92:b1:f4:09:03:d2:23:89:
af:de:64:11:a3:91:4a:06:33:e3:5e:41:07:cb:76:0c:95:c4:
7e:73:4c:7a:f9:c7:b3:f6:68:77:ff:fc:ac:98:58:1b:14:92:
84:45:45:91:ef:52:08:90:91:24:ae:d0:26:e4:b1:b2:26:16:
55:2b:86:f3:59:27:d8:a7:5c:fb:fd:78:7b:10:fe:7d:1f:cc:
77:3d:87:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:08:56 2025 by rpki-client