Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
File: fjGzT4SD1T_rGSrhFFSs43vH9YE.mft (raw, json)
Hash identifier: mb+9eP0yVOtdPzLEIy8MO+yKA2rGHwMsw1CCWbKRtzI=
Subject key identifier: 99:CB:3D:38:CC:42:AF:66:27:22:06:1F:14:4D:1C:EF:F8:55:F7:34
Authority key identifier: 7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81
Certificate issuer: /CN=7e31b34f8483d53feb192ae11454ace37bc7f581
Certificate serial: 019657948F2488BCEF70821A779534861BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
Manifest number: 02CD
Signing time: Mon 21 Apr 2025 09:01:15 +0000
Manifest this update: Mon 21 Apr 2025 09:01:15 +0000
Manifest next update: Tue 22 Apr 2025 09:01:15 +0000
Files and hashes: 1: fjGzT4SD1T_rGSrhFFSs43vH9YE.crl (hash: 8k+1eTdsBlCi6oYMWiKQVaciimHX4AV/q4gfgKAgGdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:8f:24:88:bc:ef:70:82:1a:77:95:34:86:1b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e31b34f8483d53feb192ae11454ace37bc7f581
Validity
Not Before: Apr 21 09:01:15 2025 GMT
Not After : Apr 22 09:01:15 2025 GMT
Subject: CN=99cb3d38cc42af662722061f144d1ceff855f734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e5:2a:50:fe:67:35:48:01:c6:5f:59:6c:06:
9c:d0:9f:98:dd:10:ea:e2:8d:cc:50:60:7e:f5:5b:
51:9f:be:40:be:b9:6b:45:c3:24:07:42:23:77:1d:
a2:05:38:82:c0:ef:9e:34:40:1d:af:57:d9:d9:6f:
6f:f3:d3:86:9a:5f:eb:13:fd:03:4d:0f:db:cd:c6:
d0:b7:de:3f:e2:a8:f8:75:f5:5f:86:60:39:f6:65:
b1:45:c0:b7:55:6a:bf:c8:ac:c0:52:4e:15:6d:87:
9d:f3:05:14:09:f2:03:48:95:5c:7c:7e:5a:99:b6:
7a:3f:b1:ab:3e:9f:65:5f:af:03:2b:9e:e1:ec:71:
ad:c4:b2:ce:c4:33:33:00:56:41:d8:d7:04:28:f7:
cd:07:4d:07:f8:21:bb:f0:e0:4e:54:7a:2b:d6:f5:
13:c2:9a:e6:61:7f:c0:42:42:68:b5:04:12:63:86:
f9:d9:42:02:bb:05:95:f9:53:fc:f2:98:a1:fd:bc:
96:8d:c6:29:ca:ba:ab:03:48:93:7d:32:17:ef:10:
ef:f2:69:77:89:03:8b:e4:0e:9d:fc:0a:0c:a5:85:
94:b6:fe:84:67:b3:6b:ec:28:7b:fd:5c:b6:cc:34:
36:11:35:bd:93:3b:37:1b:05:b0:78:c1:be:4a:b9:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CB:3D:38:CC:42:AF:66:27:22:06:1F:14:4D:1C:EF:F8:55:F7:34
X509v3 Authority Key Identifier:
keyid:7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:06:41:e5:57:e6:5c:51:2e:49:f5:ee:45:41:64:03:63:81:
34:80:e7:b2:25:60:b5:81:72:5c:e7:26:f8:7b:05:44:d3:44:
7d:90:3b:47:2a:43:9c:cc:b6:45:e9:e1:b7:e1:46:d8:7d:52:
62:c2:d6:f2:b0:ec:fa:31:35:4a:29:39:24:38:93:a6:67:82:
11:41:53:95:2f:46:10:d1:8c:9f:95:e8:34:bf:36:ef:11:7d:
49:b7:45:27:3e:3e:cd:59:cd:b2:79:96:89:79:64:ec:be:30:
d6:cf:2a:f6:92:f0:b2:b4:ef:28:04:1c:a2:f4:fb:13:0d:3a:
72:5d:9a:e7:e2:57:6b:47:85:c8:5e:65:fb:e5:7b:69:c3:14:
1d:ae:1e:61:13:7c:2c:d3:93:da:c6:94:59:89:ad:85:17:78:
6d:01:ea:31:03:08:17:13:1a:bd:e9:cf:2e:30:dc:35:a6:55:
0c:bf:5b:83:07:4d:02:18:34:d2:46:d4:72:91:c5:44:fb:f2:
70:95:d9:a7:b4:47:5b:6a:67:d5:57:cf:d3:dc:8e:9e:45:0b:
38:9d:92:28:c0:85:1a:14:2d:81:c4:52:96:61:04:fc:d5:d5:
d7:f7:df:58:51:6f:4d:d6:ef:ec:46:d6:f7:09:cc:c2:da:0b:
08:99:7b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:42 2025 by rpki-client