Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
File: f3NriKAkBNQwS92tX_VQSmgz57c.mft (raw, json)
Hash identifier: rH7BnCTAdX3X98f18qkXlEd1cNCU0JKG+hEIjRwbbHY=
Subject key identifier: F4:37:7F:F7:93:0B:D0:CD:15:73:A8:7A:67:C9:C4:B9:E0:5D:65:DC
Authority key identifier: 7F:73:6B:88:A0:24:04:D4:30:4B:DD:AD:5F:F5:50:4A:68:33:E7:B7
Certificate issuer: /CN=7f736b88a02404d4304bddad5ff5504a6833e7b7
Certificate serial: 0196591450768231AA53A5AE43C0C66E95D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 16:00:25 +0000
Manifest this update: Mon 21 Apr 2025 16:00:25 +0000
Manifest next update: Tue 22 Apr 2025 16:00:25 +0000
Files and hashes: 1: f3NriKAkBNQwS92tX_VQSmgz57c.crl (hash: hKYwkelj/okWo6vREdLxrxndDVl2LUYT78c5kQZlqyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:50:76:82:31:aa:53:a5:ae:43:c0:c6:6e:95:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f736b88a02404d4304bddad5ff5504a6833e7b7
Validity
Not Before: Apr 21 16:00:25 2025 GMT
Not After : Apr 22 16:00:25 2025 GMT
Subject: CN=f4377ff7930bd0cd1573a87a67c9c4b9e05d65dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:75:cf:22:37:0f:04:7b:ad:68:5f:a8:05:
35:0b:8c:6a:da:fe:69:35:3c:dd:12:d7:3e:c8:0c:
4d:87:6f:45:40:82:98:4b:a8:23:f3:b4:4a:67:e7:
e6:99:89:16:2e:55:02:fd:78:e8:86:23:e3:0e:27:
9e:04:c9:89:d6:8e:b2:6f:19:32:7e:9a:10:4e:e0:
97:0a:21:4c:49:31:1b:61:4d:01:4a:a1:0d:5c:95:
b6:a0:6f:82:e1:73:ec:96:a3:f4:a0:ce:1d:b6:0c:
c3:48:c3:a7:41:7a:cf:b8:9a:88:e9:90:41:ab:89:
e6:ad:df:ef:0b:1c:12:d9:6e:c4:ca:50:11:cf:19:
61:20:0c:34:22:77:69:c7:8f:b8:5d:9b:e0:10:5d:
d6:b8:d9:4f:c5:e3:0f:55:8d:f4:0f:84:b7:86:bc:
fb:68:ba:3d:81:d4:ed:0a:d5:84:b6:fd:2a:d4:91:
e4:18:ea:b8:b9:a1:62:74:6f:f2:c3:7b:85:a6:7c:
e6:47:70:97:a9:6b:b0:12:36:5d:ac:fe:a0:e4:d4:
ca:1e:e7:75:54:c0:2c:ff:87:65:8e:71:03:9e:ca:
4f:1c:6a:81:52:50:2d:3d:2b:e2:42:68:ab:96:22:
fc:39:c2:4c:5e:86:56:07:0c:a4:31:87:dd:e6:7c:
db:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:37:7F:F7:93:0B:D0:CD:15:73:A8:7A:67:C9:C4:B9:E0:5D:65:DC
X509v3 Authority Key Identifier:
keyid:7F:73:6B:88:A0:24:04:D4:30:4B:DD:AD:5F:F5:50:4A:68:33:E7:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e4:e7:bb:47:e4:81:8b:90:08:fc:f1:64:5a:cd:2a:90:29:
bd:51:af:d2:c7:2c:9c:7b:15:42:5f:b3:56:6e:b5:8c:d5:0e:
f6:31:e5:3b:c2:89:32:3d:65:34:ce:5f:7e:5c:3b:e0:a9:bb:
ea:2d:b7:64:33:0b:33:c4:52:01:d8:60:31:1b:a2:d1:4f:2d:
12:28:f4:0a:20:80:1f:5c:79:ac:04:eb:f7:70:22:cf:84:6c:
32:d2:77:8d:18:b5:36:f2:af:91:7b:3a:81:07:b6:bc:e8:cf:
dd:52:62:0c:7c:ac:3a:4a:b6:69:13:d9:4a:bb:9d:4b:df:32:
41:47:fe:a5:18:9c:b4:ca:73:8e:fa:9c:46:7d:01:cf:d3:9f:
49:4b:8c:f2:b4:03:f8:41:f5:49:e6:30:a2:d8:95:1b:3a:a3:
1a:7b:fc:5d:43:a4:c8:79:8a:df:03:ea:4c:13:ca:02:c9:5e:
28:4b:4b:06:c8:63:1f:fb:58:08:be:0b:f9:ca:f4:47:1c:2c:
e5:26:32:2d:6c:88:d5:57:d0:08:7d:7a:f3:2a:15:2f:65:e6:
1d:fb:41:0c:24:e3:5b:3b:c2:3b:2b:2d:4b:02:3b:ac:fc:1c:
9c:00:2b:43:ed:e8:88:23:a8:af:40:5c:50:f1:d3:5e:58:d4:
06:28:0e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:56:29 2025 by rpki-client