Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
File: fAMRalBjzm8X_OpTUcneSgxosN0.mft (raw, json)
Hash identifier: FkvNBZAReGehXvWVSCBTyoYS0IDBJtHKDcLDmskVMbo=
Subject key identifier: FE:F8:79:11:B3:20:EB:F8:41:F8:47:36:C6:9A:93:67:E3:81:30:19
Authority key identifier: 7C:03:11:6A:50:63:CE:6F:17:FC:EA:53:51:C9:DE:4A:0C:68:B0:DD
Certificate issuer: /CN=7c03116a5063ce6f17fcea5351c9de4a0c68b0dd
Certificate serial: 01965538856B5A1B3E0A3A59CBAE4266FFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
Manifest number: 09B5
Signing time: Sun 20 Apr 2025 22:01:29 +0000
Manifest this update: Sun 20 Apr 2025 22:01:29 +0000
Manifest next update: Mon 21 Apr 2025 22:01:29 +0000
Files and hashes: 1: fAMRalBjzm8X_OpTUcneSgxosN0.crl (hash: e/V1yeUCw4Mos650Xu56IBsHsglxvKF3Smu03XaNC/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:85:6b:5a:1b:3e:0a:3a:59:cb:ae:42:66:ff:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c03116a5063ce6f17fcea5351c9de4a0c68b0dd
Validity
Not Before: Apr 20 22:01:29 2025 GMT
Not After : Apr 21 22:01:29 2025 GMT
Subject: CN=fef87911b320ebf841f84736c69a9367e3813019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:61:07:c9:e7:56:29:d5:c9:e2:36:a3:6a:
3e:4e:0c:22:16:3a:ca:c5:2e:69:7a:23:a4:33:b2:
d9:7f:1e:fa:f6:c0:c6:14:0f:88:ab:73:22:4d:14:
99:f6:b9:e1:ff:61:71:9a:95:b2:e4:07:89:d0:7d:
1c:bf:4e:12:6a:9d:06:d4:bb:bc:75:bb:6c:b5:c9:
16:cc:0b:cf:b3:2d:68:01:4b:c5:0b:bc:43:5c:b2:
f7:66:90:0b:82:1c:38:e7:6f:20:f7:a0:5d:0f:01:
c2:2c:0a:8c:55:29:e4:eb:40:1e:76:b2:bc:e8:a7:
ff:80:18:84:cf:c8:20:22:0b:67:f2:8c:fa:f8:31:
aa:82:da:b7:9e:8d:24:48:3f:50:ff:a5:ea:40:54:
40:fe:ec:47:af:6a:b0:11:0c:d3:5f:9c:e3:82:fb:
61:6d:62:a5:98:e3:c4:78:30:3a:65:b7:23:be:06:
de:32:4a:e4:da:b1:7c:89:ab:91:2f:4b:67:50:35:
c0:d9:55:00:79:37:d4:ba:0b:55:7c:4d:fd:ef:aa:
8f:9d:d0:df:d3:d9:d3:c9:dc:4a:69:7d:bc:8c:98:
d8:f0:b9:dc:c4:7a:ef:92:a1:72:7b:97:ef:dd:be:
9b:32:8b:70:b0:df:d0:99:a6:d9:09:2c:17:f2:6b:
b7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F8:79:11:B3:20:EB:F8:41:F8:47:36:C6:9A:93:67:E3:81:30:19
X509v3 Authority Key Identifier:
keyid:7C:03:11:6A:50:63:CE:6F:17:FC:EA:53:51:C9:DE:4A:0C:68:B0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a1:14:7c:ac:6a:26:c3:3c:35:c0:9b:49:55:3e:1a:95:ea:
fe:5e:9e:70:26:7b:b7:ba:fd:60:ac:4b:5b:62:1f:63:92:d8:
8f:ba:2c:01:7f:1b:50:76:e5:e8:04:77:d4:d3:3a:ac:a7:13:
31:9f:68:7e:f3:fb:00:99:53:cf:4b:56:24:3b:d4:c2:b1:f2:
94:3b:ac:f5:b0:a9:ff:9f:be:23:65:37:93:33:6e:50:b2:f2:
1d:bc:75:36:e3:c7:8b:31:10:cd:47:4f:60:94:bb:4d:84:97:
98:8e:3e:17:22:e3:fd:5e:40:19:57:67:01:df:53:04:cc:2d:
85:32:c9:2e:54:0d:f7:61:1f:08:89:6a:d9:65:7c:30:92:47:
8d:f7:e1:f0:3a:48:b8:85:ba:1c:ee:24:56:1c:96:f1:c4:eb:
aa:c8:b2:06:47:75:02:8b:76:0b:78:75:b7:23:62:ea:db:44:
f4:3d:20:73:33:2d:85:e6:5e:ba:4b:85:02:03:27:1c:0b:6b:
65:c3:97:5a:cd:d5:a5:03:b4:f4:c6:24:b9:41:34:08:70:f1:
fe:24:ff:d8:64:b8:1b:58:48:25:77:7b:20:4b:9d:5d:f1:bf:
41:2e:be:d7:ca:32:a4:20:98:91:7f:3b:91:fc:04:d5:46:e8:
2a:25:d9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:00:31 2025 by rpki-client