Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
File: Ftmm_lJPhujQhO3I1kpg361S3xM.mft (raw, json)
Hash identifier: 7nsM+RPL4gln7f63rD7dlmuZoTMvkYEB+mPgZA3NYLo=
Subject key identifier: 27:E3:3D:54:31:11:67:68:85:90:F9:89:C4:F0:9E:B3:5D:0A:C8:FD
Authority key identifier: 16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13
Certificate issuer: /CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13
Certificate serial: 01965CF16BCD2C6F9555DD3A87626F9BD4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
Manifest number: 0477
Signing time: Tue 22 Apr 2025 10:00:47 +0000
Manifest this update: Tue 22 Apr 2025 10:00:47 +0000
Manifest next update: Wed 23 Apr 2025 10:00:47 +0000
Files and hashes: 1: Ftmm_lJPhujQhO3I1kpg361S3xM.crl (hash: 7T8MLqcXeG/JaHq3gH1fIxnc70o8myRZe0PQG1eWG7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:6b:cd:2c:6f:95:55:dd:3a:87:62:6f:9b:d4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13
Validity
Not Before: Apr 22 10:00:47 2025 GMT
Not After : Apr 23 10:00:47 2025 GMT
Subject: CN=27e33d54311167688590f989c4f09eb35d0ac8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:a3:44:ca:c7:3b:3f:fd:97:33:ba:96:6b:
8e:60:c7:91:2d:5c:79:7a:25:c2:f0:32:b2:c2:37:
84:f2:75:ec:94:94:05:2e:f0:b4:0c:c8:66:09:48:
7d:a2:d1:65:e3:7e:56:19:fd:21:4a:91:f6:a6:04:
7b:9c:e1:8a:25:9f:74:eb:ac:18:b3:5f:ca:a3:eb:
9f:24:12:62:e0:b8:8b:c8:cb:d8:8c:61:ef:14:1a:
77:c2:d0:31:32:8b:3a:89:41:56:f5:6a:99:27:b5:
d1:a9:26:6d:b7:64:4a:88:14:55:ce:12:bb:02:3d:
33:94:bd:93:2a:7a:44:87:5e:60:4e:e6:84:2e:7a:
50:1f:c6:d8:31:69:f9:bd:bb:cf:a5:2d:50:97:06:
d8:26:1d:86:65:9e:4c:ef:6f:48:de:8f:3a:50:f1:
26:7a:af:db:12:b7:dc:0b:68:e4:06:4b:c8:00:0b:
ff:db:70:b0:87:6b:98:3c:32:9d:fd:57:ec:c6:0e:
83:76:1f:4c:b5:f6:22:3a:23:1e:06:7e:77:4d:38:
91:21:31:77:79:11:76:3d:a5:ab:2b:1b:91:f9:68:
75:df:1d:3b:6c:bf:60:5f:94:e3:fd:35:cc:22:a3:
ed:5b:b3:fb:1b:69:90:20:51:72:22:b7:e5:64:6a:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E3:3D:54:31:11:67:68:85:90:F9:89:C4:F0:9E:B3:5D:0A:C8:FD
X509v3 Authority Key Identifier:
keyid:16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:00:5c:ec:5b:af:81:ca:14:87:39:1c:28:8a:4c:0c:18:d5:
0c:79:2d:7e:7d:49:7c:a8:78:16:72:fb:3f:05:b3:14:2e:61:
bd:e3:98:c0:9d:d3:70:0b:3d:2e:b9:10:3f:d7:a0:4e:ba:70:
56:e3:14:01:e3:cf:b2:db:1a:92:77:29:35:b2:f5:14:4c:90:
d5:29:5d:5f:8c:6b:85:99:d0:7c:e8:60:04:2e:b0:c1:ba:89:
93:d4:45:f4:17:7d:5b:92:b1:2d:ac:e4:59:cc:9e:77:a5:b7:
c4:9e:c1:22:5e:e0:2e:85:a6:7a:ce:c8:90:f3:f8:50:91:ad:
1f:76:fc:3a:e5:f1:1c:ff:5f:d7:59:ab:29:b2:26:15:c0:80:
c8:df:50:cb:40:09:18:85:25:25:e0:d5:96:17:ed:67:07:f5:
7c:13:07:ca:cb:4e:79:7c:90:2c:58:d3:59:44:4c:4f:8a:99:
8c:3e:ef:31:4f:38:06:6d:84:3c:dc:86:37:90:86:c4:80:4b:
0f:2f:ab:e9:7b:f2:c0:23:2c:2e:80:2c:d4:65:cc:78:e2:c1:
5a:7e:25:27:c2:37:c4:24:4d:1b:c1:2f:27:60:bd:07:73:fd:
8a:c9:62:aa:df:d1:73:33:a9:62:d5:f1:c3:c9:01:5f:da:5e:
32:93:07:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:05:20 2025 by rpki-client