Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
File: IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft (raw, json)
Hash identifier: c2NulN1ORTGjulp1Nr0iOri5uRuv5DsVV93cafGZJIY=
Subject key identifier: 22:71:31:18:A1:7A:E3:DD:08:C6:DD:38:96:2E:0B:CF:36:CE:21:39
Authority key identifier: 21:9B:7C:14:5E:0A:CF:81:48:41:8D:54:24:7D:FD:DF:FC:19:FA:4C
Certificate issuer: /CN=219b7c145e0acf8148418d54247dfddffc19fa4c
Certificate serial: 01967831B197CA530D6218016183497A72E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
Manifest number: C3
Signing time: Sun 27 Apr 2025 17:00:44 +0000
Manifest this update: Sun 27 Apr 2025 17:00:44 +0000
Manifest next update: Mon 28 Apr 2025 17:00:44 +0000
Files and hashes: 1: IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl (hash: HmdaiGEYFsl9dTi5jjQG1V862fNRLKr6VmSTS1f0Bog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:b1:97:ca:53:0d:62:18:01:61:83:49:7a:72:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219b7c145e0acf8148418d54247dfddffc19fa4c
Validity
Not Before: Apr 27 17:00:44 2025 GMT
Not After : Apr 28 17:00:44 2025 GMT
Subject: CN=22713118a17ae3dd08c6dd38962e0bcf36ce2139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:b7:f6:3a:a7:70:8b:c7:62:0e:db:5d:51:
7b:99:45:5a:4b:16:2c:bc:b5:ad:bc:cd:19:67:bb:
15:f2:34:a9:5b:fc:9f:43:56:12:c1:7b:3c:21:ac:
cc:3a:19:41:8e:ab:b4:2b:7f:f6:28:fa:93:be:79:
1e:31:4a:7b:ad:df:69:37:54:a0:86:9f:43:94:c5:
68:95:68:c4:6e:5f:9e:b0:f1:97:2f:54:d4:8c:f1:
43:a2:23:37:63:a4:c4:cd:68:db:ec:1c:d9:ca:86:
03:92:4a:dd:15:27:ee:b6:03:88:a3:b7:eb:e9:26:
57:b4:10:be:35:36:12:df:38:eb:a4:a6:c7:60:35:
03:12:78:94:ea:7d:b4:0a:3d:2b:91:64:69:a8:bb:
04:7a:72:ba:c9:70:24:ee:dc:60:07:2c:85:53:7c:
7e:1b:d8:03:c5:28:8f:36:e7:af:06:91:35:71:f0:
c4:ce:8f:ce:23:2b:e6:97:eb:cb:e1:7b:f8:2e:0e:
f8:cd:aa:2d:e3:b7:cc:db:bc:fe:1b:fd:49:74:9f:
ef:74:d9:5d:d7:82:28:4c:3b:ce:05:73:c0:fd:c6:
65:55:49:07:d8:11:23:19:67:2c:c1:39:0a:3b:a6:
f1:d1:5e:24:49:d4:f9:1a:72:bb:2c:ca:90:85:c7:
44:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:71:31:18:A1:7A:E3:DD:08:C6:DD:38:96:2E:0B:CF:36:CE:21:39
X509v3 Authority Key Identifier:
keyid:21:9B:7C:14:5E:0A:CF:81:48:41:8D:54:24:7D:FD:DF:FC:19:FA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b2:c0:40:ee:a2:c0:a2:33:0e:2c:d9:7b:41:73:2e:54:bf:
13:98:93:c2:ff:43:16:a8:d0:03:1d:33:a8:72:c8:f6:4e:fd:
9c:b2:34:27:f3:a9:b4:cc:f6:fd:bc:87:de:5d:6d:6c:3b:f3:
48:11:a2:1f:2a:64:05:9f:fb:71:91:5b:a8:3b:e4:7d:45:e4:
fb:ec:3b:3f:49:13:99:d3:4e:d6:0c:c7:5c:d3:1f:78:7d:87:
58:18:e2:f3:54:5e:ae:97:48:1b:42:99:38:ed:b1:5f:14:39:
11:28:75:d5:6e:62:83:54:77:09:b3:4c:d0:95:8a:0b:8c:86:
6f:20:fd:3b:7f:2e:62:b4:dd:2e:80:90:fa:6d:4d:46:ed:0c:
33:fa:b4:08:1d:e7:3f:cd:e5:06:ce:31:86:8d:a0:75:62:58:
ed:ca:21:46:b4:70:23:06:ff:9a:9d:78:25:8d:5a:e7:c2:44:
02:f9:d8:00:46:a3:5b:fe:b1:94:cf:c2:4b:bc:80:4f:3c:12:
8d:b7:e9:aa:7e:56:1c:13:ce:07:e2:8e:c2:84:18:27:97:79:
44:47:1d:cb:7c:d8:cf:ea:36:42:31:de:e0:e6:3a:d7:86:ba:
35:4e:39:e6:74:56:62:a3:f1:c6:b8:0d:d1:2a:5a:4d:c5:8c:
da:db:73:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:58:51 2025 by rpki-client