Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft
File: X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft (raw, json)
Hash identifier: qVraitFhLiaeO7XSlsqHR1kgOONPbAOkJ4GAy/U7nus=
Subject key identifier: FC:8F:13:87:28:4A:8A:7A:3B:85:26:AB:05:55:49:89:50:C0:1D:93
Authority key identifier: 5F:7A:12:35:46:FE:51:A9:E4:BE:DF:83:EE:E0:37:52:BD:96:39:D6
Certificate issuer: /CN=5f7a123546fe51a9e4bedf83eee03752bd9639d6
Certificate serial: 01965B39E9ADF339E6FCA58B3DB0BA2F9C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3oSNUb-Uankvt-D7uA3Ur2WOdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft
Manifest number: 02D8
Signing time: Tue 22 Apr 2025 02:00:44 +0000
Manifest this update: Tue 22 Apr 2025 02:00:44 +0000
Manifest next update: Wed 23 Apr 2025 02:00:44 +0000
Files and hashes: 1: X3oSNUb-Uankvt-D7uA3Ur2WOdY.crl (hash: 7LiUQ6FUg11gMWsPxfb1hP7GpJl5DDiPRWq/pT7TgJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3oSNUb-Uankvt-D7uA3Ur2WOdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:39:e9:ad:f3:39:e6:fc:a5:8b:3d:b0:ba:2f:9c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7a123546fe51a9e4bedf83eee03752bd9639d6
Validity
Not Before: Apr 22 02:00:44 2025 GMT
Not After : Apr 23 02:00:44 2025 GMT
Subject: CN=fc8f1387284a8a7a3b8526ab0555498950c01d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bc:c9:fb:2a:eb:54:fa:06:03:bd:25:1c:07:
e1:51:b8:f7:7a:bb:0f:dd:50:5c:f7:8a:ef:87:38:
27:17:46:a5:f7:2e:13:37:a4:cd:45:b4:2e:45:4d:
bd:bf:73:78:09:be:47:51:de:ae:ef:f3:ee:68:48:
db:6d:2e:41:24:af:02:e8:de:b1:81:1e:c2:85:ee:
84:fe:4d:d4:b3:81:cf:d2:54:3e:00:1f:03:2d:4d:
5c:ec:32:04:fb:41:bb:bd:b5:cc:7f:ed:cf:7a:3b:
56:f4:e1:d7:49:df:d8:fb:4a:f2:85:bb:1d:a8:a6:
19:3a:97:5c:ef:f9:1c:23:b8:19:ae:26:40:16:8d:
29:a2:35:c4:62:d0:a6:53:ac:84:27:d2:5c:9f:75:
71:0d:52:18:66:62:65:7d:2c:70:c4:e2:89:de:f3:
90:cd:a7:6e:6c:19:52:95:c2:f1:75:4d:fc:3b:50:
64:9c:0d:c0:7b:1a:ed:5b:39:fb:39:39:cc:74:0e:
8a:d9:62:f9:61:5a:3b:8c:72:59:70:75:9e:09:aa:
b0:29:44:a8:c7:44:ff:57:a4:40:0b:4e:5c:e1:ba:
db:4e:7c:93:ef:2d:e8:2f:3b:1b:79:66:95:8d:9b:
e6:96:82:e9:52:96:36:bb:5b:bf:a9:9d:98:6b:38:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8F:13:87:28:4A:8A:7A:3B:85:26:AB:05:55:49:89:50:C0:1D:93
X509v3 Authority Key Identifier:
keyid:5F:7A:12:35:46:FE:51:A9:E4:BE:DF:83:EE:E0:37:52:BD:96:39:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3oSNUb-Uankvt-D7uA3Ur2WOdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0c:4b:03:e7:2d:57:aa:26:ee:94:37:1d:67:d0:f8:b0:74:
d3:00:8c:28:47:b2:88:59:17:d8:d1:27:fa:03:58:89:85:cd:
ce:fa:78:68:0c:d8:54:dc:87:05:e9:98:43:c3:e7:09:f8:b7:
85:ab:27:15:9d:ae:19:6f:25:55:93:38:73:a5:f6:83:b3:32:
e7:5a:c9:94:f3:72:58:95:97:5b:38:2e:66:ee:6f:8f:e4:cb:
53:f3:25:cc:c6:a3:b9:e0:47:fa:30:03:7c:e2:4f:de:d6:44:
48:dc:94:15:08:1b:f9:0d:32:ee:d5:3b:6a:e4:a6:d1:17:43:
b7:f7:29:d4:b0:3f:fc:82:65:50:c7:43:7b:29:e0:71:25:f7:
06:2b:af:48:25:22:eb:47:99:03:e7:79:a9:c3:20:94:a5:84:
2a:ea:f5:2e:c0:81:04:52:a6:64:97:ea:44:ad:fb:c8:13:e7:
41:0d:6e:e9:19:3b:6c:13:2e:ab:9f:be:f7:d1:78:69:59:02:
c6:9f:ee:7f:a4:f8:47:6b:29:d3:a5:de:48:6a:fd:4d:06:b9:
34:a7:7b:f0:40:90:7c:79:fa:67:16:c5:3c:91:20:eb:dd:46:
99:0c:38:74:47:b9:dd:28:2f:df:44:7d:c0:2b:5b:e3:1f:66:
69:0d:76:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:57 2025 by rpki-client