Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
File: sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft (raw, json)
Hash identifier: 7ZJ45aUzBhhEpskk9T6lvaETUB0okqvYVEv5VlQMdCU=
Subject key identifier: BF:33:DD:53:1A:75:2C:8B:DE:52:D9:55:B6:E2:50:56:08:AA:5F:2F
Authority key identifier: B0:52:4F:65:5B:A3:C9:CA:5D:98:B0:57:C2:4C:0F:08:B7:19:D4:A7
Certificate issuer: /CN=b0524f655ba3c9ca5d98b057c24c0f08b719d4a7
Certificate serial: 0196545BA88FE597B94E5B71E3CA0B8924B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
Manifest number: 023F
Signing time: Sun 20 Apr 2025 18:00:15 +0000
Manifest this update: Sun 20 Apr 2025 18:00:15 +0000
Manifest next update: Mon 21 Apr 2025 18:00:15 +0000
Files and hashes: 1: sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl (hash: MQEHaCtzCyCablYayLuMsbcUOFjeXddNkjhDcaddf54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:a8:8f:e5:97:b9:4e:5b:71:e3:ca:0b:89:24:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0524f655ba3c9ca5d98b057c24c0f08b719d4a7
Validity
Not Before: Apr 20 18:00:15 2025 GMT
Not After : Apr 21 18:00:15 2025 GMT
Subject: CN=bf33dd531a752c8bde52d955b6e2505608aa5f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:b4:fa:6e:b9:2f:48:79:de:c7:eb:24:fc:
9a:54:d3:26:58:c4:e2:cb:89:34:82:c8:15:f4:4f:
5f:87:cb:49:5f:f0:13:67:d0:c9:2a:43:66:55:3b:
eb:ce:8f:12:2d:e9:9a:04:bf:09:f0:db:23:5f:f3:
f3:ac:ea:28:85:00:b2:ad:19:4a:16:1f:53:6f:c4:
e7:7c:37:fd:cb:b2:6a:6e:63:0e:4d:85:4e:9d:c6:
d0:77:7a:ba:ef:83:e1:59:77:df:52:2b:76:36:6b:
4f:85:4a:f6:0c:85:de:ff:be:1e:39:3a:e1:08:c2:
12:6f:03:67:c5:e2:97:de:38:04:fb:fb:31:b0:a2:
99:50:01:c1:42:cd:3a:7d:cd:bf:79:82:22:cf:f1:
b4:a8:07:83:f2:a9:7a:69:ba:a0:c9:51:f2:5c:16:
0a:49:15:6b:2c:3c:89:3d:01:70:a8:1d:38:b3:e4:
e0:43:c3:86:e1:d9:f7:32:57:c8:d9:37:cd:15:c3:
1f:13:a4:10:db:f4:72:b6:ed:ec:09:16:b9:52:16:
8b:fd:fd:27:70:cb:d6:fb:e9:11:e7:fa:8c:b8:d9:
4b:5f:0c:c5:42:c8:f6:c5:de:09:3a:e5:c5:6c:93:
a7:16:73:90:9f:c7:4d:3d:46:74:05:a4:d6:9a:03:
b2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:33:DD:53:1A:75:2C:8B:DE:52:D9:55:B6:E2:50:56:08:AA:5F:2F
X509v3 Authority Key Identifier:
keyid:B0:52:4F:65:5B:A3:C9:CA:5D:98:B0:57:C2:4C:0F:08:B7:19:D4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d5:5a:10:6c:40:c4:78:7a:db:a2:fe:98:24:35:da:6e:41:
11:38:f8:e4:0c:d1:bc:5f:48:57:b2:a7:51:bf:79:40:0e:4a:
b3:57:54:e8:4d:40:1b:53:59:8f:f3:db:51:26:af:35:66:88:
86:dc:e4:69:22:27:ae:60:65:b6:bb:04:ff:71:94:4b:41:a6:
5e:5a:fb:76:16:d6:8d:bb:b6:d2:03:00:fc:e3:2d:9c:03:c7:
28:6a:41:f5:04:a7:c7:64:91:da:31:e7:68:84:39:44:63:fc:
c1:24:22:3a:6e:23:f1:ef:4d:6d:b2:67:d4:70:e7:d6:8c:ff:
d4:2b:c8:64:82:e4:35:da:05:9e:21:75:8d:9d:c2:13:70:30:
e4:3b:95:95:04:19:d5:3c:37:53:41:23:19:b0:d5:c3:a5:19:
39:91:2b:3d:46:ac:c9:91:43:7f:1e:df:59:cf:5c:17:de:d6:
14:ad:d7:b3:6f:ea:9e:d2:7a:d7:a5:bd:87:88:fb:49:ed:9a:
f9:70:58:03:b1:70:dc:70:7f:20:ce:9f:f4:8c:47:da:1a:a7:
55:70:d2:99:12:14:df:7f:c5:68:33:b8:ce:0b:cd:de:8a:04:
e7:63:27:92:87:2f:d9:17:62:0a:09:df:a3:6d:6c:87:4c:65:
5c:c2:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:26:27 2025 by rpki-client