Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
File: MFTtpIzl_KSJJbrLoUeMisotOcw.mft (raw, json)
Hash identifier: eDY+19xj4I44ksBbyZQ0vpbM6gnp2KNMRI8G44vXFzw=
Subject key identifier: FB:B9:CE:EE:FE:A3:95:FF:09:A4:26:16:42:36:A8:53:46:AF:EA:7C
Authority key identifier: 30:54:ED:A4:8C:E5:FC:A4:89:25:BA:CB:A1:47:8C:8A:CA:2D:39:CC
Certificate issuer: /CN=3054eda48ce5fca48925bacba1478c8aca2d39cc
Certificate serial: 019653EE9571B48953F35001C27B24154E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFTtpIzl_KSJJbrLoUeMisotOcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
Manifest number: 1421
Signing time: Sun 20 Apr 2025 16:01:06 +0000
Manifest this update: Sun 20 Apr 2025 16:01:06 +0000
Manifest next update: Mon 21 Apr 2025 16:01:06 +0000
Files and hashes: 1: MFTtpIzl_KSJJbrLoUeMisotOcw.crl (hash: UKS+sP/xOcHgXQ2PFdDpUMKC3NoccBFtl9xthaSk0AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFTtpIzl_KSJJbrLoUeMisotOcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:95:71:b4:89:53:f3:50:01:c2:7b:24:15:4e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3054eda48ce5fca48925bacba1478c8aca2d39cc
Validity
Not Before: Apr 20 16:01:06 2025 GMT
Not After : Apr 21 16:01:06 2025 GMT
Subject: CN=fbb9ceeefea395ff09a426164236a85346afea7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:14:ec:3c:14:bc:4f:40:69:50:63:37:0b:
26:f1:47:20:7a:52:ff:6d:54:07:54:4e:dd:bb:e8:
17:1e:1d:98:f7:cc:c3:9b:c8:3b:8b:4c:3c:fa:21:
75:6e:71:5c:95:1a:7a:5e:69:99:2b:e2:bb:36:b3:
30:89:5d:29:ff:ac:1e:e6:aa:84:f1:b7:5e:84:f3:
23:25:b6:0a:c9:af:9b:f5:05:17:58:11:97:8b:23:
05:3e:b0:79:34:4f:e0:d2:99:31:56:13:c5:82:a1:
05:a0:ca:c4:56:2a:be:13:04:8a:d1:a6:a8:6c:ef:
cc:2b:a6:3a:3e:f0:6b:9e:95:13:0c:cc:20:6d:34:
42:1f:26:4a:69:0d:a4:20:96:50:2d:95:40:df:54:
b6:37:da:ed:25:62:fe:5f:1e:61:75:4c:96:c1:4f:
20:b3:6f:55:85:94:95:26:62:b2:49:ac:7d:a4:8c:
0a:f0:98:f0:57:2d:9a:e0:1f:31:e1:19:88:1e:4f:
18:26:4b:bb:08:80:5d:5e:59:0a:24:47:2d:c6:1f:
ed:67:69:fb:0e:f2:54:ea:85:95:5d:fd:1c:30:98:
34:ce:6c:ad:bb:67:d6:ca:6c:3f:ad:2f:11:38:79:
7f:8c:00:7c:4e:47:1e:32:52:29:35:bb:56:c2:68:
c0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B9:CE:EE:FE:A3:95:FF:09:A4:26:16:42:36:A8:53:46:AF:EA:7C
X509v3 Authority Key Identifier:
keyid:30:54:ED:A4:8C:E5:FC:A4:89:25:BA:CB:A1:47:8C:8A:CA:2D:39:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFTtpIzl_KSJJbrLoUeMisotOcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:58:a9:2a:e0:e8:3b:4b:2d:f1:c6:96:e7:2a:c1:6d:e2:cb:
33:ad:8b:d3:ac:9a:03:77:84:c0:9b:0d:38:76:d3:35:a8:9e:
6a:ec:f3:19:77:b8:87:97:85:16:c3:61:72:5b:ef:f9:77:c9:
c4:c5:e2:07:04:d3:df:0f:f8:64:f7:c8:68:ab:52:42:21:e8:
17:26:9d:36:14:87:e6:67:0d:f4:ba:64:04:d2:5d:6e:b8:24:
60:d9:81:2a:2c:42:0e:07:c2:a3:0d:5e:17:13:c6:12:77:e9:
2c:58:83:6b:6a:d8:1c:fe:21:16:d4:06:29:19:c9:fc:45:ca:
23:01:04:af:7d:2e:5d:45:2a:8c:ff:23:a2:21:1a:80:e0:a8:
e9:68:c6:69:fd:32:37:fb:30:35:cb:e5:bf:80:0d:87:8e:a2:
22:50:93:71:90:9f:03:2d:cc:d4:0e:39:76:e5:7d:82:05:8d:
15:ec:b0:ee:a0:30:f6:ae:0e:b3:b4:ef:9a:45:81:53:43:a7:
11:04:dc:31:f5:1b:8a:cf:ea:45:16:a9:b6:fc:7f:85:25:56:
86:dc:a9:a1:dc:22:8b:60:84:bb:e6:79:04:d7:98:c1:16:23:
6e:ac:2a:01:53:6c:bf:8e:b2:a2:8a:a5:9d:81:39:90:be:0d:
d4:14:90:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:55:59 2025 by rpki-client