Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
File: fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft (raw, json)
Hash identifier: 9Tlkp2hYWaUeyUHhEmoxDMM2OOOskcsuZuvOxOXQJAY=
Subject key identifier: A8:B1:13:83:CD:16:D6:3A:EE:78:40:4C:2B:45:05:3B:DE:93:3B:EA
Authority key identifier: 7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
Certificate issuer: /CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Certificate serial: 01965B0391B4E0AE6D50D6FF327D898D4756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
Manifest number: 0833
Signing time: Tue 22 Apr 2025 01:01:22 +0000
Manifest this update: Tue 22 Apr 2025 01:01:22 +0000
Manifest next update: Wed 23 Apr 2025 01:01:22 +0000
Files and hashes: 1: fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl (hash: J3TTkDCx3NRPUFV741wPHKe+OdJEUsg2tZSDhFNhJpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:91:b4:e0:ae:6d:50:d6:ff:32:7d:89:8d:47:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Validity
Not Before: Apr 22 01:01:22 2025 GMT
Not After : Apr 23 01:01:22 2025 GMT
Subject: CN=a8b11383cd16d63aee78404c2b45053bde933bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:96:83:6e:a1:1e:c0:c5:1f:41:76:75:b3:
3b:ca:30:a5:aa:a0:d3:27:ee:f3:dd:f2:42:6a:3d:
05:bd:b9:91:17:ec:9b:e3:41:af:8e:17:f3:a5:4a:
73:59:38:e6:ca:61:21:4c:c6:32:bb:fa:7e:5b:6d:
79:7d:bc:fd:66:fe:be:bb:77:c9:a1:0a:65:ac:1c:
72:8f:20:8f:5e:14:62:be:0e:40:50:ab:b6:72:9f:
ae:0a:b1:52:5e:d1:42:46:6e:34:48:b1:db:d7:a6:
18:b5:7d:06:2a:73:06:bf:7f:80:55:88:92:eb:93:
26:f4:3b:d1:0f:4e:b1:7a:60:77:53:fa:bb:b8:92:
99:26:2a:8b:12:24:93:72:15:84:35:c0:94:a9:0f:
e7:74:dc:75:66:be:c5:b6:94:d4:a9:1a:82:90:bd:
a5:a4:15:ee:d3:39:b4:0f:77:1d:a2:5f:4c:b7:b4:
36:74:ee:f3:7c:d2:13:bb:2a:95:b7:cc:6a:93:fc:
8c:7c:40:58:cc:8e:bd:78:35:9f:23:d5:45:cc:af:
91:ed:b5:78:98:82:6e:37:02:1f:18:c4:6e:1f:6c:
1b:1c:0f:14:d6:f4:f0:fa:63:07:b6:ea:0a:c8:ab:
13:f9:3b:38:e9:57:03:2c:1d:1c:f4:54:aa:d2:a8:
13:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B1:13:83:CD:16:D6:3A:EE:78:40:4C:2B:45:05:3B:DE:93:3B:EA
X509v3 Authority Key Identifier:
keyid:7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0a:3a:b5:5d:fa:70:c4:52:a9:d9:77:7a:aa:9a:3d:a8:be:
1f:3e:ef:b3:0c:18:cd:df:8a:f5:a6:62:60:33:ef:84:15:8b:
07:65:36:7b:43:fc:54:5a:0d:2a:90:44:8d:d2:13:55:b0:e5:
ba:11:c4:e2:ca:f9:b9:85:5d:0f:34:7a:c7:0e:e4:65:3d:f8:
26:28:c8:5f:b3:25:f8:fb:c4:18:b6:5a:d7:57:38:5e:2d:16:
75:d9:68:ac:6a:5f:39:2b:f1:e4:52:76:f0:d4:2d:b7:b7:00:
66:ee:61:2c:7d:bd:1e:d2:55:cb:2e:7c:c3:00:d8:ca:96:9c:
1c:ce:96:b4:2d:7a:80:6e:0d:9b:10:1a:0b:84:85:ce:4f:3b:
a6:4a:96:e4:ef:f1:20:d3:64:dc:c4:ba:15:cf:e4:d6:8b:ae:
db:13:d2:81:cf:d0:6d:b7:cb:5b:32:57:91:ee:3b:16:65:c6:
07:dc:56:d8:7f:ca:2c:5b:ff:44:b7:3e:0b:7e:98:a2:cd:30:
9f:99:18:33:90:43:db:a4:44:08:22:86:7d:dd:6c:6a:34:6f:
e3:fe:0a:20:d5:45:9e:3b:e9:1e:e9:7a:a8:2f:6b:67:ed:bf:
f3:8d:58:15:0c:92:16:53:4f:fb:e1:a4:15:29:18:30:19:a3:
ff:38:9c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:56 2025 by rpki-client