Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
File: fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft (raw, json)
Hash identifier: aLwTF4q9bdcEXfmmrHHnOG4+nNkiGIwtfhnQau11Vu8=
Subject key identifier: 9F:78:2E:F5:00:26:84:D4:A9:61:A0:DC:D3:31:76:C6:79:DD:99:4B
Authority key identifier: 7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5
Certificate issuer: /CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
Certificate serial: 019656B7DC45D2CD32A7F9CB946084816A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
Manifest number: 020B
Signing time: Mon 21 Apr 2025 05:00:12 +0000
Manifest this update: Mon 21 Apr 2025 05:00:12 +0000
Manifest next update: Tue 22 Apr 2025 05:00:12 +0000
Files and hashes: 1: fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl (hash: Hl8MsHiLYRSf9R344KhIj6SAr0qD4KEef4xCsop2h7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b7:dc:45:d2:cd:32:a7:f9:cb:94:60:84:81:6a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
Validity
Not Before: Apr 21 05:00:12 2025 GMT
Not After : Apr 22 05:00:12 2025 GMT
Subject: CN=9f782ef5002684d4a961a0dcd33176c679dd994b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:cf:d1:0a:51:11:69:c5:e8:72:3c:9a:bd:
33:40:da:64:a7:d5:ef:35:ed:b1:31:17:13:96:b4:
9c:1f:9c:66:32:81:88:b2:ea:b9:19:88:5e:c2:de:
b0:cb:92:cd:22:4b:8d:3a:bc:8a:ff:46:b7:a1:8d:
14:7c:99:a4:1b:7e:b8:32:35:d0:70:0b:d0:7b:03:
43:96:b4:93:72:7b:60:d9:35:48:f7:0b:b7:6d:b7:
db:6d:c3:6f:06:78:10:dd:b9:65:d4:6b:00:45:b5:
e4:bd:5f:21:74:1d:d7:1b:99:55:a5:0e:a8:89:6b:
71:b3:c2:5f:2b:40:24:20:ab:05:aa:12:9c:09:9e:
14:97:dc:54:1a:d7:8b:0e:a7:f1:ff:f2:f9:09:28:
1a:f9:85:b2:da:99:24:2a:81:af:e9:0a:8e:61:d1:
23:d3:c8:79:4f:fe:11:20:a1:19:ca:20:7b:ef:0f:
98:d5:d7:b4:71:74:5f:5d:55:02:fb:8e:9a:dd:49:
c1:37:f6:29:5b:e8:87:8e:17:1d:d1:8c:8b:96:77:
31:62:fa:46:b5:f4:74:53:be:d6:62:93:a4:0e:7d:
88:7d:2d:5b:4b:99:57:5e:a7:8b:56:28:58:ce:5a:
38:9f:09:9f:55:2b:77:f8:42:ef:45:6d:6e:0c:17:
cc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:78:2E:F5:00:26:84:D4:A9:61:A0:DC:D3:31:76:C6:79:DD:99:4B
X509v3 Authority Key Identifier:
keyid:7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:92:09:fd:c6:2b:d9:26:36:4c:fd:3c:70:2d:8a:96:78:57:
86:d2:b6:13:7a:42:81:a2:0d:3f:28:5d:06:86:75:e7:d8:b1:
20:f5:1a:08:35:60:e0:47:6a:49:f7:31:83:7a:61:5d:9a:54:
e4:5a:74:82:aa:bb:d3:3a:b7:ae:3b:f2:fa:9f:e8:4e:a7:25:
a7:7a:d2:41:ba:c5:8a:73:a1:f8:a1:fb:7c:25:7c:8f:2d:9c:
e5:e2:d8:c3:3e:30:9f:00:1a:12:e3:3b:8b:c8:a3:f9:7f:e7:
ee:ba:7c:f8:a8:74:09:de:2d:db:f4:64:7f:47:77:af:77:ff:
b4:f5:67:63:92:6c:7b:12:54:98:cf:b2:af:69:32:8e:d1:5d:
f6:df:51:fc:b7:a7:24:c3:45:05:64:2b:87:cf:9a:7f:b0:c5:
00:27:7d:1d:4a:e1:7c:05:3c:fe:13:fa:38:2b:52:b6:35:e9:
08:28:76:39:db:11:ff:78:0e:2f:12:90:b5:0e:15:50:11:cd:
07:b6:a9:e3:4a:d9:7d:10:1f:ef:b2:90:bb:fd:ce:bc:ee:25:
a4:b4:a8:f8:19:e2:5d:f5:99:ad:3d:b0:24:69:e6:83:87:4d:
9e:4a:2b:06:b4:db:bf:ec:61:da:8a:dd:a5:94:51:3f:c3:cd:
7d:77:3f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:48:19 2025 by rpki-client