Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: RyGN3PKOd1dHn1xtaI1vhGP/HbQrWrc78mgp7MU4B1U=
Subject key identifier: D2:4A:19:2A:BE:03:4D:A5:2D:E5:BF:32:A2:42:EF:CD:DC:69:C0:72
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 01967868E4A939DA6C91678C5ADC4AEF6612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 18:01:02 +0000
Manifest this update: Sun 27 Apr 2025 18:01:02 +0000
Manifest next update: Mon 28 Apr 2025 18:01:02 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: XRBt2ZH0nNzR4DRY/sJdYgAo8ak7BdPwm6Ae3+yWJvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:e4:a9:39:da:6c:91:67:8c:5a:dc:4a:ef:66:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: Apr 27 18:01:02 2025 GMT
Not After : Apr 28 18:01:02 2025 GMT
Subject: CN=d24a192abe034da52de5bf32a242efcddc69c072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:9a:75:ff:00:f3:65:3b:a4:b5:1c:51:2c:
ac:f7:06:e6:60:73:12:07:2c:bb:ae:d5:3a:7a:bd:
75:e3:26:c7:1a:f0:43:de:07:15:48:e3:ff:66:bb:
08:dc:ef:fc:f2:ea:5a:12:ee:4d:4e:59:b9:7a:38:
b0:57:bb:f8:59:9b:fd:7d:c3:8f:27:cc:14:d3:20:
87:d7:5e:d4:02:11:c1:4a:fa:94:cb:86:6b:52:34:
16:65:a6:8a:44:10:be:22:3b:8d:dd:03:09:b1:68:
b3:de:a3:91:de:ec:72:4f:c3:d1:05:e9:a8:c6:ad:
57:1c:7a:59:6c:53:31:ab:6c:dc:43:9d:a6:5f:58:
90:20:6a:82:32:37:6a:80:e7:43:f1:0b:73:d4:b2:
d9:86:39:ad:35:a4:5e:88:43:6d:25:72:db:67:2c:
7d:06:d5:43:4d:b4:58:3e:07:e6:71:a4:7a:21:3e:
6d:5b:f8:73:c7:f0:c5:45:82:e4:6a:52:6f:ce:77:
a9:7c:0a:7e:bf:b5:6f:09:ea:26:9e:f6:e1:27:31:
4a:e0:59:d4:d3:f5:0d:e4:7c:0e:f4:8a:6e:02:85:
26:0d:83:34:36:87:dc:76:3b:3a:d4:bc:04:93:cc:
2b:12:d6:0e:54:7b:b3:a0:a9:ba:ae:77:d3:a7:36:
92:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4A:19:2A:BE:03:4D:A5:2D:E5:BF:32:A2:42:EF:CD:DC:69:C0:72
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:55:6c:ef:d9:37:f2:3f:97:2c:35:30:75:45:88:1c:0a:5a:
f3:89:31:ae:06:06:22:1a:39:12:39:b1:f1:0e:c7:ab:54:f6:
6f:c8:26:e8:dc:95:d6:58:e8:79:3c:47:ec:53:16:b9:ca:4d:
76:79:69:3d:10:6e:0b:7b:7a:4c:94:51:ed:c5:3a:b8:4b:bb:
1d:3d:c1:e2:ed:af:fc:01:f3:ce:67:b8:03:59:ea:07:48:09:
20:30:1f:e7:d8:83:56:6a:b7:f7:18:72:69:36:2f:4f:57:72:
d6:fb:1a:07:95:3e:17:00:27:86:ab:c0:fe:f3:11:e6:e9:db:
37:38:cd:bd:f5:61:75:1c:71:f9:33:79:f9:29:cd:27:1b:cf:
f3:76:60:35:1d:f5:0d:70:20:c2:50:94:7e:3e:84:67:3f:09:
76:fd:a8:55:f3:8e:b7:b3:ad:8c:ce:e9:5a:42:f3:69:d4:76:
16:16:0b:c2:71:a8:2a:f4:a2:81:f6:db:4a:14:ea:08:2e:43:
df:b5:85:7c:e4:65:2f:d0:26:04:53:db:3e:9d:0d:82:7f:21:
19:69:83:4a:d1:09:cc:72:b0:f6:4a:2a:1b:a1:8b:f6:b1:34:
bb:ae:72:10:2d:47:db:17:b4:ef:7e:40:45:a5:1d:ba:6c:23:
de:d5:c0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:28:18 2025 by rpki-client