Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
File: fGXsjueSu10KPMcJrcrptoWp3ls.mft (raw, json)
Hash identifier: 9ddIkBUX448S7SeqGM7amBrhjsIRk4JLLtz2Zh29YPE=
Subject key identifier: 0D:85:60:33:1F:5D:29:5D:AC:13:AC:CE:B1:4C:58:53:34:1D:F2:FC
Authority key identifier: 7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
Certificate issuer: /CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Certificate serial: 01965CF174F972077C17D5014782CF3DE72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
Manifest number: 0609
Signing time: Tue 22 Apr 2025 10:00:50 +0000
Manifest this update: Tue 22 Apr 2025 10:00:50 +0000
Manifest next update: Wed 23 Apr 2025 10:00:50 +0000
Files and hashes: 1: fGXsjueSu10KPMcJrcrptoWp3ls.crl (hash: QgBO+/2SHIle/ywMVhwt0dCIlaiw5owVXnTiP2QRuEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:74:f9:72:07:7c:17:d5:01:47:82:cf:3d:e7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Validity
Not Before: Apr 22 10:00:50 2025 GMT
Not After : Apr 23 10:00:50 2025 GMT
Subject: CN=0d8560331f5d295dac13acceb14c5853341df2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:70:b6:d0:42:8f:fa:bb:b9:b7:11:4b:b7:
13:72:6f:9f:1c:66:1b:b5:ef:8c:6f:fc:67:b8:03:
1f:fc:f9:37:68:c9:ba:7c:f0:3c:4f:eb:96:ae:c6:
cd:ca:7e:c7:ce:e9:6c:df:77:58:c6:43:21:60:05:
50:73:a3:0c:cd:6f:3e:eb:89:33:c7:50:d6:87:c0:
3d:15:59:85:0c:29:58:7d:f9:6f:39:e9:0f:22:d8:
11:f3:20:dd:4a:0b:f4:6d:d5:01:26:92:10:a0:b2:
d6:f6:bb:a0:81:45:42:f9:22:b2:98:c2:3c:0c:4f:
b7:e7:d5:5b:87:4f:11:d7:1f:b7:1a:d3:1d:d3:74:
5d:8e:73:59:2e:48:47:61:02:16:62:5d:ea:62:55:
3d:6f:66:b4:fb:13:36:4a:ef:a0:61:2a:f9:c3:2b:
a6:ea:f1:a5:25:21:ab:71:68:5a:83:5a:57:ed:51:
bb:a4:ee:3c:f3:4c:8e:26:9e:8d:b0:1c:4e:ad:9f:
95:0c:b1:45:d7:67:40:d4:65:fd:78:d5:03:aa:9a:
f6:6b:d1:3e:21:52:b3:4c:11:5f:c9:09:c5:bb:de:
a0:57:d4:4d:29:e8:37:6f:8c:a8:99:38:26:12:7c:
4f:8b:73:6d:56:2e:ec:27:71:ed:cf:22:af:4c:97:
d3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:85:60:33:1F:5D:29:5D:AC:13:AC:CE:B1:4C:58:53:34:1D:F2:FC
X509v3 Authority Key Identifier:
keyid:7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a4:1e:79:1b:25:8c:df:1d:9e:d2:21:9c:1c:b3:50:0f:e0:
aa:35:15:d3:be:62:9a:92:1e:65:e6:19:ed:02:c9:b1:dc:e9:
b1:41:72:10:8b:38:44:35:d5:24:41:c2:c1:e3:1a:27:3b:c1:
4b:1e:7e:5a:3d:96:ff:b9:b4:53:6d:db:19:56:e1:11:4a:03:
0b:41:c2:85:c0:07:d8:80:f1:9d:9f:69:b4:73:98:5d:bc:59:
2e:e0:0e:9f:f2:d1:42:b1:29:1b:a3:76:48:3b:80:73:7e:6c:
9c:4d:e6:d9:57:97:e9:a3:3b:89:a1:a7:fe:67:de:03:4a:61:
75:69:ab:6f:16:99:e0:c9:15:2b:88:24:05:0d:f3:4d:be:3a:
2e:75:37:1f:63:a9:d4:52:74:f6:b9:57:24:8f:61:44:d7:9e:
db:b7:fa:8b:47:87:7e:c9:ac:60:74:6b:a8:1a:87:5e:c3:ee:
66:4f:8b:f9:3e:6e:96:43:b8:fd:d8:90:cc:99:8f:48:84:55:
0b:ea:7e:2b:46:c8:67:fc:59:00:ec:73:e1:61:d0:d7:f3:b4:
36:2e:4d:89:a1:ac:0e:79:b2:e4:16:71:ae:c9:11:f9:86:54:
2b:82:0d:ca:f8:14:b6:e7:93:2a:aa:5a:b8:38:18:56:16:66:
ab:72:e7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:28 2025 by rpki-client