Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
File: KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft (raw, json)
Hash identifier: NQCnZzCjCUeVuOLPty+wuBq5q9QCu7W5NAsPVyTyK7k=
Subject key identifier: 11:6D:39:BB:01:13:94:7B:EA:53:A8:4A:C7:92:17:14:ED:01:C5:BD
Authority key identifier: 28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
Certificate issuer: /CN=28fa456d1c23678621954ffbf493a323de2c4484
Certificate serial: 019681A25A88669E8F1AE63E46844B5C26D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
Manifest number: 0A50
Signing time: Tue 29 Apr 2025 13:00:22 +0000
Manifest this update: Tue 29 Apr 2025 13:00:22 +0000
Manifest next update: Wed 30 Apr 2025 13:00:22 +0000
Files and hashes: 1: KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl (hash: 3+TBmGh7FFVJpLVbh5oh2Srbr4LiUFRVrt0l/XfIACw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:5a:88:66:9e:8f:1a:e6:3e:46:84:4b:5c:26:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fa456d1c23678621954ffbf493a323de2c4484
Validity
Not Before: Apr 29 13:00:22 2025 GMT
Not After : Apr 30 13:00:22 2025 GMT
Subject: CN=116d39bb0113947bea53a84ac7921714ed01c5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8e:50:b4:47:75:f9:08:74:21:a0:85:7a:03:
3c:80:a6:b1:c5:3e:70:70:3c:9c:67:10:f0:6f:f9:
e2:80:7a:f1:6c:77:16:0a:e5:61:cc:8d:c5:f1:0c:
04:1d:f9:19:b3:28:15:52:65:b0:22:89:14:de:7c:
4c:a2:0d:ce:6d:1d:fa:e8:ee:e1:cc:49:de:d6:9b:
b7:a0:11:d7:a8:6d:50:ff:81:44:a8:81:f9:91:92:
64:2a:4e:c9:a1:cb:b8:a9:1f:4e:ba:9d:ce:86:21:
d2:24:ef:d8:8b:ce:8c:f5:a3:84:f0:b3:32:64:30:
88:0e:03:84:78:78:81:50:30:0b:be:77:48:a6:9e:
91:50:5e:48:a9:1b:d4:a2:b6:55:c6:f4:ee:e3:a1:
b4:8b:42:79:e1:d7:d5:89:5b:3e:50:b9:ef:44:11:
b9:aa:bf:99:a6:0f:3f:df:27:cf:5a:90:02:54:cc:
e2:48:4f:8f:c3:dd:2e:12:42:a8:b1:b6:f8:59:ba:
dd:f7:94:55:d9:57:fa:b3:2e:9c:75:ce:de:8e:d0:
b4:b3:26:8d:2f:b7:00:e9:31:af:3c:2f:44:fc:88:
d9:29:1c:00:5b:d0:06:b5:09:fe:96:76:2a:f7:56:
3a:1f:03:07:33:01:b4:c0:39:d3:52:c1:84:79:74:
36:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6D:39:BB:01:13:94:7B:EA:53:A8:4A:C7:92:17:14:ED:01:C5:BD
X509v3 Authority Key Identifier:
keyid:28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f9:da:b8:e0:fb:1a:ae:1a:f5:8f:4c:1f:0c:d4:bc:e5:07:
84:9e:20:d5:43:80:42:b6:31:ce:97:8c:de:a1:df:bd:48:82:
c4:e9:b0:dd:b2:61:3a:04:d6:15:e0:26:60:25:90:db:c2:f1:
ab:85:9f:c3:c4:12:41:89:3e:b5:e0:20:3a:88:c5:02:16:10:
a2:53:e5:31:63:20:0b:e6:92:cb:31:df:95:ba:59:61:ee:08:
e1:48:65:c2:d5:a4:e0:ae:0d:f2:e4:12:ec:dc:4e:60:c9:79:
e7:ff:cb:35:59:da:56:1e:25:bd:0f:91:46:50:be:26:f4:de:
52:fa:ee:94:61:f1:5c:3a:7f:b6:1b:f7:ff:a0:62:8e:55:91:
a7:88:84:f8:7f:55:a5:a6:9c:9b:a5:b0:62:a3:70:96:94:b5:
34:c9:6d:38:63:5b:84:34:91:87:86:ae:58:be:7a:e2:97:cc:
d7:b0:0b:b3:79:36:4c:b6:b8:f6:c9:fc:1b:19:24:06:db:66:
ac:31:fb:21:a6:6e:39:ad:11:87:da:3b:68:47:05:4e:36:ba:
f1:79:1d:78:43:00:f4:e0:c8:62:ea:55:b5:51:4e:0e:e5:c4:
d3:af:ac:ce:c3:fc:bf:d5:9e:bf:cf:64:30:15:80:02:0e:39:
66:54:f8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:09:17 2025 by rpki-client