Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
File: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft (raw, json)
Hash identifier: S+/VFpJBsgjObuP+qPfRG0fybTqDhZ8GCtxGsBKnPHw=
Subject key identifier: 88:09:70:EB:F8:E4:0C:39:86:A5:E2:E5:3F:9E:49:65:17:08:5E:22
Authority key identifier: 7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24
Certificate issuer: /CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
Certificate serial: 0196586F7D194BB6C13E59C4C7B99ED3711C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
Manifest number: 0E2A
Signing time: Mon 21 Apr 2025 13:00:23 +0000
Manifest this update: Mon 21 Apr 2025 13:00:23 +0000
Manifest next update: Tue 22 Apr 2025 13:00:23 +0000
Files and hashes: 1: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl (hash: louRjwj/XUGRgxTrMUq9Dcoi6ruPFhc1sphca15LUqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:7d:19:4b:b6:c1:3e:59:c4:c7:b9:9e:d3:71:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
Validity
Not Before: Apr 21 13:00:23 2025 GMT
Not After : Apr 22 13:00:23 2025 GMT
Subject: CN=880970ebf8e40c3986a5e2e53f9e496517085e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f2:d5:49:0c:cc:b6:97:c5:41:04:45:b4:c4:
77:26:e8:82:24:42:39:03:6a:cd:fb:32:53:f9:cc:
ba:db:29:6e:11:2c:a9:18:bb:dc:cc:79:dd:0f:88:
94:18:e3:78:02:ac:2d:da:38:04:b0:d6:ab:66:74:
6c:7c:5f:f6:e8:5d:e6:23:c9:e5:19:a0:19:d3:49:
be:b8:0d:73:d6:5f:2e:eb:71:75:c0:c7:ec:26:67:
d5:69:f0:14:ea:97:d9:64:0d:42:49:31:30:4d:22:
d3:82:bb:75:f5:19:b7:1f:76:39:ef:2c:8a:85:83:
e1:ce:13:c3:3f:b2:a1:f5:55:6b:77:c2:23:e9:e2:
b7:7f:7d:08:65:49:e3:b4:d1:fe:4a:a9:c6:02:0d:
8c:ba:91:cb:c7:b0:1f:ee:2d:3d:63:45:4b:66:46:
ea:97:80:f3:a6:0a:7e:e2:52:bf:04:b9:f2:23:e2:
46:34:b5:9c:60:ff:0a:83:0e:c8:00:04:1c:00:21:
a1:0f:99:56:97:67:ea:5b:52:b5:52:be:0f:2a:92:
87:05:da:25:ff:45:8a:0e:d2:f4:82:00:7a:53:36:
02:e2:22:b6:93:42:71:5a:57:20:4c:63:6d:c4:4a:
0d:ac:99:e5:fa:40:df:e1:64:7f:9a:93:8b:ee:c3:
38:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:09:70:EB:F8:E4:0C:39:86:A5:E2:E5:3F:9E:49:65:17:08:5E:22
X509v3 Authority Key Identifier:
keyid:7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:80:21:cd:29:42:ae:d3:02:8f:17:2e:98:a9:3f:b5:1b:35:
60:28:75:0b:ea:5e:8d:5d:19:3e:37:17:a3:4d:53:a7:8b:1e:
01:c1:bc:3c:75:12:5e:f3:c9:c6:80:4b:87:89:8c:56:a1:54:
cd:3b:5b:23:83:b4:3e:c1:1b:ac:2d:fd:42:84:d8:18:70:3d:
ce:02:36:76:fa:78:e7:b0:6e:a9:43:36:79:78:95:bb:14:2f:
3f:72:0b:98:04:61:4e:67:bd:96:bc:48:e9:29:7a:90:33:e6:
21:9a:af:54:ee:23:74:ac:0b:97:8f:68:a8:ec:fb:6c:bd:8d:
8e:bd:7d:eb:a2:f4:99:3f:8a:e5:01:18:63:dc:17:cc:35:c8:
49:62:8f:3c:94:e5:51:cb:a7:f9:52:0b:86:7d:32:fa:99:e2:
1a:9d:16:cd:bd:1a:f2:7b:cb:6b:75:0e:85:53:15:7c:0e:e6:
ee:51:b6:52:b6:1c:41:58:20:ee:54:67:3f:35:eb:d5:a6:9c:
c1:96:ed:42:11:d8:ba:75:9d:da:05:71:c7:03:78:c8:d5:68:
3c:a6:9c:83:13:b4:98:56:c7:0a:a8:0b:2a:6a:fa:49:a5:75:
00:05:5d:2a:3b:89:4c:cc:85:36:53:b1:82:62:fc:48:65:36:
f0:2b:4d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:24 2025 by rpki-client