Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json)
Hash identifier: aYVoctlzzvlCRKWabAEghl5QM6SKvfufnL/QxwaOKLE=
Subject key identifier: 80:B0:14:E6:DC:34:C6:3F:58:01:56:AC:86:C5:04:80:AF:0A:27:0F
Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Certificate issuer: /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Certificate serial: 01967BD72BBA147A0743D2E608566C4C0C10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
Manifest number: 0C47
Signing time: Mon 28 Apr 2025 10:00:21 +0000
Manifest this update: Mon 28 Apr 2025 10:00:21 +0000
Manifest next update: Tue 29 Apr 2025 10:00:21 +0000
Files and hashes: 1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: 5VxssMl7CG3yQEbpdRBciHwc/atpmeX8RkV4WIt2cb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:2b:ba:14:7a:07:43:d2:e6:08:56:6c:4c:0c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Validity
Not Before: Apr 28 10:00:21 2025 GMT
Not After : Apr 29 10:00:21 2025 GMT
Subject: CN=80b014e6dc34c63f580156ac86c50480af0a270f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:09:35:4b:71:36:e4:05:63:fe:eb:11:24:
5a:b6:72:8a:7b:c3:6c:c0:72:be:ef:46:7d:cd:09:
71:42:45:98:15:1e:c4:e5:07:8d:79:de:be:22:d5:
1d:0b:44:fb:58:f6:59:c4:88:17:48:f7:63:65:9c:
7b:ca:cd:5a:41:9d:d5:3f:aa:ba:99:7a:bb:c1:2b:
16:f3:f1:4a:78:6a:54:b3:69:9c:c4:fc:2e:bc:42:
bf:08:e4:c3:23:73:b6:14:c7:1f:82:ff:e1:90:1d:
ea:18:ec:e1:ec:ad:33:70:9e:36:72:0a:ec:86:19:
b6:c9:0d:d3:f3:d2:ec:22:1a:06:cc:26:d1:e3:70:
5d:ee:03:4c:e1:33:90:3a:43:cb:20:ac:dc:90:53:
c3:c1:4b:fd:23:92:c3:09:14:d7:b8:f0:02:52:7e:
f6:bd:ed:ce:24:d3:15:5a:c8:72:44:a2:42:53:c2:
df:f4:46:53:58:21:1f:e5:e1:ed:54:66:43:b5:7d:
94:b7:70:c1:25:79:c1:e6:b9:4f:f7:14:d2:e6:55:
35:1e:05:53:a8:24:ee:1e:0a:77:98:b5:27:21:af:
35:9f:ea:5c:e2:8d:ae:1b:11:9a:cc:b3:6e:29:d1:
af:90:e1:1b:ea:11:8d:e4:91:23:6b:40:ca:52:8d:
8b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B0:14:E6:DC:34:C6:3F:58:01:56:AC:86:C5:04:80:AF:0A:27:0F
X509v3 Authority Key Identifier:
keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d4:98:fd:23:97:00:bf:50:bc:22:a4:0c:60:b3:0f:c7:b0:
f3:19:45:ba:d6:d7:4d:4f:3a:63:1d:de:b1:83:33:4c:41:8f:
1b:dd:e0:f7:2e:93:7e:d2:df:19:f5:52:da:a3:a4:f5:78:87:
c2:d5:06:70:4c:53:ba:9d:3f:de:a1:95:c9:bf:40:47:12:a6:
ef:1c:3c:e8:51:03:85:ef:bf:9e:72:f7:a9:69:f3:2c:8c:dd:
f2:94:8e:23:16:b4:ad:94:41:b4:c1:d0:23:3e:c8:cd:61:fe:
fc:8a:b7:85:59:b6:b9:ac:da:5a:c2:ab:6f:54:62:b3:9e:97:
8a:e8:c0:1d:ca:9f:95:31:cf:7f:ee:13:e9:a9:9e:20:13:55:
1d:75:a3:4c:90:5b:43:7f:d4:1c:a7:d1:89:80:33:db:d0:1b:
bf:84:97:7f:85:32:a1:96:e0:0c:20:7a:02:ce:f8:53:98:4c:
c9:a7:8a:90:3b:c2:f1:dc:7f:8b:aa:62:15:d3:9a:29:93:5b:
e8:a2:bc:53:27:d2:4c:a7:59:1d:0d:81:15:59:b3:c4:3a:79:
84:58:f3:fb:15:9b:ec:e5:46:9c:92:a7:17:33:9a:e2:1f:e7:
10:d5:c7:8b:57:41:7c:87:5c:ff:00:a9:86:56:66:b3:9d:52:
a5:c5:48:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:57:16 2025 by rpki-client