Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
File: FyearRffa_ZXVlrlqT65CYU3Sjw.mft (raw, json)
Hash identifier: iAlXHDHlmTJuGyEN4WAmuEuUlKE89/SDwzAN+DdarXQ=
Subject key identifier: 91:86:1F:26:BA:28:19:43:32:10:22:09:E7:62:09:BF:70:80:3F:AC
Authority key identifier: 17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C
Certificate issuer: /CN=17279aad17df6bf657565ae5a93eb90985374a3c
Certificate serial: 01965726D2D80ABF49A6CA934B271F87A0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
Manifest number: 148F
Signing time: Mon 21 Apr 2025 07:01:23 +0000
Manifest this update: Mon 21 Apr 2025 07:01:23 +0000
Manifest next update: Tue 22 Apr 2025 07:01:23 +0000
Files and hashes: 1: FyearRffa_ZXVlrlqT65CYU3Sjw.crl (hash: kNeixaQwarMyGAxOxc0l5Y6A+cK8DRo/bJFb/GPEBiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:d2:d8:0a:bf:49:a6:ca:93:4b:27:1f:87:a0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17279aad17df6bf657565ae5a93eb90985374a3c
Validity
Not Before: Apr 21 07:01:23 2025 GMT
Not After : Apr 22 07:01:23 2025 GMT
Subject: CN=91861f26ba28194332102209e76209bf70803fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:49:e2:2b:97:b0:8d:0e:ad:25:78:8a:f3:
f9:2e:ab:f6:8b:5f:62:34:a5:da:ff:26:3f:75:19:
4d:12:ea:36:9a:51:ea:0d:8b:e2:9a:c7:06:9e:10:
f7:65:e7:f9:44:30:90:c7:93:eb:e2:40:01:72:a1:
45:a7:f9:31:41:cc:4c:a7:c6:c3:13:14:c9:e6:9d:
f0:85:30:4b:09:a2:92:f7:34:b3:4b:82:70:45:5e:
fd:7e:53:9b:07:c5:e2:53:57:ed:3d:de:c8:e4:0e:
5b:51:1f:e3:cd:c4:86:f9:b2:c8:f6:c1:0d:1e:2e:
27:d5:b2:75:b8:ba:13:f1:58:b4:73:70:5d:7a:ab:
d1:5c:e5:f9:f5:10:bf:90:2d:ae:54:f6:ae:9f:c7:
c7:36:de:81:94:73:57:6f:3a:c7:4b:1f:72:da:e7:
3b:fb:41:03:e5:4c:04:3a:a5:a1:94:d0:0a:6d:5d:
1b:46:5e:44:64:72:a6:c7:77:6c:7e:96:74:46:32:
6e:4c:81:9e:74:df:60:fb:62:e9:59:99:c3:ef:77:
56:a4:87:1d:9f:89:ae:ed:ed:fe:d4:a4:96:e9:bc:
b8:f1:5a:83:81:c2:66:9e:55:d0:23:94:3f:e9:62:
81:c9:4b:2f:e3:de:53:8d:98:ed:95:13:9c:36:2c:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:86:1F:26:BA:28:19:43:32:10:22:09:E7:62:09:BF:70:80:3F:AC
X509v3 Authority Key Identifier:
keyid:17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:b3:3d:90:b6:e0:85:fa:fc:89:40:c2:a6:e1:87:07:57:24:
9c:c1:4a:30:a4:9b:e5:68:06:c7:e8:c2:dd:e8:a9:82:aa:44:
68:7f:79:88:93:17:40:6c:09:22:19:c1:3b:e7:31:e9:39:e0:
e8:8a:10:ec:02:18:c2:06:da:f6:a0:39:ba:c1:df:40:df:c1:
e2:c0:7e:cf:c4:b1:be:6f:45:5a:d7:f1:94:76:03:41:90:d6:
9a:a6:eb:68:1d:42:57:ad:e6:09:61:73:ee:8d:a3:73:1c:e1:
d7:5e:6a:b2:ee:21:b1:81:d3:7e:e7:d0:3e:f8:44:0d:76:b6:
31:16:9e:8f:9b:70:d4:b8:f3:b5:1a:bb:7b:23:ee:0d:43:65:
62:8a:f6:f9:e0:38:3f:85:7a:d1:1b:8b:f1:ff:76:24:49:c0:
c8:a0:88:33:9b:fb:e0:79:51:9a:f5:27:4f:05:6d:0f:36:13:
be:ae:b8:99:c9:b4:f7:ec:38:82:ca:93:a1:00:6c:48:3e:7b:
78:2d:69:23:f6:3f:22:b3:8a:f4:98:53:df:af:3d:1c:6c:cb:
b8:1f:59:76:e7:04:38:50:5b:1a:11:ca:51:de:fb:42:9d:f8:
56:59:c8:cd:79:71:71:3b:42:b8:7f:2b:1a:f3:82:56:70:4a:
01:ac:bd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:09 2025 by rpki-client